<?xml version="1.0" encoding="UTF-8"?>
	<oval_definitions
		xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd"
		xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
		xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
		xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5"
		xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
	  <generator>
	      <oval:product_name>Marcus Updateinfo to OVAL Converter</oval:product_name>
	      <oval:schema_version>5.5</oval:schema_version>
	      <oval:timestamp>2018-05-02T04:13:58</oval:timestamp>
	  </generator>
<definitions>
<definition id="oval:org.opensuse.security:def:20022443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2002-2443</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2002-2443" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2443" source="CVE"/>
    <description>
    schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2002-2443.html">CVE-2002-2443</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 871411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 871411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 871411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 871411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 871411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 871411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 887734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 871411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 871411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 871411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 871411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 825985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2002-2443">SUSE bug 871411</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20040801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-0801</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2004-0801" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0801" source="CVE"/>
    <description>
    Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2004-0801.html">CVE-2004-0801</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 704608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 704608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-0801">SUSE bug 59233</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139597" comment="hplip-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151009" comment="hplip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139598" comment="hplip-hpijs-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151010" comment="hplip-hpijs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139599" comment="hplip-sane-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151011" comment="hplip-sane is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20041377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-1377</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2004-1377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1377" source="CVE"/>
    <description>
    The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2004-1377.html">CVE-2004-1377</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139188" comment="a2ps-4.14-2.32 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151012" comment="a2ps is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20042771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2004-2771</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2004-2771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2771" source="CVE"/>
    <description>
    The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2004-2771.html">CVE-2004-2771</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-2771">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-2771">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-2771">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-2771">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-2771">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-2771">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-2771">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2004-2771">SUSE bug 909208</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140241" comment="mailx-12.5-23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151013" comment="mailx is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20060855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-0855</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2006-0855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0855" source="CVE"/>
    <description>
    Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2006-0855.html">CVE-2006-0855</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-0855">SUSE bug 153057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-0855">SUSE bug 153057</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140427" comment="zoo-2.10-1028.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151015" comment="zoo is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20062607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-2607</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2006-2607" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2607" source="CVE"/>
    <description>
    do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2006-2607.html">CVE-2006-2607</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-2607">SUSE bug 178863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-2607">SUSE bug 537178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-2607">SUSE bug 537178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-2607">SUSE bug 537178</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139348" comment="cron-4.2-58.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151016" comment="cron is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139349" comment="cronie-1.4.11-58.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151017" comment="cronie is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20064197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-4197</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2006-4197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4197" source="CVE"/>
    <description>
    Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2006-4197.html">CVE-2006-4197</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-4197">SUSE bug 199134</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-4197">SUSE bug 199134</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-4197">SUSE bug 199134</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139941" comment="libmusicbrainz-devel-2.1.5-30.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151018" comment="libmusicbrainz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139942" comment="libmusicbrainz4-2.1.5-30.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151019" comment="libmusicbrainz4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20067234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-7234</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2006-7234" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7234" source="CVE"/>
    <description>
    Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2006-7234.html">CVE-2006-7234</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7234">SUSE bug 439427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7234">SUSE bug 439427</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140239" comment="lynx-2.8.7-4.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151020" comment="lynx is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20067243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-7243</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2006-7243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7243" source="CVE"/>
    <description>
    PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2006-7243.html">CVE-2006-7243</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7243">SUSE bug 654853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7243">SUSE bug 654853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7243">SUSE bug 893855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7243">SUSE bug 654853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7243">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7243">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7243">SUSE bug 1067090</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20067250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2006-7250</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2006-7250" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7250" source="CVE"/>
    <description>
    The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2006-7250.html">CVE-2006-7250</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 883307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2006-7250">SUSE bug 748738</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20071669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-1669</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2007-1669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1669" source="CVE"/>
    <description>
    zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and (3) AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2007-1669.html">CVE-2007-1669</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-1669">SUSE bug 271781</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140427" comment="zoo-2.10-1028.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151015" comment="zoo is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20073126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-3126</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2007-3126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3126" source="CVE"/>
    <description>
    Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2007-3126.html">CVE-2007-3126</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-3126">SUSE bug 1032241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-3126">SUSE bug 1032241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-3126">SUSE bug 1032241</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154069" comment="gimp-2.8.18-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151540" comment="gimp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154070" comment="gimp-devel-2.8.18-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153688" comment="gimp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154071" comment="gimp-help-browser-2.8.18-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151541" comment="gimp-help-browser is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154072" comment="gimp-lang-2.8.18-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151542" comment="gimp-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154073" comment="gimp-plugin-aa-2.8.18-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151543" comment="gimp-plugin-aa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154074" comment="gimp-plugins-python-2.8.18-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151544" comment="gimp-plugins-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154075" comment="libgimp-2_0-0-2.8.18-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151545" comment="libgimp-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154076" comment="libgimp-2_0-0-32bit-2.8.18-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153689" comment="libgimp-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154077" comment="libgimpui-2_0-0-2.8.18-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151546" comment="libgimpui-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154078" comment="libgimpui-2_0-0-32bit-2.8.18-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153690" comment="libgimpui-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4460</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2007-4460" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4460" source="CVE"/>
    <description>
    The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2007-4460.html">CVE-2007-4460</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-4460">SUSE bug 307073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-4460">SUSE bug 307073</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139606" comment="id3lib-3.8.3-268.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151068" comment="id3lib is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20074772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-4772</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2007-4772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4772" source="CVE"/>
    <description>
    The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2007-4772.html">CVE-2007-4772</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-4772">SUSE bug 329282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-4772">SUSE bug 329282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-4772">SUSE bug 329282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-4772">SUSE bug 329282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-4772">SUSE bug 329282</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20075970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-5970</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2007-5970" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5970" source="CVE"/>
    <description>
    MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table on which the user lacks privileges.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2007-5970.html">CVE-2007-5970</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-5970">SUSE bug 348307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-5970">SUSE bug 348307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-5970">SUSE bug 348307</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2007-6600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6600" source="CVE"/>
    <description>
    PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2007-6600.html">CVE-2007-6600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6600">SUSE bug 329282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6600">SUSE bug 537706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6600">SUSE bug 537706</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6720</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2007-6720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6720" source="CVE"/>
    <description>
    libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2007-6720.html">CVE-2007-6720</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6720">SUSE bug 468760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6720">SUSE bug 468760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6720">SUSE bug 468760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6720">SUSE bug 468760</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139933" comment="libmikmod3-3.3.7-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151102" comment="libmikmod3 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20076746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2007-6746</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2007-6746" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6746" source="CVE"/>
    <description>
    telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the subject's Common Name (CN), or (3) the expiration date of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2007-6746.html">CVE-2007-6746</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2007-6746">SUSE bug 817120</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140372" comment="telepathy-idle-0.2.0-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151103" comment="telepathy-idle is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20080928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-0928</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-0928" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0928" source="CVE"/>
    <description>
    Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-0928.html">CVE-2008-0928</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-0928">SUSE bug 362956</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-1142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1142" source="CVE"/>
    <description>
    rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections.  NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected.  NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-1142.html">CVE-2008-1142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1142">SUSE bug 415661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1142">SUSE bug 415661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1142">SUSE bug 415661</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140355" comment="rxvt-unicode-9.21-5.26 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151120" comment="rxvt-unicode is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1420</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-1420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1420" source="CVE"/>
    <description>
    Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-1420.html">CVE-2008-1420</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1420">SUSE bug 372246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1420">SUSE bug 372246</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140183" comment="libvorbis-devel-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151121" comment="libvorbis-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140184" comment="libvorbis0-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140185" comment="libvorbis0-32bit-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140186" comment="libvorbisenc2-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140187" comment="libvorbisenc2-32bit-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140188" comment="libvorbisfile3-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140189" comment="libvorbisfile3-32bit-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151127" comment="libvorbisfile3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-1483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1483" source="CVE"/>
    <description>
    OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-1483.html">CVE-2008-1483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 373527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 373527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 647633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 706386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 373527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 1069509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 373527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 1069509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 1069509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 1069509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 1069509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 1069509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 1069509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 1069509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1483">SUSE bug 1069509</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168064" comment="openssh-7.2p2-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168065" comment="openssh-askpass-gnome-7.2p2-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153167" comment="openssh-askpass-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168066" comment="openssh-cavs-7.2p2-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153168" comment="openssh-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168067" comment="openssh-fips-7.2p2-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153169" comment="openssh-fips is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168068" comment="openssh-helpers-7.2p2-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1686</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-1686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1686" source="CVE"/>
    <description>
    Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-1686.html">CVE-2008-1686</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1686">SUSE bug 377602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1686">SUSE bug 377602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1686">SUSE bug 377602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1686">SUSE bug 379098</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140395" comment="vorbis-tools-1.4.0-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151128" comment="vorbis-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140396" comment="vorbis-tools-lang-1.4.0-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151129" comment="vorbis-tools-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20081945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-1945</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-1945" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1945" source="CVE"/>
    <description>
    QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-1945.html">CVE-2008-1945</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1945">SUSE bug 362956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-1945">SUSE bug 362956</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2109</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-2109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2109" source="CVE"/>
    <description>
    field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-2109.html">CVE-2008-2109</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-2109">SUSE bug 387731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-2109">SUSE bug 387731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-2109">SUSE bug 387731</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139876" comment="libid3tag0-0.15.1b-185.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151130" comment="libid3tag0 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20082382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-2382</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-2382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2382" source="CVE"/>
    <description>
    The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-2382.html">CVE-2008-2382</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-2382">SUSE bug 461565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-2382">SUSE bug 464142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-2382">SUSE bug 464142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-2382">SUSE bug 464142</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3522</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-3522" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3522" source="CVE"/>
    <description>
    Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-3522.html">CVE-2008-3522</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-3522">SUSE bug 392410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-3522">SUSE bug 392410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-3522">SUSE bug 392410</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20083825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-3825</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-3825" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3825" source="CVE"/>
    <description>
    pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-3825.html">CVE-2008-3825</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-3825">SUSE bug 425861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-3825">SUSE bug 425861</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140281" comment="pam_krb5-2.4.4-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151135" comment="pam_krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140282" comment="pam_krb5-32bit-2.4.4-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151136" comment="pam_krb5-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4225</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-4225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4225" source="CVE"/>
    <description>
    Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-4225.html">CVE-2008-4225</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4225">SUSE bug 445677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4225">SUSE bug 445677</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4226</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-4226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4226" source="CVE"/>
    <description>
    Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-4226.html">CVE-2008-4226</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4226">SUSE bug 441368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4226">SUSE bug 441368</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4316</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-4316" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4316" source="CVE"/>
    <description>
    Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-4316.html">CVE-2008-4316</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4316">SUSE bug 449927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4316">SUSE bug 449927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4316">SUSE bug 449927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4316">SUSE bug 475541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4316">SUSE bug 382708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139503" comment="glib2-devel-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151142" comment="glib2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139504" comment="glib2-lang-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151143" comment="glib2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139505" comment="glib2-tools-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151144" comment="glib2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139506" comment="libgio-2_0-0-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151145" comment="libgio-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139507" comment="libgio-2_0-0-32bit-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151146" comment="libgio-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139508" comment="libglib-2_0-0-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151147" comment="libglib-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139509" comment="libglib-2_0-0-32bit-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151148" comment="libglib-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139510" comment="libgmodule-2_0-0-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151149" comment="libgmodule-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139511" comment="libgmodule-2_0-0-32bit-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151150" comment="libgmodule-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139512" comment="libgobject-2_0-0-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151151" comment="libgobject-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139513" comment="libgobject-2_0-0-32bit-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151152" comment="libgobject-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139514" comment="libgthread-2_0-0-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151153" comment="libgthread-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139515" comment="libgthread-2_0-0-32bit-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151154" comment="libgthread-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4409</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-4409" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4409" source="CVE"/>
    <description>
    libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by use of xmllint on a certain XML document, a different vulnerability than CVE-2003-1564 and CVE-2008-3281.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-4409.html">CVE-2008-4409</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4409">SUSE bug 432486</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4539</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4539" source="CVE"/>
    <description>
    Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow.  NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-4539.html">CVE-2008-4539</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4539">SUSE bug 435135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4539">SUSE bug 448551</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4539">SUSE bug 448551</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4575</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-4575" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4575" source="CVE"/>
    <description>
    Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service (crash) via (1) a long -cmd argument and (2) unspecified vectors related to "a bunch of potential string overflows."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-4575.html">CVE-2008-4575</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4575">SUSE bug 435979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4575">SUSE bug 435979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139614" comment="jhead-3.00-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151155" comment="jhead is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4641</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-4641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4641" source="CVE"/>
    <description>
    The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-4641.html">CVE-2008-4641</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4641">SUSE bug 435979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4641">SUSE bug 435979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4641">SUSE bug 435979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139614" comment="jhead-3.00-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151155" comment="jhead is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4690</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-4690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4690" source="CVE"/>
    <description>
    lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929.  NOTE: this might only be a vulnerability in limited deployments that have defined a lynxcgi: handler.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-4690.html">CVE-2008-4690</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4690">SUSE bug 439149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4690">SUSE bug 439149</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140239" comment="lynx-2.8.7-4.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151020" comment="lynx is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20084989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-4989</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-4989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4989" source="CVE"/>
    <description>
    The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-4989.html">CVE-2008-4989</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4989">SUSE bug 441856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4989">SUSE bug 467911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4989">SUSE bug 467911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4989">SUSE bug 467911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4989">SUSE bug 467911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4989">SUSE bug 467911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4989">SUSE bug 467911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4989">SUSE bug 467911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-4989">SUSE bug 392947</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5077</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-5077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077" source="CVE"/>
    <description>
    OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-5077.html">CVE-2008-5077</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 459468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 465675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 465676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 465675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 465676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 459468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 468866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 470968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 475108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 552497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 459468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 708266</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5077">SUSE bug 459468</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5913</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5913" source="CVE"/>
    <description>
    The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an "in-session phishing attack."
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-5913.html">CVE-2008-5913</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5913">SUSE bug 468762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5913">SUSE bug 468762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5913">SUSE bug 603356</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20085984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-5984</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-5984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5984" source="CVE"/>
    <description>
    Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-5984.html">CVE-2008-5984</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5984">SUSE bug 470096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5984">SUSE bug 470096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-5984">SUSE bug 470096</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139388" comment="dia-0.97.3-3.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151163" comment="dia is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139389" comment="dia-lang-0.97.3-3.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151164" comment="dia-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20087247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2008-7247</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2008-7247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7247" source="CVE"/>
    <description>
    sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2008-7247.html">CVE-2008-7247</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-7247">SUSE bug 557669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2008-7247">SUSE bug 604528</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0023</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0023" source="CVE"/>
    <description>
    The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0023.html">CVE-2009-0023</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0023">SUSE bug 510301</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139755" comment="libapr-util1-1.5.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151171" comment="libapr-util1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139756" comment="libapr-util1-devel-1.5.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151172" comment="libapr-util1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0035</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0035" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0035" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0035.html">CVE-2009-0035</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0035">SUSE bug 533396</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139195" comment="alsa-1.1.2-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151173" comment="alsa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139196" comment="alsa-devel-1.1.2-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151174" comment="alsa-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139197" comment="libasound2-1.1.2-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151175" comment="libasound2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139198" comment="libasound2-32bit-1.1.2-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151176" comment="libasound2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0037</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037" source="CVE"/>
    <description>
    The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0037.html">CVE-2009-0037</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0037">SUSE bug 475103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0037">SUSE bug 475103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0037">SUSE bug 475103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0037">SUSE bug 527990</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0040</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0040" source="CVE"/>
    <description>
    The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0040.html">CVE-2009-0040</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0040">SUSE bug 472745</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0040">SUSE bug 472745</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0040">SUSE bug 478625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0040">SUSE bug 478625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0040">SUSE bug 608040</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0159</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0159" source="CVE"/>
    <description>
    Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0159.html">CVE-2009-0159</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0159">SUSE bug 484653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0159">SUSE bug 501632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0159">SUSE bug 484653</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0163</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0163" source="CVE"/>
    <description>
    Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0163.html">CVE-2009-0163</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0163">SUSE bug 485895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0163">SUSE bug 485895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0163">SUSE bug 485895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0163">SUSE bug 485895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0163">SUSE bug 485895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0163">SUSE bug 485895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0163">SUSE bug 485895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0179</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0179" source="CVE"/>
    <description>
    libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service (application crash) by loading an XM file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0179.html">CVE-2009-0179</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0179">SUSE bug 468760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0179">SUSE bug 468760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0179">SUSE bug 468760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0179">SUSE bug 468760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0179">SUSE bug 468760</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139933" comment="libmikmod3-3.3.7-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151102" comment="libmikmod3 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0186</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0186" source="CVE"/>
    <description>
    Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0186.html">CVE-2009-0186</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0186">SUSE bug 481769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0186">SUSE bug 481769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0186">SUSE bug 481769</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119287" comment="libsndfile-devel-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119271" comment="libsndfile1-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119272" comment="libsndfile1-32bit-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0316</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0316" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0316" source="CVE"/>
    <description>
    Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0316.html">CVE-2009-0316</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0316">SUSE bug 470100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0316">SUSE bug 470100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0316">SUSE bug 470100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0316">SUSE bug 470100</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139592" comment="gvim-7.4.326-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151192" comment="gvim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139593" comment="vim-7.4.326-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139594" comment="vim-data-7.4.326-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0590</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590" source="CVE"/>
    <description>
    The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0590.html">CVE-2009-0590</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0590">SUSE bug 489641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0590">SUSE bug 489641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0590">SUSE bug 489641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0590">SUSE bug 489641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0590">SUSE bug 459468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0590">SUSE bug 629905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0591</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0591" source="CVE"/>
    <description>
    The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0591.html">CVE-2009-0591</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0591">SUSE bug 489641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0591">SUSE bug 489641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0591">SUSE bug 629905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0652</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0652" source="CVE"/>
    <description>
    The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by homoglyphs of the / (slash) and ? (question mark) characters in a subdomain of a .cn domain name, a different vulnerability than CVE-2005-0233.  NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perhaps are affected.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0652.html">CVE-2009-0652</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0652">SUSE bug 495473</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0688</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688" source="CVE"/>
    <description>
    Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0688.html">CVE-2009-0688</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0688">SUSE bug 499104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0688">SUSE bug 499104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0688">SUSE bug 499104</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139367" comment="cyrus-sasl-2.1.26-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151195" comment="cyrus-sasl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139368" comment="cyrus-sasl-crammd5-2.1.26-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151196" comment="cyrus-sasl-crammd5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139369" comment="cyrus-sasl-devel-2.1.26-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151197" comment="cyrus-sasl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139370" comment="cyrus-sasl-digestmd5-2.1.26-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151198" comment="cyrus-sasl-digestmd5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139371" comment="cyrus-sasl-gssapi-2.1.26-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151199" comment="cyrus-sasl-gssapi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139372" comment="cyrus-sasl-plain-2.1.26-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151200" comment="cyrus-sasl-plain is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139373" comment="libsasl2-3-2.1.26-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151201" comment="libsasl2-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139374" comment="libsasl2-3-32bit-2.1.26-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151202" comment="libsasl2-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0696</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0696" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0696" source="CVE"/>
    <description>
    The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0696.html">CVE-2009-0696</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0696">SUSE bug 526185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0696">SUSE bug 526185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0696">SUSE bug 526185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0696">SUSE bug 526185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0696">SUSE bug 526185</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0758</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0758" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0758" source="CVE"/>
    <description>
    The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0758.html">CVE-2009-0758</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0758">SUSE bug 480865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0758">SUSE bug 480865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0758">SUSE bug 480865</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139278" comment="avahi-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151208" comment="avahi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139279" comment="avahi-autoipd-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151209" comment="avahi-autoipd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139280" comment="avahi-compat-mDNSResponder-devel-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151210" comment="avahi-compat-mDNSResponder-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139281" comment="avahi-lang-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151211" comment="avahi-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139282" comment="libavahi-client3-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151212" comment="libavahi-client3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139283" comment="libavahi-client3-32bit-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151213" comment="libavahi-client3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139284" comment="libavahi-common3-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151214" comment="libavahi-common3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139285" comment="libavahi-common3-32bit-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151215" comment="libavahi-common3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139286" comment="libavahi-core7-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151216" comment="libavahi-core7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139287" comment="libavahi-devel-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151217" comment="libavahi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139288" comment="libdns_sd-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151218" comment="libdns_sd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0771</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0771" source="CVE"/>
    <description>
    The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption and assertion failures.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0771.html">CVE-2009-0771</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0771">SUSE bug 478625</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0772</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0772" source="CVE"/>
    <description>
    The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage collection, which triggers memory corruption.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0772.html">CVE-2009-0772</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0772">SUSE bug 478625</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0773</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0773" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0773" source="CVE"/>
    <description>
    The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains "some non-set elements," which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, __defineSetter__, and watch, which triggers a hang.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0773.html">CVE-2009-0773</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0773">SUSE bug 478625</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0774</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0774" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0774" source="CVE"/>
    <description>
    The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CVE-2009-0773.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0774.html">CVE-2009-0774</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0774">SUSE bug 478625</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0775</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0775" source="CVE"/>
    <description>
    Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements which were linked as a parent and child," which are not properly handled during garbage collection.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0775.html">CVE-2009-0775</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0775">SUSE bug 478625</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0776</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0776" source="CVE"/>
    <description>
    nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0776.html">CVE-2009-0776</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0776">SUSE bug 478625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0776">SUSE bug 465291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0777</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0777" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0777" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0777.html">CVE-2009-0777</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0777">SUSE bug 478625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0777">SUSE bug 478625</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0789</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0789" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789" source="CVE"/>
    <description>
    OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0789.html">CVE-2009-0789</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0789">SUSE bug 489641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0789">SUSE bug 489641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0789">SUSE bug 489641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0789">SUSE bug 459468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0789">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0789">SUSE bug 489641</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0793</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0793" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0793" source="CVE"/>
    <description>
    cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0793.html">CVE-2009-0793</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 490610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 490610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 490610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 490610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 490610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 490610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 490610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 521512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 490610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 490610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 521512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 521512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 490610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 521513</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 521513</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0793">SUSE bug 521513</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139910" comment="liblcms-devel-1.19-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151219" comment="liblcms-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139911" comment="liblcms1-1.19-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151220" comment="liblcms1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139912" comment="liblcms1-32bit-1.19-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151221" comment="liblcms1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139913" comment="python-lcms-1.19-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151222" comment="python-lcms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0799</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0799" source="CVE"/>
    <description>
    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0799.html">CVE-2009-0799</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0799">SUSE bug 487100</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0800</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0800" source="CVE"/>
    <description>
    Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0800.html">CVE-2009-0800</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0800">SUSE bug 487100</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0844</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0844" source="CVE"/>
    <description>
    The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0844.html">CVE-2009-0844</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0844">SUSE bug 486722</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0845</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0845" source="CVE"/>
    <description>
    The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0845.html">CVE-2009-0845</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0845">SUSE bug 485894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0845">SUSE bug 486722</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0846</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0846" source="CVE"/>
    <description>
    The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0846.html">CVE-2009-0846</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0846">SUSE bug 486723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0846">SUSE bug 486723</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0847</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0847" source="CVE"/>
    <description>
    The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmetic.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0847.html">CVE-2009-0847</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0847">SUSE bug 486722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0847">SUSE bug 486722</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0945</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0945" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0945" source="CVE"/>
    <description>
    Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0945.html">CVE-2009-0945</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 512559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 512559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 515124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 515124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 541632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 515124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 515124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 515124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 512559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 601349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 512559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 644114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0945">SUSE bug 512559</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20090946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-0946</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-0946" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0946" source="CVE"/>
    <description>
    Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-0946.html">CVE-2009-0946</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0946">SUSE bug 485889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0946">SUSE bug 496289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0946">SUSE bug 485889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0946">SUSE bug 541626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-0946">SUSE bug 541626</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1044</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1044" source="CVE"/>
    <description>
    Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1044.html">CVE-2009-1044</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1044">SUSE bug 488955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1044">SUSE bug 488955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1044">SUSE bug 465291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1044">SUSE bug 488955</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1169</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1169" source="CVE"/>
    <description>
    The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1169.html">CVE-2009-1169</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1169">SUSE bug 488955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1169">SUSE bug 488955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1169">SUSE bug 509766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1169">SUSE bug 509766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1169">SUSE bug 509766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1169">SUSE bug 509766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1169">SUSE bug 509766</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1179</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1179" source="CVE"/>
    <description>
    Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1179.html">CVE-2009-1179</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1179">SUSE bug 487100</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1180</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1180" source="CVE"/>
    <description>
    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1180.html">CVE-2009-1180</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1180">SUSE bug 487100</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1181</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1181" source="CVE"/>
    <description>
    The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1181.html">CVE-2009-1181</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1181">SUSE bug 487100</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1182</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1182" source="CVE"/>
    <description>
    Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1182.html">CVE-2009-1182</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1182">SUSE bug 487100</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1183</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1183" source="CVE"/>
    <description>
    The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1183.html">CVE-2009-1183</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1183">SUSE bug 487100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1183">SUSE bug 487100</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1187</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1187" source="CVE"/>
    <description>
    Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1187.html">CVE-2009-1187</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1187">SUSE bug 487100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1187">SUSE bug 487100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1187">SUSE bug 508153</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1187">SUSE bug 508154</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1187">SUSE bug 539875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1187">SUSE bug 566697</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1188</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1188" source="CVE"/>
    <description>
    Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1188.html">CVE-2009-1188</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 487100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 487100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 508153</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 508154</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 508154</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 508153</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 508154</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 508154</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 539875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 539875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 546400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 539875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 539875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 539875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 539875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1188">SUSE bug 566697</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1191" source="CVE"/>
    <description>
    mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1191.html">CVE-2009-1191</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1191">SUSE bug 521943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1191">SUSE bug 539571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1191">SUSE bug 521943</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1195</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1195" source="CVE"/>
    <description>
    The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1195.html">CVE-2009-1195</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 512583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 512583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 539571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 539571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 512583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 539571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 539571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1195">SUSE bug 513080</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1210" source="CVE"/>
    <description>
    Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1210.html">CVE-2009-1210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1210">SUSE bug 491449</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1210">SUSE bug 493584</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1252</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1252" source="CVE"/>
    <description>
    Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1252.html">CVE-2009-1252</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1252">SUSE bug 501632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1252">SUSE bug 501632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1252">SUSE bug 501632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1252">SUSE bug 501632</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1267</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1267" source="CVE"/>
    <description>
    Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause a denial of service (crash) via unknown attack vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1267.html">CVE-2009-1267</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1267">SUSE bug 493584</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1268</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1268" source="CVE"/>
    <description>
    The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1268.html">CVE-2009-1268</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1268">SUSE bug 493584</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1269</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1269" source="CVE"/>
    <description>
    Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1269.html">CVE-2009-1269</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1269">SUSE bug 493584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1269">SUSE bug 493584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1269">SUSE bug 493584</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1273</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1273" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1273" source="CVE"/>
    <description>
    pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1273.html">CVE-2009-1273</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1273">SUSE bug 492764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1273">SUSE bug 507729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1273">SUSE bug 507729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1273">SUSE bug 507729</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140283" comment="pam_ssh-2.1-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151252" comment="pam_ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140284" comment="pam_ssh-32bit-2.1-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151253" comment="pam_ssh-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1302</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1302" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1302" source="CVE"/>
    <description>
    The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1302.html">CVE-2009-1302</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1302">SUSE bug 495473</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1303</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1303" source="CVE"/>
    <description>
    The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1303.html">CVE-2009-1303</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1303">SUSE bug 495473</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1304</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1304" source="CVE"/>
    <description>
    The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1304.html">CVE-2009-1304</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1304">SUSE bug 495473</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1305</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1305" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1305" source="CVE"/>
    <description>
    The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1305.html">CVE-2009-1305</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1305">SUSE bug 495473</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1306</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1306" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1306" source="CVE"/>
    <description>
    The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1306.html">CVE-2009-1306</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1306">SUSE bug 495473</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1307</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1307" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1307" source="CVE"/>
    <description>
    The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1307.html">CVE-2009-1307</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1307">SUSE bug 495473</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1307">SUSE bug 515951</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1308</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1308" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1308.html">CVE-2009-1308</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1308">SUSE bug 495473</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1309</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1309" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1309" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1309.html">CVE-2009-1309</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1309">SUSE bug 495473</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1310</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1310" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1310" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1310.html">CVE-2009-1310</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1310">SUSE bug 495473</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1311</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1311" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1311.html">CVE-2009-1311</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1311">SUSE bug 495473</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1311">SUSE bug 465291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1311">SUSE bug 515951</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1312</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1312" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1312" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1312.html">CVE-2009-1312</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1312">SUSE bug 495473</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1312">SUSE bug 495473</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1312">SUSE bug 495473</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1313</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1313" source="CVE"/>
    <description>
    The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors.  NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1313.html">CVE-2009-1313</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1313">SUSE bug 500909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1313">SUSE bug 502062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1313">SUSE bug 502062</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1377</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377" source="CVE"/>
    <description>
    The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1377.html">CVE-2009-1377</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1377">SUSE bug 504687</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1377">SUSE bug 459468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1377">SUSE bug 629905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1378</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378" source="CVE"/>
    <description>
    Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1378.html">CVE-2009-1378</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1378">SUSE bug 504687</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1378">SUSE bug 459468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1378">SUSE bug 629905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1379</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379" source="CVE"/>
    <description>
    Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1379.html">CVE-2009-1379</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1379">SUSE bug 504687</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1379">SUSE bug 504687</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1379">SUSE bug 504687</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1379">SUSE bug 459468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1379">SUSE bug 629905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1384</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1384" source="CVE"/>
    <description>
    pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1384.html">CVE-2009-1384</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1384">SUSE bug 507729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1384">SUSE bug 507729</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140281" comment="pam_krb5-2.4.4-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151135" comment="pam_krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140282" comment="pam_krb5-32bit-2.4.4-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151136" comment="pam_krb5-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1386</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386" source="CVE"/>
    <description>
    ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1386.html">CVE-2009-1386</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1386">SUSE bug 509031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1386">SUSE bug 509031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1386">SUSE bug 515659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1386">SUSE bug 459468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1386">SUSE bug 629905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1387</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1387" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1387" source="CVE"/>
    <description>
    The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1387.html">CVE-2009-1387</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1387">SUSE bug 509031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1387">SUSE bug 509031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1387">SUSE bug 515659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1387">SUSE bug 515659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1387">SUSE bug 459468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1387">SUSE bug 629905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1563</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1563" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-0689.  Reason: This candidate is a duplicate of CVE-2009-0689.  Certain codebase relationships were not originally clear.  Notes: All CVE users should reference CVE-2009-0689 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1563.html">CVE-2009-1563</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1563">SUSE bug 546371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1563">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1563">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1563">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1563">SUSE bug 522109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1563">SUSE bug 557126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1563">SUSE bug 557127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1563">SUSE bug 557128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1563">SUSE bug 557126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1563">SUSE bug 557671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1571</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1571" source="CVE"/>
    <description>
    Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1571.html">CVE-2009-1571</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1571">SUSE bug 576969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1571">SUSE bug 581160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1571">SUSE bug 584499</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1720</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1720" source="CVE"/>
    <description>
    Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to (1) the Imf::PreviewImage::PreviewImage function and (2) compressor constructors.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1720.html">CVE-2009-1720</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1720">SUSE bug 527538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1720">SUSE bug 527539</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1720">SUSE bug 527539</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139665" comment="libIlmImf-Imf_2_1-21-2.1.0-7.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151254" comment="libIlmImf-Imf_2_1-21 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139666" comment="openexr-devel-2.1.0-7.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151255" comment="openexr-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1721</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1721" source="CVE"/>
    <description>
    The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1721.html">CVE-2009-1721</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1721">SUSE bug 527538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1721">SUSE bug 527539</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139665" comment="libIlmImf-Imf_2_1-21-2.1.0-7.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151254" comment="libIlmImf-Imf_2_1-21 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139666" comment="openexr-devel-2.1.0-7.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151255" comment="openexr-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091882" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1882</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1882" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1882" source="CVE"/>
    <description>
    Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1882.html">CVE-2009-1882</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1882">SUSE bug 507728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1882">SUSE bug 507728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1882">SUSE bug 507728</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139159" comment="GraphicsMagick-devel-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139160" comment="libGraphicsMagick-Q16-3-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139161" comment="libGraphicsMagick3-config-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139162" comment="libGraphicsMagickWand-Q16-2-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1885</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1885" source="CVE"/>
    <description>
    Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrated by the Codenomicon XML fuzzing framework.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1885.html">CVE-2009-1885</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1885">SUSE bug 530708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1885">SUSE bug 530708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1885">SUSE bug 530708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140229" comment="libxerces-c-3_1-3.1.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151260" comment="libxerces-c-3_1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091886" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1886</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1886" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1886" source="CVE"/>
    <description>
    Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1886.html">CVE-2009-1886</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1886">SUSE bug 513360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1886">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1886">SUSE bug 515479</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139312" comment="cifs-utils-6.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151261" comment="cifs-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1888</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1888" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1888" source="CVE"/>
    <description>
    The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1888.html">CVE-2009-1888</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1888">SUSE bug 513360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1888">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1888">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1888">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1888">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1888">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1888">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1888">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1888">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1888">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1888">SUSE bug 515479</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139312" comment="cifs-utils-6.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151261" comment="cifs-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1890</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1890" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1890" source="CVE"/>
    <description>
    The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1890.html">CVE-2009-1890</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1890">SUSE bug 519194</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1890">SUSE bug 519194</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1890">SUSE bug 519194</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1890">SUSE bug 519194</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1890">SUSE bug 519194</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091891" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1891</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1891" source="CVE"/>
    <description>
    The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1891.html">CVE-2009-1891</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1891">SUSE bug 521906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1891">SUSE bug 521906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1891">SUSE bug 521906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1891">SUSE bug 521906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1891">SUSE bug 521906</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1892</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1892" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1892" source="CVE"/>
    <description>
    dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and hardware ethernet configuration settings are both used, allows remote attackers to cause a denial of service (daemon crash) via unspecified requests.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1892.html">CVE-2009-1892</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1892">SUSE bug 519413</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1892">SUSE bug 519413</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1892">SUSE bug 519413</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1892">SUSE bug 519413</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1892">SUSE bug 519413</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1955</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1955" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1955" source="CVE"/>
    <description>
    The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1955.html">CVE-2009-1955</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1955">SUSE bug 509825</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1955">SUSE bug 510301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1955">SUSE bug 529591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1955">SUSE bug 992541</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1956</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1956" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1956" source="CVE"/>
    <description>
    Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1956.html">CVE-2009-1956</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1956">SUSE bug 510301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1956">SUSE bug 510301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1956">SUSE bug 510301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1956">SUSE bug 510301</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20091959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-1959</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-1959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1959" source="CVE"/>
    <description>
    Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-1959.html">CVE-2009-1959</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1959">SUSE bug 510837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1959">SUSE bug 510837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1959">SUSE bug 510837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1959">SUSE bug 510837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-1959">SUSE bug 510837</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139609" comment="irssi-0.8.20-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2285</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2285" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2285" source="CVE"/>
    <description>
    Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2285.html">CVE-2009-2285</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2285">SUSE bug 518698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2285">SUSE bug 518698</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2347</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2347" source="CVE"/>
    <description>
    Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2347.html">CVE-2009-2347</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2347">SUSE bug 519796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2347">SUSE bug 519796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2347">SUSE bug 519796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2347">SUSE bug 519796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2347">SUSE bug 616827</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2411</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2411" source="CVE"/>
    <description>
    Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2411.html">CVE-2009-2411</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2411">SUSE bug 528714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2411">SUSE bug 528714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2411">SUSE bug 528714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2411">SUSE bug 802057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2411">SUSE bug 528714</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2412</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412" source="CVE"/>
    <description>
    Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2412.html">CVE-2009-2412</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 528714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 529591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 529591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 529591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 529591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 528714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 529591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 529591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 529591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 529591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 529591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 529591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 802057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2412">SUSE bug 529591</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139755" comment="libapr-util1-1.5.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151171" comment="libapr-util1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139756" comment="libapr-util1-devel-1.5.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151172" comment="libapr-util1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139757" comment="libapr1-1.5.1-6.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151326" comment="libapr1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139758" comment="libapr1-devel-1.5.1-6.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151327" comment="libapr1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2417</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2417" source="CVE"/>
    <description>
    lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2417.html">CVE-2009-2417</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2417">SUSE bug 527990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2417">SUSE bug 527990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2417">SUSE bug 528372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2417">SUSE bug 528372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2417">SUSE bug 528372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2417">SUSE bug 528372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2470</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2470" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2470" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2470.html">CVE-2009-2470</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2473</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2473" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2473" source="CVE"/>
    <description>
    neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2473.html">CVE-2009-2473</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2473">SUSE bug 532345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2473">SUSE bug 528370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2473">SUSE bug 532345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2473">SUSE bug 532345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2473">SUSE bug 532345</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139951" comment="libneon27-0.30.1-3.30 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151328" comment="libneon27 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2474</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2474" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2474" source="CVE"/>
    <description>
    neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2474.html">CVE-2009-2474</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2474">SUSE bug 528370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2474">SUSE bug 528370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2474">SUSE bug 528370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2474">SUSE bug 528370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139951" comment="libneon27-0.30.1-3.30 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151328" comment="libneon27 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2624</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2624" source="CVE"/>
    <description>
    The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service (application crash or infinite loop) or possibly execute arbitrary code via a crafted archive.  NOTE: this issue is caused by a CVE-2006-4334 regression.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2624.html">CVE-2009-2624</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2624">SUSE bug 570331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2624">SUSE bug 570331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2624">SUSE bug 570331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2624">SUSE bug 570331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2624">SUSE bug 588113</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139595" comment="gzip-1.6-10.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151329" comment="gzip is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2625</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2625" source="CVE"/>
    <description>
    XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2625.html">CVE-2009-2625</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 530717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 534025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 525562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 534721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 537969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 540945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 540945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 540945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 548655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 550664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 553220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 558892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 581162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 581765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 610080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 611931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 611932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 610080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2625">SUSE bug 611931</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139435" comment="expat-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139436" comment="libexpat-devel-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139437" comment="libexpat1-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139438" comment="libexpat1-32bit-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2654</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2654" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2654.html">CVE-2009-2654</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2654">SUSE bug 527489</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2666</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2666" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2666" source="CVE"/>
    <description>
    socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2666.html">CVE-2009-2666</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2666">SUSE bug 528746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2666">SUSE bug 528746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2666">SUSE bug 528746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2666">SUSE bug 528746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2666">SUSE bug 528746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2666">SUSE bug 528746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2666">SUSE bug 528746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2666">SUSE bug 528746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139439" comment="fetchmail-6.3.26-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151334" comment="fetchmail is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2694</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2694" source="CVE"/>
    <description>
    The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2694.html">CVE-2009-2694</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2694">SUSE bug 527100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2694">SUSE bug 527100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2694">SUSE bug 527100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2694">SUSE bug 527100</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2699</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2699" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2699" source="CVE"/>
    <description>
    The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2699.html">CVE-2009-2699</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2699">SUSE bug 1078450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2703</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2703" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2703" source="CVE"/>
    <description>
    libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2703.html">CVE-2009-2703</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2703">SUSE bug 537214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2703">SUSE bug 537214</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2813</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2813" source="CVE"/>
    <description>
    Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2813.html">CVE-2009-2813</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2813">SUSE bug 539517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2813">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2813">SUSE bug 539517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2813">SUSE bug 543115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2813">SUSE bug 539517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2813">SUSE bug 539517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2813">SUSE bug 539517</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139312" comment="cifs-utils-6.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151261" comment="cifs-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2820</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2820" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2820" source="CVE"/>
    <description>
    The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2820.html">CVE-2009-2820</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2820">SUSE bug 548317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2820">SUSE bug 548317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2820">SUSE bug 551563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2820">SUSE bug 548317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2820">SUSE bug 548317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2820">SUSE bug 551563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2820">SUSE bug 574336</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2905</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2905" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2905" source="CVE"/>
    <description>
    Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2905.html">CVE-2009-2905</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2905">SUSE bug 540930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2905">SUSE bug 540930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2905">SUSE bug 540930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2905">SUSE bug 540930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2905">SUSE bug 540930</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139952" comment="libnewt0_52-0.52.16-4.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151340" comment="libnewt0_52 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2906</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2906" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2906" source="CVE"/>
    <description>
    smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2906.html">CVE-2009-2906</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2906">SUSE bug 543115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2906">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2906">SUSE bug 543115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2906">SUSE bug 543115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2906">SUSE bug 543115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2906">SUSE bug 543115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2906">SUSE bug 543115</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139312" comment="cifs-utils-6.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151261" comment="cifs-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20092948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-2948</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-2948" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2948" source="CVE"/>
    <description>
    mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-2948.html">CVE-2009-2948</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2948">SUSE bug 542150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2948">SUSE bug 515479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2948">SUSE bug 542150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2948">SUSE bug 543115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2948">SUSE bug 542150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-2948">SUSE bug 542150</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139312" comment="cifs-utils-6.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151261" comment="cifs-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3026</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3026" source="CVE"/>
    <description>
    protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3026.html">CVE-2009-3026</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3026">SUSE bug 535570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3026">SUSE bug 535570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3026">SUSE bug 535570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3026">SUSE bug 550170</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3050</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3050" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3050" source="CVE"/>
    <description>
    Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment.  NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using an AFM font file with a long glyph name, but these vectors do not cross privilege boundaries.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3050.html">CVE-2009-3050</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3050">SUSE bug 535943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3050">SUSE bug 523721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3050">SUSE bug 535943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3050">SUSE bug 535943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3050">SUSE bug 535943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3050">SUSE bug 535943</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139600" comment="htmldoc-1.8.28-4.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151341" comment="htmldoc is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3069</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3069" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3069.html">CVE-2009-3069</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3069">SUSE bug 534458</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3070</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3070" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3070.html">CVE-2009-3070</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3070">SUSE bug 534458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3070">SUSE bug 538290</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3071</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3071" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3071.html">CVE-2009-3071</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3071">SUSE bug 534458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3071">SUSE bug 538290</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3072</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3072" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3072.html">CVE-2009-3072</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3072">SUSE bug 534458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3072">SUSE bug 538290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3072">SUSE bug 590499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3072">SUSE bug 607935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3073</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3073" source="CVE"/>
    <description>
    Unspecified vulnerability in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3073.html">CVE-2009-3073</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3073">SUSE bug 534458</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3074</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3074" source="CVE"/>
    <description>
    Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3074.html">CVE-2009-3074</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3074">SUSE bug 538290</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3075</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3075" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3075.html">CVE-2009-3075</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3075">SUSE bug 534458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3075">SUSE bug 538290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3075">SUSE bug 590499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3075">SUSE bug 607935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3077</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3077" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3077.html">CVE-2009-3077</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3077">SUSE bug 534458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3077">SUSE bug 538290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3077">SUSE bug 590499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3077">SUSE bug 607935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3078</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3078" source="CVE"/>
    <description>
    Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height property.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3078.html">CVE-2009-3078</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3078">SUSE bug 534458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3078">SUSE bug 538290</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3079</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3079" source="CVE"/>
    <description>
    Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3079.html">CVE-2009-3079</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3079">SUSE bug 534458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3079">SUSE bug 538290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3079">SUSE bug 538290</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3083</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3083" source="CVE"/>
    <description>
    The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3083.html">CVE-2009-3083</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3083">SUSE bug 536602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3083">SUSE bug 550170</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3084</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3084" source="CVE"/>
    <description>
    The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect "UTF16-LE" charset name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3084.html">CVE-2009-3084</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3084">SUSE bug 536602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3084">SUSE bug 550170</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3085</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3085" source="CVE"/>
    <description>
    The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3085.html">CVE-2009-3085</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3085">SUSE bug 536602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3085">SUSE bug 536602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3085">SUSE bug 536602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3085">SUSE bug 536602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3085">SUSE bug 550170</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3094</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3094" source="CVE"/>
    <description>
    The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3094.html">CVE-2009-3094</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3094">SUSE bug 538322</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3095</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3095" source="CVE"/>
    <description>
    The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3095.html">CVE-2009-3095</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3095">SUSE bug 538322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3095">SUSE bug 538322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3095">SUSE bug 538322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3095">SUSE bug 538322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3095">SUSE bug 538322</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093235" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3235</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3235" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3235.html">CVE-2009-3235</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3235">SUSE bug 539876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3235">SUSE bug 539877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3235">SUSE bug 539877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3235">SUSE bug 539877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3235">SUSE bug 539877</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139363" comment="cyradm-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151342" comment="cyradm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139364" comment="cyrus-imapd-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151343" comment="cyrus-imapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139365" comment="perl-Cyrus-IMAP-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151344" comment="perl-Cyrus-IMAP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139366" comment="perl-Cyrus-SIEVE-managesieve-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151345" comment="perl-Cyrus-SIEVE-managesieve is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3241</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3241" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3241" source="CVE"/>
    <description>
    Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3241.html">CVE-2009-3241</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3241">SUSE bug 541654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3241">SUSE bug 541654</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3242</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3242" source="CVE"/>
    <description>
    Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors related to "an uninitialized dissector handle," which triggers an assertion failure.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3242.html">CVE-2009-3242</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3242">SUSE bug 541659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3242">SUSE bug 541659</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3243</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3243" source="CVE"/>
    <description>
    Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote attackers to cause a denial of service (application crash) via unknown vectors related to TLS 1.2 conversations.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3243.html">CVE-2009-3243</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3243">SUSE bug 541655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3243">SUSE bug 541655</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3274</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3274" source="CVE"/>
    <description>
    Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3274.html">CVE-2009-3274</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3274">SUSE bug 534458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3274">SUSE bug 534458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3274">SUSE bug 534458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3274">SUSE bug 534458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3274">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3274">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3274">SUSE bug 522109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3295</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3295" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3295" source="CVE"/>
    <description>
    The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a ticket request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3295.html">CVE-2009-3295</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3295">SUSE bug 561347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3295">SUSE bug 561347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3295">SUSE bug 561347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3295">SUSE bug 561347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3295">SUSE bug 561347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3295">SUSE bug 561347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3295">SUSE bug 561347</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3297</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3297" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3297" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-0787, CVE-2010-0788, CVE-2010-0789.  Reason: this candidate was intended for one issue in Samba, but it was used for multiple distinct issues, including one in FUSE and one in ncpfs.  Notes: All CVE users should consult CVE-2010-0787 (Samba), CVE-2010-0788 (ncpfs), and CVE-2010-0789 (FUSE) to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Not set</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3297.html">CVE-2009-3297</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 550002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 550003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 577925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 583535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 583536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 583536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 550002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 550003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 583536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 594263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 550004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 620680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3297">SUSE bug 651598</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139459" comment="fuse-2.9.3-9.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151346" comment="fuse is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139460" comment="libfuse2-2.9.3-9.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151347" comment="libfuse2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3370</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3370" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3370.html">CVE-2009-3370</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3370">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3370">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3370">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3370">SUSE bug 522109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3371</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3371" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3371" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by creating JavaScript web-workers recursively.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3371.html">CVE-2009-3371</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3371">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3371">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3371">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3371">SUSE bug 522109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3372</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3372" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3372" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3372.html">CVE-2009-3372</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3372">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3372">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3372">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3372">SUSE bug 522109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3373</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3373" source="CVE"/>
    <description>
    Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3373.html">CVE-2009-3373</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3373">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3373">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3373">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3373">SUSE bug 522109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3373">SUSE bug 557686</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3374</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3374" source="CVE"/>
    <description>
    The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to "doubly-wrapped objects."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3374.html">CVE-2009-3374</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3374">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3374">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3374">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3374">SUSE bug 522109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3375</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3375" source="CVE"/>
    <description>
    content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3375.html">CVE-2009-3375</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3375">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3375">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3375">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3375">SUSE bug 522109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3376</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3376.html">CVE-2009-3376</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3376">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3376">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3376">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3376">SUSE bug 522109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3376">SUSE bug 590499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3376">SUSE bug 607935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3377</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3377" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3377.html">CVE-2009-3377</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3377">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3377">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3377">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3377">SUSE bug 522109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3378</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3378" source="CVE"/>
    <description>
    The oggplay_data_handle_theora_frame function in media/liboggplay/src/liboggplay/oggplay_data.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a crafted .ogg video file.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3378.html">CVE-2009-3378</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3378">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3378">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3378">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3378">SUSE bug 522109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3379</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3379" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.  NOTE: this might overlap CVE-2009-2663.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3379.html">CVE-2009-3379</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3379">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3379">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3379">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3379">SUSE bug 522109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3379">SUSE bug 608192</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140183" comment="libvorbis-devel-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151121" comment="libvorbis-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140184" comment="libvorbis0-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140185" comment="libvorbis0-32bit-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140186" comment="libvorbisenc2-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140187" comment="libvorbisenc2-32bit-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140188" comment="libvorbisfile3-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140189" comment="libvorbisfile3-32bit-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151127" comment="libvorbisfile3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3380</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3380" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3380.html">CVE-2009-3380</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3380">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3380">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3380">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3380">SUSE bug 522109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3381</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3381" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3381.html">CVE-2009-3381</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3381">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3381">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3381">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3381">SUSE bug 522109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3383</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3383" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3383.html">CVE-2009-3383</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3383">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3383">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3383">SUSE bug 545277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3383">SUSE bug 522109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3388</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3388" source="CVE"/>
    <description>
    liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to "memory safety issues."
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3388.html">CVE-2009-3388</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3388">SUSE bug 559807</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3389</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3389" source="CVE"/>
    <description>
    Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3389.html">CVE-2009-3389</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3389">SUSE bug 559807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3389">SUSE bug 581722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3389">SUSE bug 581722</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3553</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3553" source="CVE"/>
    <description>
    Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3553.html">CVE-2009-3553</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 554861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 554861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 554861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 578215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 578215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 578215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 578215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 578215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 578215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 578215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 574336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 578215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 578215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 578215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 554861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3553">SUSE bug 578215</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3555</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555" source="CVE"/>
    <description>
    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3555.html">CVE-2009-3555</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 553641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 553641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 554084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 554085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 554069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 554069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 555177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 557168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 554069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 564507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 564507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 566041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 552497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 459468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 584292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 590826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 584292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 588996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 586567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 592589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 594415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 604782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 614753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 586809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 622073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 623905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 646073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 646906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 648140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 642531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 648950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 659926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 586809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 670152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 704832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 728876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 753357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 753357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 753357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 753357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 753357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 753357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 753357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 753357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 704832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 799454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 799454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 799454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 791794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 815621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 554084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 979060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 979060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 979060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 979060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 986238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3555">SUSE bug 1077582</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3560</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560" source="CVE"/>
    <description>
    The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3560.html">CVE-2009-3560</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3560">SUSE bug 558892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3560">SUSE bug 561561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3560">SUSE bug 581162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3560">SUSE bug 561561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3560">SUSE bug 581765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3560">SUSE bug 550666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3560">SUSE bug 561561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3560">SUSE bug 611931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3560">SUSE bug 694595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3560">SUSE bug 725950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139435" comment="expat-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139755" comment="libapr-util1-1.5.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151171" comment="libapr-util1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139756" comment="libapr-util1-devel-1.5.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151172" comment="libapr-util1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139436" comment="libexpat-devel-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139437" comment="libexpat1-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139438" comment="libexpat1-32bit-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3607</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3607" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3607" source="CVE"/>
    <description>
    Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3607.html">CVE-2009-3607</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3607">SUSE bug 546393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3607">SUSE bug 546393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3607">SUSE bug 566697</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3608</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3608" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3608" source="CVE"/>
    <description>
    Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3608.html">CVE-2009-3608</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3608">SUSE bug 543090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3608">SUSE bug 543410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3608">SUSE bug 546400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3608">SUSE bug 543410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3608">SUSE bug 546400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3608">SUSE bug 546404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3608">SUSE bug 556049</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3608">SUSE bug 566697</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3615</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3615" source="CVE"/>
    <description>
    The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3615.html">CVE-2009-3615</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3615">SUSE bug 548072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3615">SUSE bug 550170</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3617</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3617" source="CVE"/>
    <description>
    Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3617.html">CVE-2009-3617</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3617">SUSE bug 547318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3617">SUSE bug 573072</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139259" comment="aria2-1.24.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151348" comment="aria2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139260" comment="aria2-lang-1.24.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151349" comment="aria2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139261" comment="libaria2-0-1.24.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154087" comment="libaria2-0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3627</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3627" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3627" source="CVE"/>
    <description>
    The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3627.html">CVE-2009-3627</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3627">SUSE bug 550076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3627">SUSE bug 550076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3627">SUSE bug 585716</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140292" comment="perl-HTML-Parser-3.71-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151350" comment="perl-HTML-Parser is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3700</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3700" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3700" source="CVE"/>
    <description>
    Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to "emergency mode."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3700.html">CVE-2009-3700</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3700">SUSE bug 550930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3700">SUSE bug 550930</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140362" comment="squidGuard-1.4-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153256" comment="squidGuard is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3720</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720" source="CVE"/>
    <description>
    The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3720.html">CVE-2009-3720</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 534721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 550664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 550666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 558892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 534721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 581162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 561561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 581765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 550666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 561561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 611931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3720">SUSE bug 725950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139435" comment="expat-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139755" comment="libapr-util1-1.5.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151171" comment="libapr-util1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139756" comment="libapr-util1-devel-1.5.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151172" comment="libapr-util1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139436" comment="libexpat-devel-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139437" comment="libexpat1-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139438" comment="libexpat1-32bit-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3736</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3736" source="CVE"/>
    <description>
    ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3736.html">CVE-2009-3736</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3736">SUSE bug 556122</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139159" comment="GraphicsMagick-devel-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139160" comment="libGraphicsMagick-Q16-3-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139161" comment="libGraphicsMagick3-config-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139162" comment="libGraphicsMagickWand-Q16-2-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139925" comment="libltdl7-2.4.2-17.54 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151351" comment="libltdl7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139926" comment="libltdl7-32bit-2.4.2-17.54 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151352" comment="libltdl7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139927" comment="libtool-2.4.2-17.54 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151353" comment="libtool is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3826</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3826" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3826" source="CVE"/>
    <description>
    Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3826.html">CVE-2009-3826</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3826">SUSE bug 550930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3826">SUSE bug 550930</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140362" comment="squidGuard-1.4-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153256" comment="squidGuard is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3939</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3939" source="CVE"/>
    <description>
    The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3939.html">CVE-2009-3939</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3939">SUSE bug 555173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3939">SUSE bug 557180</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3939">SUSE bug 557180</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3979</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3979" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3979" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3979.html">CVE-2009-3979</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3979">SUSE bug 559807</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3980</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3980" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3980" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3980.html">CVE-2009-3980</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3980">SUSE bug 559807</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3982</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3982" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3982" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3982.html">CVE-2009-3982</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3982">SUSE bug 559807</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3983</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3983" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3983.html">CVE-2009-3983</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3983">SUSE bug 559807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3983">SUSE bug 590499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3983">SUSE bug 607935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3984</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3984" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3984.html">CVE-2009-3984</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3984">SUSE bug 559807</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3985</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3985" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3985.html">CVE-2009-3985</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3985">SUSE bug 559807</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3995</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3995" source="CVE"/>
    <description>
    Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3995.html">CVE-2009-3995</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 577875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 577875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 577875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 752802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 752802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 752802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 752802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 752802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 752802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 752802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 752802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 577875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 752802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3995">SUSE bug 625547</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139933" comment="libmikmod3-3.3.7-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151102" comment="libmikmod3 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20093996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-3996</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-3996" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3996" source="CVE"/>
    <description>
    Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-3996.html">CVE-2009-3996</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3996">SUSE bug 577875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3996">SUSE bug 577875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-3996">SUSE bug 577875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139933" comment="libmikmod3-3.3.7-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151102" comment="libmikmod3 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4012</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4012" source="CVE"/>
    <description>
    Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4012.html">CVE-2009-4012</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4012">SUSE bug 569615</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140141" comment="libthai-data-0.1.25-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154088" comment="libthai-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140142" comment="libthai0-0.1.25-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154089" comment="libthai0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140143" comment="libthai0-32bit-0.1.25-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154090" comment="libthai0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4019</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4019" source="CVE"/>
    <description>
    mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4019.html">CVE-2009-4019</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4019">SUSE bug 557669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4019">SUSE bug 557669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4019">SUSE bug 557669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4019">SUSE bug 604528</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4022</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022" source="CVE"/>
    <description>
    Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4022.html">CVE-2009-4022</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4022">SUSE bug 558260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4022">SUSE bug 558260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4022">SUSE bug 570912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4022">SUSE bug 570912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4022">SUSE bug 570912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4022">SUSE bug 644911</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4026</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4026" source="CVE"/>
    <description>
    The mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous "code shuffling patch."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4026.html">CVE-2009-4026</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4026">SUSE bug 558267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4026">SUSE bug 558267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4026">SUSE bug 558267</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094027" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4027</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4027" source="CVE"/>
    <description>
    Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation session.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4027.html">CVE-2009-4027</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4027">SUSE bug 558267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4027">SUSE bug 558267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4027">SUSE bug 558267</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4028</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4028" source="CVE"/>
    <description>
    The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4028.html">CVE-2009-4028</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4028">SUSE bug 557669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4028">SUSE bug 604528</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4029</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4029" source="CVE"/>
    <description>
    The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4029.html">CVE-2009-4029</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 559815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 559815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 559815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 559815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 559815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 786745</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 559815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 559815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 559815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4029">SUSE bug 559815</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139276" comment="automake-1.13.4-8.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151364" comment="automake is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139277" comment="m4-1.4.16-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151365" comment="m4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4030</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4030" source="CVE"/>
    <description>
    MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4030.html">CVE-2009-4030</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4030">SUSE bug 557669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4030">SUSE bug 604528</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4034</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4034" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4034" source="CVE"/>
    <description>
    PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based PostgreSQL servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended client-hostname restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4034.html">CVE-2009-4034</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4034">SUSE bug 564710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4034">SUSE bug 603968</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4131</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4131" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4131" source="CVE"/>
    <description>
    The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4131.html">CVE-2009-4131</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4131">SUSE bug 561018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4131">SUSE bug 561018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4131">SUSE bug 564380</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4136</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4136" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4136" source="CVE"/>
    <description>
    PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4136.html">CVE-2009-4136</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4136">SUSE bug 564360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4136">SUSE bug 603969</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4138</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4138" source="CVE"/>
    <description>
    drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4138.html">CVE-2009-4138</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4138">SUSE bug 564712</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4212</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4212" source="CVE"/>
    <description>
    Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4212.html">CVE-2009-4212</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4212">SUSE bug 561351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4212">SUSE bug 561351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4212">SUSE bug 561351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4212">SUSE bug 561351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4212">SUSE bug 561351</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4492</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4492" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4492" source="CVE"/>
    <description>
    WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4492.html">CVE-2009-4492</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4492">SUSE bug 570616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4492">SUSE bug 580482</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4492">SUSE bug 570616</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140353" comment="ruby-2.1-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151366" comment="ruby is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140354" comment="ruby-devel-2.1-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151367" comment="ruby-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4536</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="CVE"/>
    <description>
    drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4536.html">CVE-2009-4536</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4536">SUSE bug 567376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4536">SUSE bug 567376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4536">SUSE bug 567376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20094538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-4538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="CVE"/>
    <description>
    drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-4538.html">CVE-2009-4538</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4538">SUSE bug 567376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4538">SUSE bug 567376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-4538">SUSE bug 567376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5029</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5029" source="CVE"/>
    <description>
    Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-5029.html">CVE-2009-5029</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-5029">SUSE bug 735850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-5029">SUSE bug 736174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-5029">SUSE bug 759836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-5029">SUSE bug 826666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-5029">SUSE bug 920055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5030</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-5030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5030" source="CVE"/>
    <description>
    The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-5030.html">CVE-2009-5030</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-5030">SUSE bug 757260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-5030">SUSE bug 757260</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5044</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-5044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5044" source="CVE"/>
    <description>
    contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-5044.html">CVE-2009-5044</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-5044">SUSE bug 698290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-5044">SUSE bug 703666</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139572" comment="groff-1.22.2-8.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151377" comment="groff is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139573" comment="groff-full-1.22.2-8.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151378" comment="groff-full is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139574" comment="gxditview-1.22.2-8.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151379" comment="gxditview is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5080</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-5080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5080" source="CVE"/>
    <description>
    The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-5080.html">CVE-2009-5080</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-5080">SUSE bug 703665</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139572" comment="groff-1.22.2-8.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151377" comment="groff is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139573" comment="groff-full-1.22.2-8.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151378" comment="groff-full is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139574" comment="gxditview-1.22.2-8.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151379" comment="gxditview is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20095081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2009-5081</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2009-5081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5081" source="CVE"/>
    <description>
    The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2009-5081.html">CVE-2009-5081</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2009-5081">SUSE bug 703666</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139572" comment="groff-1.22.2-8.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151377" comment="groff is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139573" comment="groff-full-1.22.2-8.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151378" comment="groff-full is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139574" comment="gxditview-1.22.2-8.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151379" comment="gxditview is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0001</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0001" source="CVE"/>
    <description>
    Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0001.html">CVE-2010-0001</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0001">SUSE bug 570331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0001">SUSE bug 570331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0001">SUSE bug 570331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0001">SUSE bug 588113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0001">SUSE bug 588113</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139595" comment="gzip-1.6-10.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151329" comment="gzip is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0013</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0013" source="CVE"/>
    <description>
    Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122.  NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0013.html">CVE-2010-0013</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0013">SUSE bug 567799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0013">SUSE bug 569616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0013">SUSE bug 567799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0013">SUSE bug 581201</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0159</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0159" source="CVE"/>
    <description>
    The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0159.html">CVE-2010-0159</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0159">SUSE bug 576969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0159">SUSE bug 581160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0159">SUSE bug 584499</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0164</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0164" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0164" source="CVE"/>
    <description>
    Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace animation in which the frames have different bits-per-pixel (bpp) values.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0164.html">CVE-2010-0164</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0165</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0165" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0165" source="CVE"/>
    <description>
    The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors involving certain indirect calls to the JavaScript eval function.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0165.html">CVE-2010-0165</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0166</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0166" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0166" source="CVE"/>
    <description>
    The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perform certain deletions, which allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via an HTML document containing invisible Unicode characters, as demonstrated by the U+FEFF, U+FFF9, U+FFFA, and U+FFFB characters.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0166.html">CVE-2010-0166</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0167</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0167" source="CVE"/>
    <description>
    The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0167.html">CVE-2010-0167</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0168</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0168" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0168" source="CVE"/>
    <description>
    The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image's URL, which might allow remote attackers to cause a denial of service (application crash or hang) or hijack the functionality of the browser's add-ons via a crafted SRC attribute of an IMG element, as demonstrated by remote command execution through an ssh: URL in a configuration that supports gnome-vfs with a nonstandard network.gnomevfs.supported-protocols setting.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0168.html">CVE-2010-0168</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0169</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0169" source="CVE"/>
    <description>
    The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0169.html">CVE-2010-0169</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0170</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0170" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0170" source="CVE"/>
    <description>
    Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors that are specific to each affected plugin.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0170.html">CVE-2010-0170</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0171</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0171" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0171" source="CVE"/>
    <description>
    Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0171.html">CVE-2010-0171</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0172</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0172" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0172" source="CVE"/>
    <description>
    toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorization requests from multiple web sites, which might allow remote web servers to spoof an authorization dialog and capture credentials by demanding HTTP authentication in opportunistic circumstances.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0172.html">CVE-2010-0172</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0173</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0173.html">CVE-2010-0173</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0173">SUSE bug 586567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0174</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0174.html">CVE-2010-0174</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0174">SUSE bug 586567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0175</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0175.html">CVE-2010-0175</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0175">SUSE bug 586567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0176</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0176.html">CVE-2010-0176</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0176">SUSE bug 586567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0177</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0177.html">CVE-2010-0177</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0177">SUSE bug 586567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0178</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178" source="CVE"/>
    <description>
    Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0178.html">CVE-2010-0178</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0178">SUSE bug 586567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0181</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181" source="CVE"/>
    <description>
    Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many images.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0181.html">CVE-2010-0181</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0181">SUSE bug 586567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0182</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182" source="CVE"/>
    <description>
    The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0182.html">CVE-2010-0182</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0182">SUSE bug 586567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0277</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0277" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0277" source="CVE"/>
    <description>
    slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0277.html">CVE-2010-0277</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0277">SUSE bug 569616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0277">SUSE bug 567799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0277">SUSE bug 569616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0277">SUSE bug 569616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0277">SUSE bug 569616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0277">SUSE bug 569616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0277">SUSE bug 569616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0277">SUSE bug 581201</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0283</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0283" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0283" source="CVE"/>
    <description>
    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid (1) AS-REQ or (2) TGS-REQ request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0283.html">CVE-2010-0283</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0283">SUSE bug 571781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0283">SUSE bug 576524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0283">SUSE bug 571781</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0393</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0393" source="CVE"/>
    <description>
    The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0393.html">CVE-2010-0393</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0393">SUSE bug 574336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0393">SUSE bug 574336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0393">SUSE bug 574336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0393">SUSE bug 574336</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0405</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0405" source="CVE"/>
    <description>
    Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0405.html">CVE-2010-0405</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0405">SUSE bug 636978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0405">SUSE bug 636978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0405">SUSE bug 646682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0405">SUSE bug 636978</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139308" comment="bzip2-1.0.6-32.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151380" comment="bzip2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139309" comment="libbz2-1-1.0.6-32.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151382" comment="libbz2-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139310" comment="libbz2-1-32bit-1.0.6-32.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151383" comment="libbz2-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139311" comment="libbz2-devel-1.0.6-32.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151384" comment="libbz2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0407</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0407" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0407" source="CVE"/>
    <description>
    Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0407.html">CVE-2010-0407</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0407">SUSE bug 609317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0407">SUSE bug 609317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0407">SUSE bug 641823</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139965" comment="libpcsclite1-1.8.17-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151385" comment="libpcsclite1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139966" comment="pcsc-lite-1.8.17-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151386" comment="pcsc-lite is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0408</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0408" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0408" source="CVE"/>
    <description>
    The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0408.html">CVE-2010-0408</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0408">SUSE bug 586572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0408">SUSE bug 586572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0408">SUSE bug 601151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0408">SUSE bug 586572</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0420</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0420" source="CVE"/>
    <description>
    libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing &lt;br&gt; sequences, which allows remote attackers to cause a denial of service (application crash) via a crafted nickname.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0420.html">CVE-2010-0420</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0420">SUSE bug 569616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0420">SUSE bug 569616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0420">SUSE bug 581201</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0423</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0423" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0423" source="CVE"/>
    <description>
    gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0423.html">CVE-2010-0423</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0423">SUSE bug 569616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0423">SUSE bug 569616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0423">SUSE bug 581201</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0424</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0424" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0424" source="CVE"/>
    <description>
    The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0424.html">CVE-2010-0424</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0424">SUSE bug 580800</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0424">SUSE bug 580800</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0424">SUSE bug 589640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0424">SUSE bug 580800</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0424">SUSE bug 590353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0424">SUSE bug 579447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0424">SUSE bug 580800</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139348" comment="cron-4.2-58.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151016" comment="cron is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139349" comment="cronie-1.4.11-58.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151017" comment="cronie is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0425</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0425" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0425" source="CVE"/>
    <description>
    modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0425.html">CVE-2010-0425</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0425">SUSE bug 586572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0425">SUSE bug 586572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0425">SUSE bug 601151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0425">SUSE bug 1078450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0434</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0434" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0434" source="CVE"/>
    <description>
    The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0434.html">CVE-2010-0434</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0434">SUSE bug 586572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0434">SUSE bug 586572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0434">SUSE bug 601151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0434">SUSE bug 586572</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0436</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436" source="CVE"/>
    <description>
    Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0436.html">CVE-2010-0436</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0436">SUSE bug 584223</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139621" comment="kdebase4-workspace-libs-4.11.22-3.24 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151387" comment="kdebase4-workspace-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139622" comment="python-kdebase4-4.11.22-3.24 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151388" comment="python-kdebase4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0540</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0540" source="CVE"/>
    <description>
    Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0540.html">CVE-2010-0540</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 601830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 601830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 601830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 680210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 680212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 700987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 711490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 715643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 601830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 671735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 680210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 711490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 715643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 601830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 680210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 748422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 748422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0540">SUSE bug 748422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0541</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0541" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0541.html">CVE-2010-0541</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0541">SUSE bug 600752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0541">SUSE bug 600752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0541">SUSE bug 600752</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140353" comment="ruby-2.1-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151366" comment="ruby is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140354" comment="ruby-devel-2.1-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151367" comment="ruby-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0542</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0542" source="CVE"/>
    <description>
    The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0542.html">CVE-2010-0542</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0542">SUSE bug 601352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0542">SUSE bug 644521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0542">SUSE bug 601352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0542">SUSE bug 657780</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0542">SUSE bug 601352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0542">SUSE bug 601352</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0547</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="CVE"/>
    <description>
    client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0547.html">CVE-2010-0547</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0547">SUSE bug 577925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0547">SUSE bug 577868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0547">SUSE bug 583535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0547">SUSE bug 583536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0547">SUSE bug 594263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0547">SUSE bug 597421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0547">SUSE bug 602694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0547">SUSE bug 583535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0547">SUSE bug 709819</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139312" comment="cifs-utils-6.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151261" comment="cifs-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0624</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0624" source="CVE"/>
    <description>
    Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0624.html">CVE-2010-0624</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0624">SUSE bug 579475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0624">SUSE bug 579475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0624">SUSE bug 608034</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139324" comment="cpio-2.11-31.51 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151389" comment="cpio is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139325" comment="cpio-lang-2.11-31.51 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151390" comment="cpio-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140368" comment="tar-1.27.1-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151391" comment="tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140369" comment="tar-lang-1.27.1-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151392" comment="tar-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0628</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0628" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0628" source="CVE"/>
    <description>
    The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2 and 1.8 before 1.8.1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid packet that triggers incorrect preparation of an error token.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0628.html">CVE-2010-0628</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0628">SUSE bug 582557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0628">SUSE bug 586981</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0654</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0654" source="CVE"/>
    <description>
    Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0654.html">CVE-2010-0654</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0654">SUSE bug 583603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0654">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0728</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0728" source="CVE"/>
    <description>
    smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0728.html">CVE-2010-0728</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0728">SUSE bug 586683</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139312" comment="cifs-utils-6.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151261" comment="cifs-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0740</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0740" source="CVE"/>
    <description>
    The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0740.html">CVE-2010-0740</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0740">SUSE bug 590833</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0740">SUSE bug 590833</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0740">SUSE bug 590833</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0740">SUSE bug 629905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0742</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0742" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0742" source="CVE"/>
    <description>
    The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0742.html">CVE-2010-0742</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0742">SUSE bug 610642</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0750</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0750" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0750" source="CVE"/>
    <description>
    pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0750.html">CVE-2010-0750</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0750">SUSE bug 593959</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139970" comment="libpolkit0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139971" comment="polkit-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139972" comment="polkit-devel-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151395" comment="polkit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139973" comment="typelib-1_0-Polkit-1_0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0787</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="CVE"/>
    <description>
    client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0787.html">CVE-2010-0787</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0787">SUSE bug 550002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0787">SUSE bug 550002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0787">SUSE bug 602694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0787">SUSE bug 620680</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139312" comment="cifs-utils-6.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151261" comment="cifs-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0926</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="CVE"/>
    <description>
    The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0926.html">CVE-2010-0926</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0926">SUSE bug 577868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0926">SUSE bug 577868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0926">SUSE bug 597421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0926">SUSE bug 1027147</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20100991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-0991</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-0991" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0991" source="CVE"/>
    <description>
    Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted (1) ARGB, (2) XPM, or (3) BMP file, related to the IMAGE_DIMENSIONS_OK macro in lib/image.h.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-0991.html">CVE-2010-0991</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-0991">SUSE bug 598935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139667" comment="libImlib2-1-1.4.5-19.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151397" comment="libImlib2-1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1000</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1000" source="CVE"/>
    <description>
    Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1000.html">CVE-2010-1000</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1000">SUSE bug 604709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1000">SUSE bug 687873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1000">SUSE bug 687873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1000">SUSE bug 687873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1000">SUSE bug 687873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1000">SUSE bug 687873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1000">SUSE bug 687873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1000">SUSE bug 687873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1000">SUSE bug 604709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139631" comment="kdenetwork4-filesharing-16.08.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151398" comment="kdenetwork4-filesharing is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139632" comment="kdnssd-16.08.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151399" comment="kdnssd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139633" comment="kget-16.08.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151400" comment="kget is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139634" comment="kopete-16.08.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151401" comment="kopete is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139635" comment="kppp-16.08.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151402" comment="kppp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139636" comment="krdc-16.08.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151403" comment="krdc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139637" comment="krfb-16.08.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151404" comment="krfb is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1028</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1028" source="CVE"/>
    <description>
    Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 before 3.7 alpha 3 allows remote attackers to execute arbitrary code via a crafted WOFF file that triggers a buffer overflow, as demonstrated by the vd_ff module in VulnDisco 9.0.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1028.html">CVE-2010-1028</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1121</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1121" source="CVE"/>
    <description>
    Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1121.html">CVE-2010-1121</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1121">SUSE bug 603356</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1125</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125" source="CVE"/>
    <description>
    The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1125.html">CVE-2010-1125</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1125">SUSE bug 603356</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1146</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1146" source="CVE"/>
    <description>
    The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfs_priv directory, which allows local users to gain privileges by modifying (1) extended attributes or (2) ACLs, as demonstrated by deleting a file under .reiserfs_priv/xattrs/.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1146.html">CVE-2010-1146</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1146">SUSE bug 593906</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1154</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1154" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2010.  Notes: none.
    </description>
<advisory from="security@suse.de">
<severity>Not set</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1154.html">CVE-2010-1154</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1154">SUSE bug 596005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1154">SUSE bug 596005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139609" comment="irssi-0.8.20-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1155</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1155" source="CVE"/>
    <description>
    Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1155.html">CVE-2010-1155</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1155">SUSE bug 596005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1155">SUSE bug 596005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139609" comment="irssi-0.8.20-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1160</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1160" source="CVE"/>
    <description>
    GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim.
    </description>
<advisory from="security@suse.de">
<severity>Not set</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1160.html">CVE-2010-1160</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1160">SUSE bug 596831</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140252" comment="nano-2.4.2-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151405" comment="nano is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140253" comment="nano-lang-2.4.2-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151406" comment="nano-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1161</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1161" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1161" source="CVE"/>
    <description>
    Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1161.html">CVE-2010-1161</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1161">SUSE bug 596831</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140252" comment="nano-2.4.2-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151405" comment="nano is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140253" comment="nano-lang-2.4.2-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151406" comment="nano-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1163</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1163" source="CVE"/>
    <description>
    The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1163.html">CVE-2010-1163</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1163">SUSE bug 594738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1163">SUSE bug 594738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1163">SUSE bug 594738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1163">SUSE bug 594738</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140363" comment="sudo-1.8.10p3-5.22 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1167</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1167" source="CVE"/>
    <description>
    fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted (1) message header or (2) POP3 UIDL list.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1167.html">CVE-2010-1167</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1167">SUSE bug 597673</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139439" comment="fetchmail-6.3.26-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151334" comment="fetchmail is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1169</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1169" source="CVE"/>
    <description>
    PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1169.html">CVE-2010-1169</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1169">SUSE bug 605926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1169">SUSE bug 605926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1169">SUSE bug 605926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1169">SUSE bug 648140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1170</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1170" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1170" source="CVE"/>
    <description>
    The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1170.html">CVE-2010-1170</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1170">SUSE bug 605845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1170">SUSE bug 605926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1170">SUSE bug 605845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1170">SUSE bug 634562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1170">SUSE bug 648140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1172</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1172" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1172" source="CVE"/>
    <description>
    DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1172.html">CVE-2010-1172</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633681</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 633702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1172">SUSE bug 628607</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139380" comment="dbus-1-glib-0.100.2-4.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151408" comment="dbus-1-glib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139381" comment="dbus-1-glib-32bit-0.100.2-4.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151409" comment="dbus-1-glib-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139382" comment="dbus-1-glib-devel-0.100.2-4.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151410" comment="dbus-1-glib-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1196</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196" source="CVE"/>
    <description>
    Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1196.html">CVE-2010-1196</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1196">SUSE bug 603356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1196">SUSE bug 617399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1197</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197" source="CVE"/>
    <description>
    Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1197.html">CVE-2010-1197</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1197">SUSE bug 603356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1197">SUSE bug 617399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1198</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1198.html">CVE-2010-1198</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1198">SUSE bug 603356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1198">SUSE bug 617399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1199</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199" source="CVE"/>
    <description>
    Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1199.html">CVE-2010-1199</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1199">SUSE bug 603356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1199">SUSE bug 617399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1200</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1200.html">CVE-2010-1200</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1200">SUSE bug 603356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1200">SUSE bug 617399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1201</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1201" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1201.html">CVE-2010-1201</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1201">SUSE bug 603356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1201">SUSE bug 617399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1202</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1202.html">CVE-2010-1202</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1202">SUSE bug 603356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1202">SUSE bug 617399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1203</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203" source="CVE"/>
    <description>
    The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1203.html">CVE-2010-1203</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1203">SUSE bug 603356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1203">SUSE bug 617399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1205</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205" source="CVE"/>
    <description>
    Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1205.html">CVE-2010-1205</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 622506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 639941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 639941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 639941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 639941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 639941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 639941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 639941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 639941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 854395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1205">SUSE bug 617866</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139967" comment="libpng12-0-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139968" comment="libpng12-0-32bit-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139969" comment="libpng12-devel-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117932" comment="libpng16-16-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117933" comment="libpng16-16-32bit-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117936" comment="libpng16-compat-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117937" comment="libpng16-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1206</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1206" source="CVE"/>
    <description>
    The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1206.html">CVE-2010-1206</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1206">SUSE bug 618183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1206">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1207</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1207" source="CVE"/>
    <description>
    Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1207.html">CVE-2010-1207</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1207">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1208</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1208" source="CVE"/>
    <description>
    Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node with a nonzero reference count.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1208.html">CVE-2010-1208</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1208">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1209</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1209" source="CVE"/>
    <description>
    Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator interface and a javascript callback.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1209.html">CVE-2010-1209</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1209">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1210" source="CVE"/>
    <description>
    intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted 8-bit text.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1210.html">CVE-2010-1210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1210">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1211</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1211" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1211.html">CVE-2010-1211</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1211">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1212</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1212" source="CVE"/>
    <description>
    js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) propagation of deep aborts in the TraceRecorder::record_JSOP_BINDNAME function, (2) depth handling in the TraceRecorder::record_JSOP_GETELEM function, and (3) tracing of out-of-range arguments in the TraceRecorder::record_JSOP_ARGSUB function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1212.html">CVE-2010-1212</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1212">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1213</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1213" source="CVE"/>
    <description>
    The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1213.html">CVE-2010-1213</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1213">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1214</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1214" source="CVE"/>
    <description>
    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1214.html">CVE-2010-1214</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1214">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1215</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1215" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1215" source="CVE"/>
    <description>
    Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka SJOW) wrapper, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging "access to an object from the chrome scope."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1215.html">CVE-2010-1215</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1215">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101320" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1320</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1320" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1320" source="CVE"/>
    <description>
    Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x before 1.8.2 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a request associated with (1) renewal or (2) validation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1320.html">CVE-2010-1320</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1320">SUSE bug 596002</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1321</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1321" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1321" source="CVE"/>
    <description>
    The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1321.html">CVE-2010-1321</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1321">SUSE bug 596826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1321">SUSE bug 596826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1321">SUSE bug 611090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1321">SUSE bug 646073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1321">SUSE bug 648950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1321">SUSE bug 658525</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1321">SUSE bug 659926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1321">SUSE bug 663953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1321">SUSE bug 679560</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101322" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1322</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1322" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1322" source="CVE"/>
    <description>
    The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service (daemon crash), or possibly obtain sensitive information, spoof authorization, or execute arbitrary code, via a TGS request that triggers an uninitialized pointer dereference, as demonstrated by a request from a Windows Active Directory client.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1322.html">CVE-2010-1322</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1322">SUSE bug 640990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1322">SUSE bug 640990</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1323</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1323" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1323" source="CVE"/>
    <description>
    MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1323.html">CVE-2010-1323</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1323">SUSE bug 650650</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1324</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1324" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1324" source="CVE"/>
    <description>
    MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1324.html">CVE-2010-1324</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1324">SUSE bug 650650</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1436</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1436" source="CVE"/>
    <description>
    gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2_quota struct occupies two separate pages, which allows local users to cause a denial of service (kernel panic) via certain manipulations that cause an out-of-bounds write, as demonstrated by writing from an ext3 file system to a gfs2 file system.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1436.html">CVE-2010-1436</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1436">SUSE bug 599957</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1452</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1452" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1452" source="CVE"/>
    <description>
    The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1452.html">CVE-2010-1452</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1452">SUSE bug 627030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1452">SUSE bug 627030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1452">SUSE bug 627030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1452">SUSE bug 627030</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101455" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1455</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1455" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1455" source="CVE"/>
    <description>
    The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1455.html">CVE-2010-1455</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1455">SUSE bug 603251</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1455">SUSE bug 603251</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1585</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1585" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1585" source="CVE"/>
    <description>
    The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 does not properly sanitize HTML in a chrome document, which makes it easier for remote attackers to execute arbitrary JavaScript with chrome privileges via a javascript: URI in input to an extension, as demonstrated by a javascript:alert sequence in (1) the HREF attribute of an A element or (2) the ACTION attribute of a FORM element.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1585.html">CVE-2010-1585</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1585">SUSE bug 667155</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1585">SUSE bug 679570</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1623</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1623" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1623" source="CVE"/>
    <description>
    Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1623.html">CVE-2010-1623</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1623">SUSE bug 650435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1623">SUSE bug 650435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1623">SUSE bug 693778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1623">SUSE bug 725950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1623">SUSE bug 997229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1623">SUSE bug 997229</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139755" comment="libapr-util1-1.5.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151171" comment="libapr-util1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139756" comment="libapr-util1-devel-1.5.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151172" comment="libapr-util1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1624</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1624" source="CVE"/>
    <description>
    The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1624.html">CVE-2010-1624</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1624">SUSE bug 604225</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1633</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1633" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1633" source="CVE"/>
    <description>
    RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive information via unspecified vectors.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1633.html">CVE-2010-1633</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1633">SUSE bug 610642</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1635</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1635" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1635" source="CVE"/>
    <description>
    The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1635.html">CVE-2010-1635</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1635">SUSE bug 605935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1641</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1641" source="CVE"/>
    <description>
    The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1641.html">CVE-2010-1641</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1641">SUSE bug 608576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1641">SUSE bug 608576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1641">SUSE bug 608576</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1642</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1642" source="CVE"/>
    <description>
    The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1642.html">CVE-2010-1642</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1642">SUSE bug 605935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1642">SUSE bug 605935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1646</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1646" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1646" source="CVE"/>
    <description>
    The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1646.html">CVE-2010-1646</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1646">SUSE bug 594738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1646">SUSE bug 594738</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140363" comment="sudo-1.8.10p3-5.22 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1674</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1674" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1674" source="CVE"/>
    <description>
    The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed Extended Communities attribute.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1674.html">CVE-2010-1674</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1674">SUSE bug 654270</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1674">SUSE bug 654270</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1674">SUSE bug 654270</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1674">SUSE bug 685558</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140348" comment="quagga-0.99.24.1-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151418" comment="quagga is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1675</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1675" source="CVE"/>
    <description>
    bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1675.html">CVE-2010-1675</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1675">SUSE bug 654270</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1675">SUSE bug 654270</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1675">SUSE bug 654270</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1675">SUSE bug 685558</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140348" comment="quagga-0.99.24.1-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151418" comment="quagga is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20101748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-1748</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-1748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1748" source="CVE"/>
    <description>
    The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&amp;URL=% and (2) /admin?URL=/admin/&amp;OP=% URIs.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-1748.html">CVE-2010-1748</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 644521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 649256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 601352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 601352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 657780</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-1748">SUSE bug 604271</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2063</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="CVE"/>
    <description>
    Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2063.html">CVE-2010-2063</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2063">SUSE bug 611927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2063">SUSE bug 611927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2063">SUSE bug 611927</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2065</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2065" source="CVE"/>
    <description>
    Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2065.html">CVE-2010-2065</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2065">SUSE bug 612879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2065">SUSE bug 612879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2065">SUSE bug 612879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2065">SUSE bug 612787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2065">SUSE bug 612879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2065">SUSE bug 612879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2065">SUSE bug 612879</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2066</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2066" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2066" source="CVE"/>
    <description>
    The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2066.html">CVE-2010-2066</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2066">SUSE bug 612457</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2067</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2067" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2067" source="CVE"/>
    <description>
    Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2067.html">CVE-2010-2067</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2067">SUSE bug 612787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2067">SUSE bug 612879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2067">SUSE bug 612787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2067">SUSE bug 612879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2067">SUSE bug 612787</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2068</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2068" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2068" source="CVE"/>
    <description>
    mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2068.html">CVE-2010-2068</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2068">SUSE bug 627030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2068">SUSE bug 627387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2068">SUSE bug 627387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2068">SUSE bug 627030</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2074</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2074" source="CVE"/>
    <description>
    istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2074.html">CVE-2010-2074</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2074">SUSE bug 609451</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140398" comment="w3m-0.5.3-158.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2156</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2156" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2156" source="CVE"/>
    <description>
    ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2156.html">CVE-2010-2156</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2156">SUSE bug 612546</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2225</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2225" source="CVE"/>
    <description>
    Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute arbitrary code or obtain sensitive information via serialized data, related to the PHP unserialize function.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2225.html">CVE-2010-2225</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2225">SUSE bug 616232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2225">SUSE bug 616232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2225">SUSE bug 616232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2225">SUSE bug 616232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2225">SUSE bug 616232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2225">SUSE bug 616232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2225">SUSE bug 616232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2225">SUSE bug 616232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2225">SUSE bug 616232</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2233</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2233" source="CVE"/>
    <description>
    tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG input."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2233.html">CVE-2010-2233</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2233">SUSE bug 612879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2233">SUSE bug 612879</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2240</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2240" source="CVE"/>
    <description>
    The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment, as demonstrated by a memory-exhaustion attack against the X.Org X server.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2240.html">CVE-2010-2240</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 615929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 618152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 618152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 618152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 618152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 618152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 615929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 618152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 211997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 59807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 618152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 546062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 618152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 643986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 632737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 746947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 746947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 746947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 746947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 746949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 746949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 615929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2240">SUSE bug 1039348</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140418" comment="xorg-x11-server-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140419" comment="xorg-x11-server-extra-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140420" comment="xorg-x11-server-sdk-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2242</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2242" source="CVE"/>
    <description>
    Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2242.html">CVE-2010-2242</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2242">SUSE bug 618155</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2242">SUSE bug 618155</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2244</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2244" source="CVE"/>
    <description>
    The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability than CVE-2008-5081.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2244.html">CVE-2010-2244</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2244">SUSE bug 603289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2244">SUSE bug 646961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2244">SUSE bug 603289</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139278" comment="avahi-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151208" comment="avahi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139279" comment="avahi-autoipd-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151209" comment="avahi-autoipd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139280" comment="avahi-compat-mDNSResponder-devel-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151210" comment="avahi-compat-mDNSResponder-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139281" comment="avahi-lang-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151211" comment="avahi-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139282" comment="libavahi-client3-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151212" comment="libavahi-client3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139283" comment="libavahi-client3-32bit-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151213" comment="libavahi-client3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139284" comment="libavahi-common3-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151214" comment="libavahi-common3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139285" comment="libavahi-common3-32bit-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151215" comment="libavahi-common3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139286" comment="libavahi-core7-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151216" comment="libavahi-core7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139287" comment="libavahi-devel-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151217" comment="libavahi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139288" comment="libdns_sd-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151218" comment="libdns_sd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2252</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2252" source="CVE"/>
    <description>
    GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2252.html">CVE-2010-2252</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2252">SUSE bug 606317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2252">SUSE bug 606317</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140399" comment="wget-1.14-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2494</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2494" source="CVE"/>
    <description>
    Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2494.html">CVE-2010-2494</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2494">SUSE bug 619847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2494">SUSE bug 619847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139302" comment="bogofilter-common-1.2.4-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151443" comment="bogofilter-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139303" comment="bogofilter-db-1.2.4-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151444" comment="bogofilter-db is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2497</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2497" source="CVE"/>
    <description>
    Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2497.html">CVE-2010-2497</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2497">SUSE bug 619562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2497">SUSE bug 619562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2497">SUSE bug 619562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2497">SUSE bug 635692</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2528</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2528" source="CVE"/>
    <description>
    The clientautoresp function in family_icbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via an X-Status message that lacks the expected end tag for a (1) desc or (2) title element.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2528.html">CVE-2010-2528</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2528">SUSE bug 630965</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2529</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2529" source="CVE"/>
    <description>
    Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service (hang) via a crafted echo response.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2529.html">CVE-2010-2529</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2529">SUSE bug 620837</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139608" comment="iputils-s20121221-4.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151445" comment="iputils is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2546</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2546" source="CVE"/>
    <description>
    Multiple heap-based buffer overflows in loaders/load_it.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and IT_ProcessEnvelope.  NOTE: some of these details are obtained from third party information.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3995.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2546.html">CVE-2010-2546</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 752802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2546">SUSE bug 625547</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139933" comment="libmikmod3-3.3.7-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151102" comment="libmikmod3 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2547</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2547" source="CVE"/>
    <description>
    Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc operation when importing the certificate or verifying its signature.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2547.html">CVE-2010-2547</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2547">SUSE bug 625947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2547">SUSE bug 625947</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139564" comment="gpg2-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139565" comment="gpg2-lang-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2640</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2640" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2640" source="CVE"/>
    <description>
    Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2640.html">CVE-2010-2640</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2640">SUSE bug 660555</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139415" comment="evince-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151448" comment="evince is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139416" comment="evince-browser-plugin-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154091" comment="evince-browser-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139417" comment="evince-lang-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151449" comment="evince-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139418" comment="evince-plugin-comicsdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154092" comment="evince-plugin-comicsdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139419" comment="evince-plugin-djvudocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154093" comment="evince-plugin-djvudocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139420" comment="evince-plugin-dvidocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154094" comment="evince-plugin-dvidocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139421" comment="evince-plugin-pdfdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154095" comment="evince-plugin-pdfdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139422" comment="evince-plugin-psdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154096" comment="evince-plugin-psdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139423" comment="evince-plugin-tiffdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154097" comment="evince-plugin-tiffdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139424" comment="evince-plugin-xpsdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154098" comment="evince-plugin-xpsdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139425" comment="libevdocument3-4-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151450" comment="libevdocument3-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139426" comment="libevview3-3-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151451" comment="libevview3-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139427" comment="nautilus-evince-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151452" comment="nautilus-evince is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139428" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151453" comment="typelib-1_0-EvinceDocument-3_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139429" comment="typelib-1_0-EvinceView-3_0-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151454" comment="typelib-1_0-EvinceView-3_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2641</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2641" source="CVE"/>
    <description>
    Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2641.html">CVE-2010-2641</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2641">SUSE bug 660555</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139415" comment="evince-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151448" comment="evince is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139416" comment="evince-browser-plugin-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154091" comment="evince-browser-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139417" comment="evince-lang-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151449" comment="evince-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139418" comment="evince-plugin-comicsdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154092" comment="evince-plugin-comicsdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139419" comment="evince-plugin-djvudocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154093" comment="evince-plugin-djvudocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139420" comment="evince-plugin-dvidocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154094" comment="evince-plugin-dvidocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139421" comment="evince-plugin-pdfdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154095" comment="evince-plugin-pdfdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139422" comment="evince-plugin-psdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154096" comment="evince-plugin-psdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139423" comment="evince-plugin-tiffdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154097" comment="evince-plugin-tiffdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139424" comment="evince-plugin-xpsdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154098" comment="evince-plugin-xpsdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139425" comment="libevdocument3-4-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151450" comment="libevdocument3-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139426" comment="libevview3-3-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151451" comment="libevview3-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139427" comment="nautilus-evince-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151452" comment="nautilus-evince is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139428" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151453" comment="typelib-1_0-EvinceDocument-3_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139429" comment="typelib-1_0-EvinceView-3_0-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151454" comment="typelib-1_0-EvinceView-3_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2642</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2642" source="CVE"/>
    <description>
    Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2642.html">CVE-2010-2642</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2642">SUSE bug 660555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2642">SUSE bug 661018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2642">SUSE bug 664484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2642">SUSE bug 662411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2642">SUSE bug 790421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2642">SUSE bug 790421</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139415" comment="evince-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151448" comment="evince is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139416" comment="evince-browser-plugin-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154091" comment="evince-browser-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139417" comment="evince-lang-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151449" comment="evince-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139418" comment="evince-plugin-comicsdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154092" comment="evince-plugin-comicsdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139419" comment="evince-plugin-djvudocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154093" comment="evince-plugin-djvudocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139420" comment="evince-plugin-dvidocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154094" comment="evince-plugin-dvidocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139421" comment="evince-plugin-pdfdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154095" comment="evince-plugin-pdfdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139422" comment="evince-plugin-psdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154096" comment="evince-plugin-psdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139423" comment="evince-plugin-tiffdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154097" comment="evince-plugin-tiffdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139424" comment="evince-plugin-xpsdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154098" comment="evince-plugin-xpsdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139425" comment="libevdocument3-4-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151450" comment="libevdocument3-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139426" comment="libevview3-3-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151451" comment="libevview3-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139427" comment="nautilus-evince-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151452" comment="nautilus-evince is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139428" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151453" comment="typelib-1_0-EvinceDocument-3_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139429" comment="typelib-1_0-EvinceView-3_0-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151454" comment="typelib-1_0-EvinceView-3_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2643</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2643" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2643" source="CVE"/>
    <description>
    Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2643.html">CVE-2010-2643</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2643">SUSE bug 660555</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139415" comment="evince-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151448" comment="evince is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139416" comment="evince-browser-plugin-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154091" comment="evince-browser-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139417" comment="evince-lang-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151449" comment="evince-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139418" comment="evince-plugin-comicsdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154092" comment="evince-plugin-comicsdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139419" comment="evince-plugin-djvudocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154093" comment="evince-plugin-djvudocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139420" comment="evince-plugin-dvidocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154094" comment="evince-plugin-dvidocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139421" comment="evince-plugin-pdfdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154095" comment="evince-plugin-pdfdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139422" comment="evince-plugin-psdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154096" comment="evince-plugin-psdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139423" comment="evince-plugin-tiffdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154097" comment="evince-plugin-tiffdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139424" comment="evince-plugin-xpsdocument-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154098" comment="evince-plugin-xpsdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139425" comment="libevdocument3-4-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151450" comment="libevdocument3-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139426" comment="libevview3-3-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151451" comment="libevview3-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139427" comment="nautilus-evince-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151452" comment="nautilus-evince is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139428" comment="typelib-1_0-EvinceDocument-3_0-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151453" comment="typelib-1_0-EvinceDocument-3_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139429" comment="typelib-1_0-EvinceView-3_0-3.20.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151454" comment="typelib-1_0-EvinceView-3_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2751</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2751" source="CVE"/>
    <description>
    The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a redirect, and the history.back and history.forward JavaScript functions.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2751.html">CVE-2010-2751</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2751">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2752</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2752" source="CVE"/>
    <description>
    Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS) values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2752.html">CVE-2010-2752</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2752">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2753</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2753" source="CVE"/>
    <description>
    Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which triggers a use-after-free.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2753.html">CVE-2010-2753</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2753">SUSE bug 622506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2753">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2754</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2754" source="CVE"/>
    <description>
    dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows remote attackers to obtain sensitive information about script parameters via a crafted HTML document, related to the window.onerror handler.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2754.html">CVE-2010-2754</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2754">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2755</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2755" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2755" source="CVE"/>
    <description>
    layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document, related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2755.html">CVE-2010-2755</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2755">SUSE bug 622506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2760</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2760" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2760" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via vectors involving a XUL tree selection, related to a "dangling pointer vulnerability." NOTE: this issue exists because of an incomplete fix for CVE-2010-2753.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2760.html">CVE-2010-2760</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2760">SUSE bug 638109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2760">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2761</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2761" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2761" source="CVE"/>
    <description>
    The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2761.html">CVE-2010-2761</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2761">SUSE bug 657343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2761">SUSE bug 657343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2761">SUSE bug 657343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2761">SUSE bug 657343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2761">SUSE bug 657731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2761">SUSE bug 657731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2761">SUSE bug 663396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2761">SUSE bug 669245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2761">SUSE bug 670476</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140286" comment="perl-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140287" comment="perl-32bit-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140288" comment="perl-base-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140289" comment="perl-doc-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2762</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2762" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2762" source="CVE"/>
    <description>
    The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x before 3.1.3 does not properly restrict objects at the end of scope chains, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via vectors related to a chrome privileged object and a chain ending in an outer object.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2762.html">CVE-2010-2762</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2762">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2764</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2764" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2764" source="CVE"/>
    <description>
    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin requests.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2764.html">CVE-2010-2764</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2764">SUSE bug 638109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2764">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2765</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2765" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2765" source="CVE"/>
    <description>
    Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a large number of values in the cols (aka columns) attribute, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2765.html">CVE-2010-2765</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2765">SUSE bug 638109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2765">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2766</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2766" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2766" source="CVE"/>
    <description>
    The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2766.html">CVE-2010-2766</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2766">SUSE bug 638109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2766">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2767</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2767" source="CVE"/>
    <description>
    The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle destruction of the DOM plugin array, which might allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted access to the navigator object, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2767.html">CVE-2010-2767</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2767">SUSE bug 638109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2767">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2768</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2768" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2768" source="CVE"/>
    <description>
    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use of the type attribute of an OBJECT element to set a document's charset, which allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms via UTF-7 encoding.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2768.html">CVE-2010-2768</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2768">SUSE bug 638109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2768">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2769</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2769" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2769" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2769.html">CVE-2010-2769</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2769">SUSE bug 638109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2769">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2800</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2800" source="CVE"/>
    <description>
    The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2800.html">CVE-2010-2800</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2800">SUSE bug 627753</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139940" comment="libmspack0-0.5-5.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2801</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2801" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2801" source="CVE"/>
    <description>
    Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2801.html">CVE-2010-2801</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2801">SUSE bug 627753</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139940" comment="libmspack0-0.5-5.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2805</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2805" source="CVE"/>
    <description>
    The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2805.html">CVE-2010-2805</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2805">SUSE bug 629447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2805">SUSE bug 629447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2805">SUSE bug 635692</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102891" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2891</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2891" source="CVE"/>
    <description>
    Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical string containing many components separated by . (dot) characters.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2891.html">CVE-2010-2891</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2891">SUSE bug 649867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2891">SUSE bug 649867</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140077" comment="libsmi-0.4.8-21.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151460" comment="libsmi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140078" comment="libsmi2-0.4.8-21.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151461" comment="libsmi2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2935</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2935" source="CVE"/>
    <description>
    simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PowerPoint document that triggers a heap-based buffer overflow, related to an "integer truncation error."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2935.html">CVE-2010-2935</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2935">SUSE bug 629085</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2936</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2936" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2936" source="CVE"/>
    <description>
    Integer overflow in simpress.bin in the Impress module in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted polygons in a PowerPoint document that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2936.html">CVE-2010-2936</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2936">SUSE bug 629085</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2939</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2939" source="CVE"/>
    <description>
    Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime.  NOTE: some sources refer to this as a use-after-free issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2939.html">CVE-2010-2939</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2939">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2939">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2939">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2939">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2939">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2939">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2939">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2939">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2939">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2939">SUSE bug 629905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2941</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2941" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2941" source="CVE"/>
    <description>
    ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2941.html">CVE-2010-2941</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2941">SUSE bug 649256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2941">SUSE bug 649256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2941">SUSE bug 649256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2941">SUSE bug 654627</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2942</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2942" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2942" source="CVE"/>
    <description>
    The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2942.html">CVE-2010-2942</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2942">SUSE bug 632309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2942">SUSE bug 642324</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2947</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2947" source="CVE"/>
    <description>
    Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of fields.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2947.html">CVE-2010-2947</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2947">SUSE bug 631582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2947">SUSE bug 631582</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139663" comment="libHX28-3.18-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151496" comment="libHX28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139664" comment="libHX28-32bit-3.18-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151497" comment="libHX28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2950</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2950" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2950" source="CVE"/>
    <description>
    Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2950.html">CVE-2010-2950</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2950">SUSE bug 633934</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2954</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2954" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2954" source="CVE"/>
    <description>
    The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2954.html">CVE-2010-2954</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2954">SUSE bug 636112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2954">SUSE bug 636112</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2955</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2955" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2955" source="CVE"/>
    <description>
    The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2955.html">CVE-2010-2955</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2955">SUSE bug 635413</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2955">SUSE bug 635413</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20102993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-2993</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-2993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2993" source="CVE"/>
    <description>
    The IPMI dissector in Wireshark 1.2.0 through 1.2.9 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-2993.html">CVE-2010-2993</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2993">SUSE bug 630599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-2993">SUSE bug 630599</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3053</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3053" source="CVE"/>
    <description>
    bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a crafted BDF font file, related to an attempted modification of a value in a static string.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3053.html">CVE-2010-3053</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3053">SUSE bug 633938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3053">SUSE bug 633938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3053">SUSE bug 635692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3053">SUSE bug 635692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3053">SUSE bug 645982</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3054</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3054" source="CVE"/>
    <description>
    Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3054.html">CVE-2010-3054</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3054">SUSE bug 633943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3054">SUSE bug 633943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3054">SUSE bug 633943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3054">SUSE bug 635692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3054">SUSE bug 645982</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3069</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3069" source="CVE"/>
    <description>
    Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Windows Security ID (SID) on a file share.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3069.html">CVE-2010-3069</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3069">SUSE bug 637218</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3069">SUSE bug 637218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3081</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3081" source="CVE"/>
    <description>
    The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3081.html">CVE-2010-3081</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3081">SUSE bug 639709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3081">SUSE bug 639709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3081">SUSE bug 639709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3081">SUSE bug 641575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3081">SUSE bug 641575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3081">SUSE bug 641575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3081">SUSE bug 641575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3081">SUSE bug 871595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3081">SUSE bug 639709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3166</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3166" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3166" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a bidirectional text run.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3166.html">CVE-2010-3166</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3166">SUSE bug 638109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3166">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3167</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3167" source="CVE"/>
    <description>
    The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3167.html">CVE-2010-3167</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3167">SUSE bug 638109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3167">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3168</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3168" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3168" source="CVE"/>
    <description>
    Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering XUL tree removal, which allows remote attackers to cause a denial of service (deleted memory access and application crash) or possibly execute arbitrary code by setting unspecified properties.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3168.html">CVE-2010-3168</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3168">SUSE bug 638109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3168">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3169</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3169" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3169.html">CVE-2010-3169</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3169">SUSE bug 638109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3169">SUSE bug 637303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3170</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3170" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3170" source="CVE"/>
    <description>
    Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3170.html">CVE-2010-3170</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3170">SUSE bug 637290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3170">SUSE bug 645315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3170">SUSE bug 652858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3170">SUSE bug 637290</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3173</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3173" source="CVE"/>
    <description>
    The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3173.html">CVE-2010-3173</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3173">SUSE bug 645315</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3174</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3174" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, and SeaMonkey before 2.0.9 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3174.html">CVE-2010-3174</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3174">SUSE bug 645315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3174">SUSE bug 652858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3175</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3175" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3175.html">CVE-2010-3175</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3175">SUSE bug 645315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3175">SUSE bug 652858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3176</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3176" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3176.html">CVE-2010-3176</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3176">SUSE bug 645315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3176">SUSE bug 652858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3177</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3177" source="CVE"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML via a crafted name of a (1) file or (2) directory on a Gopher server.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3177.html">CVE-2010-3177</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3177">SUSE bug 645315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3177">SUSE bug 652858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3178</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3178" source="CVE"/>
    <description>
    Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made by javascript: URLs in circumstances related to opening a new window and performing cross-domain navigation, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3178.html">CVE-2010-3178</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3178">SUSE bug 645315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3178">SUSE bug 652858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3179</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3179" source="CVE"/>
    <description>
    Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a long argument to the document.write method.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3179.html">CVE-2010-3179</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3179">SUSE bug 645315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3179">SUSE bug 652858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3180</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3180" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3180.html">CVE-2010-3180</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3180">SUSE bug 645315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3180">SUSE bug 652858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3182</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3182" source="CVE"/>
    <description>
    A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3182.html">CVE-2010-3182</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3182">SUSE bug 642502</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3182">SUSE bug 645315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3182">SUSE bug 652858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3183</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3183" source="CVE"/>
    <description>
    The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__lookupGetter__ function calls that lack arguments, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via vectors involving a "dangling pointer" and the JS_ValueToId function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3183.html">CVE-2010-3183</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3183">SUSE bug 645315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3183">SUSE bug 652858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3296</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3296" source="CVE"/>
    <description>
    The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3296.html">CVE-2010-3296</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3296">SUSE bug 639481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3296">SUSE bug 649187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3296">SUSE bug 649187</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3297</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3297" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3297" source="CVE"/>
    <description>
    The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQL_GETMASTRCFG ioctl call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3297.html">CVE-2010-3297</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3297">SUSE bug 639482</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3297">SUSE bug 649187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3297">SUSE bug 649187</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3298</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3298" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3298" source="CVE"/>
    <description>
    The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3298.html">CVE-2010-3298</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3298">SUSE bug 639483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3298">SUSE bug 649187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3298">SUSE bug 649187</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3301</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3301" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3301" source="CVE"/>
    <description>
    The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register.  NOTE: this vulnerability exists because of a CVE-2007-4573 regression.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3301.html">CVE-2010-3301</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3301">SUSE bug 639708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3301">SUSE bug 639708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3310</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3310" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3310" source="CVE"/>
    <description>
    Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel before 2.6.36-rc5-next-20100923 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a rose_getname function call, related to the rose_bind and rose_connect functions.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3310.html">CVE-2010-3310</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3310">SUSE bug 640721</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3311</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3311" source="CVE"/>
    <description>
    Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3311.html">CVE-2010-3311</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3311">SUSE bug 641580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3311">SUSE bug 635692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3311">SUSE bug 645982</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103315" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3315</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3315" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3315" source="CVE"/>
    <description>
    authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3315.html">CVE-2010-3315</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3315">SUSE bug 649861</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3430</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3430" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3430" source="CVE"/>
    <description>
    The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not perform the required setfsgid and setgroups system calls, which might allow local users to obtain sensitive information by leveraging unintended group permissions, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-3435.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3430.html">CVE-2010-3430</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3430">SUSE bug 623457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3430">SUSE bug 631802</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140276" comment="pam-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151504" comment="pam is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140277" comment="pam-32bit-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151505" comment="pam-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140278" comment="pam-devel-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151506" comment="pam-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3431</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3431" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3431" source="CVE"/>
    <description>
    The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not check the return value of the setfsuid system call, which might allow local users to obtain sensitive information by leveraging an unintended uid, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-3435.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3431.html">CVE-2010-3431</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3431">SUSE bug 623457</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140276" comment="pam-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151504" comment="pam is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140277" comment="pam-32bit-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151505" comment="pam-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140278" comment="pam-devel-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151506" comment="pam-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3433</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3433" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3433" source="CVE"/>
    <description>
    The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22, 8.2 before 8.2.18, 8.3 before 8.3.12, 8.4 before 8.4.5, and 9.0 before 9.0.1 do not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain privileges via crafted script code in a SECURITY DEFINER function, as demonstrated by (1) redefining standard functions or (2) redefining operators, a different vulnerability than CVE-2010-1168, CVE-2010-1169, CVE-2010-1170, and CVE-2010-1447.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3433.html">CVE-2010-3433</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3433">SUSE bug 643771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3433">SUSE bug 648140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3436</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3436" source="CVE"/>
    <description>
    fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the length of a filename.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3436.html">CVE-2010-3436</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3436">SUSE bug 642733</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3436">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3445</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3445" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3445" source="CVE"/>
    <description>
    Stack consumption vulnerability in the dissect_ber_unknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a long string in an unknown ASN.1/BER encoded packet, as demonstrated using SNMP.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3445.html">CVE-2010-3445</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3445">SUSE bug 643078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3445">SUSE bug 643078</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3609</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3609" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3609" source="CVE"/>
    <description>
    The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service (infinite loop) via a packet with a "next extension offset" that references this extension or a previous extension.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3609.html">CVE-2010-3609</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3609">SUSE bug 642571</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140265" comment="openslp-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151507" comment="openslp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140266" comment="openslp-devel-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151508" comment="openslp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140267" comment="openslp-server-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151509" comment="openslp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3611</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3611" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3611" source="CVE"/>
    <description>
    ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3611.html">CVE-2010-3611</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3611">SUSE bug 650902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3611">SUSE bug 650902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3611">SUSE bug 667655</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3613</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3613" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3613" source="CVE"/>
    <description>
    named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3613.html">CVE-2010-3613</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3613">SUSE bug 657129</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103614" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3614</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3614" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3614" source="CVE"/>
    <description>
    named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3614.html">CVE-2010-3614</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3614">SUSE bug 657102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3614">SUSE bug 657102</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3615</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3615" source="CVE"/>
    <description>
    named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3615.html">CVE-2010-3615</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3615">SUSE bug 657120</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3616</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3616" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3616" source="CVE"/>
    <description>
    ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios check_tcp process check to TCP port 520.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3616.html">CVE-2010-3616</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3616">SUSE bug 659059</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3709</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3709" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3709" source="CVE"/>
    <description>
    The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3709.html">CVE-2010-3709</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3709">SUSE bug 660102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3709">SUSE bug 660102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3709">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3710</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3710" source="CVE"/>
    <description>
    Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3710.html">CVE-2010-3710</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3710">SUSE bug 649210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3710">SUSE bug 649210</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3711</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3711" source="CVE"/>
    <description>
    libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3711.html">CVE-2010-3711</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3711">SUSE bug 648273</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3765</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3765" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3765" source="CVE"/>
    <description>
    Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3765.html">CVE-2010-3765</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3765">SUSE bug 649492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3765">SUSE bug 652858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3768</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3768" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3768" source="CVE"/>
    <description>
    Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly validate downloadable fonts before use within an operating system's font implementation, which allows remote attackers to execute arbitrary code via vectors related to @font-face Cascading Style Sheets (CSS) rules.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3768.html">CVE-2010-3768</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3768">SUSE bug 657016</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3769</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3769" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3769" source="CVE"/>
    <description>
    The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3769.html">CVE-2010-3769</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3769">SUSE bug 657016</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3776</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3776" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3776.html">CVE-2010-3776</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3776">SUSE bug 657016</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3777</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3777" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3777" source="CVE"/>
    <description>
    Unspecified vulnerability in Mozilla Firefox 3.6.x before 3.6.13 and Thunderbird 3.1.x before 3.1.7 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3777.html">CVE-2010-3777</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3777">SUSE bug 657016</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3778</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3778" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3778" source="CVE"/>
    <description>
    Unspecified vulnerability in Mozilla Firefox 3.5.x before 3.5.16, Thunderbird before 3.0.11, and SeaMonkey before 2.0.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3778.html">CVE-2010-3778</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3778">SUSE bug 657016</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3814</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3814" source="CVE"/>
    <description>
    Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document with a crafted embedded font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3814.html">CVE-2010-3814</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3814">SUSE bug 647375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3814">SUSE bug 647375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3814">SUSE bug 647375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3814">SUSE bug 689174</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3853</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3853" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3853" source="CVE"/>
    <description>
    pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as demonstrated by the sudo program.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3853.html">CVE-2010-3853</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3853">SUSE bug 647958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3853">SUSE bug 647958</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140276" comment="pam-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151504" comment="pam is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140277" comment="pam-32bit-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151505" comment="pam-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140278" comment="pam-devel-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151506" comment="pam-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3855</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3855" source="CVE"/>
    <description>
    Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3855.html">CVE-2010-3855</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3855">SUSE bug 647375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3855">SUSE bug 647375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3855">SUSE bug 647375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3855">SUSE bug 689174</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20103864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-3864</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-3864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3864" source="CVE"/>
    <description>
    Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-3864.html">CVE-2010-3864</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 629905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-3864">SUSE bug 651003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4000</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4000" source="CVE"/>
    <description>
    gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4000.html">CVE-2010-4000</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4000">SUSE bug 642827</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139555" comment="gnome-shell-3.20.4-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151510" comment="gnome-shell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139556" comment="gnome-shell-browser-plugin-3.20.4-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151511" comment="gnome-shell-browser-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139557" comment="gnome-shell-calendar-3.20.4-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151512" comment="gnome-shell-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139558" comment="gnome-shell-lang-3.20.4-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151513" comment="gnome-shell-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4003</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4003" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Not set</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4003.html">CVE-2010-4003</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4003">SUSE bug 642829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139524" comment="gnome-games-3.10.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151514" comment="gnome-games is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139525" comment="gnome-games-recommended-3.10.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151515" comment="gnome-games-recommended is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4020</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4020" source="CVE"/>
    <description>
    MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4020.html">CVE-2010-4020</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4020">SUSE bug 650650</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4021</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4021" source="CVE"/>
    <description>
    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4021.html">CVE-2010-4021</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4021">SUSE bug 650650</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4022</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4022" source="CVE"/>
    <description>
    The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service (listening process termination, no new connections, and lack of updates in slave KVC) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4022.html">CVE-2010-4022</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4022">SUSE bug 662665</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4150</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4150" source="CVE"/>
    <description>
    Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4150.html">CVE-2010-4150</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4150">SUSE bug 655968</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4226</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4226" source="CVE"/>
    <description>
    cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4226.html">CVE-2010-4226</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4226">SUSE bug 665768</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168196" comment="build-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168197" comment="build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168198" comment="build-initvm-i586-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168199" comment="build-initvm-i586 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168200" comment="build-initvm-x86_64-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168201" comment="build-initvm-x86_64 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168202" comment="build-mkbaselibs-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168203" comment="build-mkbaselibs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168204" comment="build-mkdrpms-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168205" comment="build-mkdrpms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168206" comment="obs-service-source_validator-0.7-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153664" comment="obs-service-source_validator is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168207" comment="osc-0.162.0-7.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151686" comment="osc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4267</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4267" source="CVE"/>
    <description>
    Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4267.html">CVE-2010-4267</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4267">SUSE bug 336658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4267">SUSE bug 336658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4267">SUSE bug 336658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4267">SUSE bug 808355</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139597" comment="hplip-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151009" comment="hplip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139598" comment="hplip-hpijs-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151010" comment="hplip-hpijs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139599" comment="hplip-sane-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151011" comment="hplip-sane is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4300</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4300" source="CVE"/>
    <description>
    Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an LDSS packet with a long digest line that triggers memory corruption.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4300.html">CVE-2010-4300</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4300">SUSE bug 655448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4300">SUSE bug 655448</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4301</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4301" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4301" source="CVE"/>
    <description>
    epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted ZCL packet, related to Discover Attributes.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4301.html">CVE-2010-4301</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4301">SUSE bug 655448</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4341</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4341" source="CVE"/>
    <description>
    The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4341.html">CVE-2010-4341</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4341">SUSE bug 660481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4341">SUSE bug 660481</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140106" comment="libsss_idmap0-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151530" comment="libsss_idmap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140107" comment="libsss_sudo-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152073" comment="libsss_sudo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140108" comment="sssd-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151531" comment="sssd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140109" comment="sssd-32bit-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151532" comment="sssd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140110" comment="sssd-krb5-common-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151533" comment="sssd-krb5-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140111" comment="sssd-ldap-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151534" comment="sssd-ldap is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4352</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4352" source="CVE"/>
    <description>
    Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4352.html">CVE-2010-4352</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4352">SUSE bug 659934</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4410</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4410" source="CVE"/>
    <description>
    CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4410.html">CVE-2010-4410</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4410">SUSE bug 660127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4410">SUSE bug 657343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4410">SUSE bug 663396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4410">SUSE bug 670476</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140286" comment="perl-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140287" comment="perl-32bit-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140288" comment="perl-base-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140289" comment="perl-doc-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4411</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4411" source="CVE"/>
    <description>
    Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4411.html">CVE-2010-4411</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4411">SUSE bug 657343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4411">SUSE bug 657343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4411">SUSE bug 657731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4411">SUSE bug 657731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4411">SUSE bug 657343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4411">SUSE bug 657731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4411">SUSE bug 663396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4411">SUSE bug 663396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4411">SUSE bug 669245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4411">SUSE bug 670476</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140286" comment="perl-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140287" comment="perl-32bit-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140288" comment="perl-base-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140289" comment="perl-doc-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4494</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4494" source="CVE"/>
    <description>
    Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4494.html">CVE-2010-4494</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4494">SUSE bug 661471</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4531</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4531" source="CVE"/>
    <description>
    Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset (ATR) Handler (atrhandler.c) for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial of service (crash) and possibly execute arbitrary code via a smart card with an ATR message containing a long attribute value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4531.html">CVE-2010-4531</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4531">SUSE bug 661000</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139965" comment="libpcsclite1-1.8.17-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151385" comment="libpcsclite1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139966" comment="pcsc-lite-1.8.17-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151386" comment="pcsc-lite is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4538" source="CVE"/>
    <description>
    Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding (RLE) compression.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4538.html">CVE-2010-4538</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4538">SUSE bug 662029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4538">SUSE bug 662029</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4539</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4539" source="CVE"/>
    <description>
    The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4539.html">CVE-2010-4539</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4539">SUSE bug 662030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4539">SUSE bug 662030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4539">SUSE bug 662030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4539">SUSE bug 662030</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4540</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4540" source="CVE"/>
    <description>
    Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS &gt; LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Position field in a plugin configuration file.  NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4540.html">CVE-2010-4540</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4540">SUSE bug 662043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4540">SUSE bug 662043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4540">SUSE bug 662043</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139487" comment="gimp-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151540" comment="gimp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139488" comment="gimp-help-browser-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151541" comment="gimp-help-browser is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139489" comment="gimp-lang-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151542" comment="gimp-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139490" comment="gimp-plugin-aa-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151543" comment="gimp-plugin-aa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139491" comment="gimp-plugins-python-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151544" comment="gimp-plugins-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139492" comment="libgimp-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151545" comment="libgimp-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139493" comment="libgimpui-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151546" comment="libgimpui-2_0-0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4541</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4541" source="CVE"/>
    <description>
    Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long "Number of lights" field in a plugin configuration file.  NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4541.html">CVE-2010-4541</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4541">SUSE bug 662043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4541">SUSE bug 662043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4541">SUSE bug 662043</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139487" comment="gimp-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151540" comment="gimp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139488" comment="gimp-help-browser-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151541" comment="gimp-help-browser is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139489" comment="gimp-lang-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151542" comment="gimp-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139490" comment="gimp-plugin-aa-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151543" comment="gimp-plugin-aa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139491" comment="gimp-plugins-python-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151544" comment="gimp-plugins-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139492" comment="libgimp-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151545" comment="libgimp-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139493" comment="libgimpui-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151546" comment="libgimpui-2_0-0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4542</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4542" source="CVE"/>
    <description>
    Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long Foreground field in a plugin configuration file.  NOTE: it may be uncommon to obtain a GIMP plugin configuration file from an untrusted source that is separate from the distribution of the plugin itself. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4542.html">CVE-2010-4542</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4542">SUSE bug 662043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4542">SUSE bug 662043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4542">SUSE bug 662043</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139487" comment="gimp-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151540" comment="gimp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139488" comment="gimp-help-browser-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151541" comment="gimp-help-browser is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139489" comment="gimp-lang-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151542" comment="gimp-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139490" comment="gimp-plugin-aa-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151543" comment="gimp-plugin-aa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139491" comment="gimp-plugins-python-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151544" comment="gimp-plugins-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139492" comment="libgimp-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151545" comment="libgimp-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139493" comment="libgimpui-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151546" comment="libgimpui-2_0-0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4543</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4543" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4543" source="CVE"/>
    <description>
    Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4543.html">CVE-2010-4543</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4543">SUSE bug 662043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4543">SUSE bug 662043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4543">SUSE bug 662043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4543">SUSE bug 662043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4543">SUSE bug 692877</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139487" comment="gimp-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151540" comment="gimp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139488" comment="gimp-help-browser-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151541" comment="gimp-help-browser is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139489" comment="gimp-lang-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151542" comment="gimp-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139490" comment="gimp-plugin-aa-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151543" comment="gimp-plugin-aa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139491" comment="gimp-plugins-python-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151544" comment="gimp-plugins-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139492" comment="libgimp-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151545" comment="libgimp-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139493" comment="libgimpui-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151546" comment="libgimpui-2_0-0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4644</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4644" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4644" source="CVE"/>
    <description>
    Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4644.html">CVE-2010-4644</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4644">SUSE bug 662030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4644">SUSE bug 662030</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4645</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4645" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4645" source="CVE"/>
    <description>
    strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4645.html">CVE-2010-4645</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4645">SUSE bug 662932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4645">SUSE bug 662932</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4651</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4651" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4651" source="CVE"/>
    <description>
    Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4651.html">CVE-2010-4651</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4651">SUSE bug 662957</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4651">SUSE bug 662957</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4651">SUSE bug 662957</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4651">SUSE bug 662957</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4651">SUSE bug 662957</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4651">SUSE bug 662957</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4651">SUSE bug 662957</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4651">SUSE bug 662957</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140285" comment="patch-2.7.5-6.54 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151547" comment="patch is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4665</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4665" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4665" source="CVE"/>
    <description>
    Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entries.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4665.html">CVE-2010-4665</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4665">SUSE bug 687442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-4665">SUSE bug 854393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20104777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-4777</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-4777" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4777" source="CVE"/>
    <description>
    The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-4777.html">CVE-2010-4777</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140286" comment="perl-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140287" comment="perl-32bit-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140288" comment="perl-base-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140289" comment="perl-doc-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20105298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2010-5298</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2010-5298" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298" source="CVE"/>
    <description>
    Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2010-5298.html">CVE-2010-5298</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-5298">SUSE bug 873351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-5298">SUSE bug 873351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-5298">SUSE bug 873351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-5298">SUSE bug 873351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-5298">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-5298">SUSE bug 883126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-5298">SUSE bug 915913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-5298">SUSE bug 873351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2010-5298">SUSE bug 873351</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0010</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0010" source="CVE"/>
    <description>
    check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0010.html">CVE-2011-0010</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0010">SUSE bug 663881</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140363" comment="sudo-1.8.10p3-5.22 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110014" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0014</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0014" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014" source="CVE"/>
    <description>
    ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0014.html">CVE-2011-0014</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0014">SUSE bug 670526</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0020</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0020" source="CVE"/>
    <description>
    Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0020.html">CVE-2011-0020</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0020">SUSE bug 666101</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139961" comment="libpango-1_0-0-1.40.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151548" comment="libpango-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139962" comment="libpango-1_0-0-32bit-1.40.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151549" comment="libpango-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139963" comment="pango-devel-1.40.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151550" comment="pango-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139964" comment="typelib-1_0-Pango-1_0-1.40.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151553" comment="typelib-1_0-Pango-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0024</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0024" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0024" source="CVE"/>
    <description>
    Heap-based buffer overflow in wiretap/pcapng.c in Wireshark before 1.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted capture file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0024.html">CVE-2011-0024</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0024">SUSE bug 683335</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0053</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0053" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0053.html">CVE-2011-0053</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0053">SUSE bug 667155</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0053">SUSE bug 679570</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0061</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0061" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0061" source="CVE"/>
    <description>
    Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0061.html">CVE-2011-0061</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0061">SUSE bug 667155</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0061">SUSE bug 679570</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0062</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0062" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.14 and Thunderbird 3.1.x before 3.1.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0062.html">CVE-2011-0062</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0062">SUSE bug 667155</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0062">SUSE bug 679570</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0064</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0064" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0064" source="CVE"/>
    <description>
    The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via crafted OpenType font data that triggers use of an incorrect index.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0064.html">CVE-2011-0064</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0064">SUSE bug 672502</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0064">SUSE bug 666101</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139961" comment="libpango-1_0-0-1.40.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151548" comment="libpango-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139962" comment="libpango-1_0-0-32bit-1.40.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151549" comment="libpango-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139963" comment="pango-devel-1.40.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151550" comment="pango-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139964" comment="typelib-1_0-Pango-1_0-1.40.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151553" comment="typelib-1_0-Pango-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0068</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0068" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0068" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Not set</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0068.html">CVE-2011-0068</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0068">SUSE bug 689281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0069</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0069" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0070.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0069.html">CVE-2011-0069</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0069">SUSE bug 689281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0070</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0070" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0069.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0070.html">CVE-2011-0070</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0070">SUSE bug 689281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0072</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0072" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0074, CVE-2011-0075, CVE-2011-0077, and CVE-2011-0078.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0072.html">CVE-2011-0072</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0072">SUSE bug 689281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0074</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0074" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0072, CVE-2011-0075, CVE-2011-0077, and CVE-2011-0078.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0074.html">CVE-2011-0074</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0074">SUSE bug 689281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0075</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0075" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0072, CVE-2011-0074, CVE-2011-0077, and CVE-2011-0078.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0075.html">CVE-2011-0075</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0075">SUSE bug 689281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0077</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0077" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0072, CVE-2011-0074, CVE-2011-0075, and CVE-2011-0078.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0077.html">CVE-2011-0077</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0077">SUSE bug 689281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0078</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0078" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0072, CVE-2011-0074, CVE-2011-0075, and CVE-2011-0077.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0078.html">CVE-2011-0078</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0078">SUSE bug 689281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0079</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0079" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x before 4.0.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to gfx/layers/d3d10/ReadbackManagerD3D10.cpp and unknown other vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0079.html">CVE-2011-0079</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0079">SUSE bug 689281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0080</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0080" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before 3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0080.html">CVE-2011-0080</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0080">SUSE bug 689281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0081</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0081" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x before 4.0.1, and Thunderbird 3.1.x before 3.1.10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0081.html">CVE-2011-0081</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0081">SUSE bug 689281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0083</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0083" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0083.html">CVE-2011-0083</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0083">SUSE bug 701296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0083">SUSE bug 704750</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0084</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0084" source="CVE"/>
    <description>
    The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer."
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0084.html">CVE-2011-0084</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0084">SUSE bug 712224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0084">SUSE bug 712224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0085</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0085" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via a crafted XUL document that dequeues the current command updater.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0085.html">CVE-2011-0085</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0085">SUSE bug 701995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0085">SUSE bug 701296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0085">SUSE bug 704750</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0192</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0192" source="CVE"/>
    <description>
    Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF Internet Fax image file that has been compressed using CCITT Group 4 encoding, related to the EXPAND2D macro in libtiff/tif_fax3.h.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0192.html">CVE-2011-0192</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0192">SUSE bug 672510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0192">SUSE bug 682053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0192">SUSE bug 682871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0192">SUSE bug 682871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0192">SUSE bug 854393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0226</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0226" source="CVE"/>
    <description>
    Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0226.html">CVE-2011-0226</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0226">SUSE bug 704612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0226">SUSE bug 704612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0226">SUSE bug 704612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0226">SUSE bug 728044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110281" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0281</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0281" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0281" source="CVE"/>
    <description>
    The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0281.html">CVE-2011-0281</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0281">SUSE bug 663619</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0281">SUSE bug 663619</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0282</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0282" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0282" source="CVE"/>
    <description>
    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (NULL pointer dereference or buffer over-read, and daemon crash) via a crafted principal name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0282.html">CVE-2011-0282</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0282">SUSE bug 663619</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0282">SUSE bug 663619</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0284</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0284" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0284" source="CVE"/>
    <description>
    Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an e_data field containing typed data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0284.html">CVE-2011-0284</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0284">SUSE bug 671717</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0285</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0285" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0285" source="CVE"/>
    <description>
    The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0285.html">CVE-2011-0285</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0285">SUSE bug 687469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110413" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0413</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0413" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0413" source="CVE"/>
    <description>
    The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0413.html">CVE-2011-0413</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0413">SUSE bug 667655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0413">SUSE bug 667655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0413">SUSE bug 680298</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0414</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0414" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0414" source="CVE"/>
    <description>
    ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at the time of (1) an IXFR transfer or (2) a DDNS update.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0414.html">CVE-2011-0414</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0414">SUSE bug 674431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0414">SUSE bug 674431</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0419</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0419" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0419" source="CVE"/>
    <description>
    Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0419.html">CVE-2011-0419</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0419">SUSE bug 693778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0419">SUSE bug 693778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0419">SUSE bug 693778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0419">SUSE bug 693778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0419">SUSE bug 693778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0419">SUSE bug 700212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0419">SUSE bug 693778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0419">SUSE bug 693778</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139757" comment="libapr1-1.5.1-6.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151326" comment="libapr1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139758" comment="libapr1-devel-1.5.1-6.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151327" comment="libapr1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0420</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0420" source="CVE"/>
    <description>
    The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0420.html">CVE-2011-0420</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0420">SUSE bug 672933</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0420">SUSE bug 672933</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0421</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0421" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0421" source="CVE"/>
    <description>
    The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0421.html">CVE-2011-0421</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0421">SUSE bug 681193</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140235" comment="libzip-devel-0.11.1-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151554" comment="libzip-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140236" comment="libzip2-0.11.1-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151555" comment="libzip2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0460</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0460" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0460" source="CVE"/>
    <description>
    The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0460.html">CVE-2011-0460</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139615" comment="kbd-2.0.3-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151556" comment="kbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139616" comment="kbd-legacy-2.0.3-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154099" comment="kbd-legacy is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0461</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0461" source="CVE"/>
    <description>
    /etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0461.html">CVE-2011-0461</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0461">SUSE bug 665479</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139189" comment="aaa_base-13.2+git20140911.61c1681-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151557" comment="aaa_base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139190" comment="aaa_base-extras-13.2+git20140911.61c1681-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151558" comment="aaa_base-extras is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0465</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0465" source="CVE"/>
    <description>
    xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0465.html">CVE-2011-0465</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0465">SUSE bug 674733</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0465">SUSE bug 674733</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0465">SUSE bug 674733</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0465">SUSE bug 674733</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0465">SUSE bug 674733</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0465">SUSE bug 688931</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140414" comment="xorg-x11-7.6_1-17.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151559" comment="xorg-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140415" comment="xorg-x11-essentials-7.6_1-17.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151560" comment="xorg-x11-essentials is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140416" comment="xrdb-1.1.0-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151561" comment="xrdb is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0523</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0523" source="CVE"/>
    <description>
    gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0523.html">CVE-2011-0523</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0523">SUSE bug 666839</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139867" comment="libgypsy0-0.9-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151562" comment="libgypsy0 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0524</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0524" source="CVE"/>
    <description>
    Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0524.html">CVE-2011-0524</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0524">SUSE bug 666839</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139867" comment="libgypsy0-0.9-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151562" comment="libgypsy0 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0538" source="CVE"/>
    <description>
    Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0538.html">CVE-2011-0538</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0538">SUSE bug 669908</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0541</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0541" source="CVE"/>
    <description>
    fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0541.html">CVE-2011-0541</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0541">SUSE bug 668820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0541">SUSE bug 668820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0541">SUSE bug 685055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139459" comment="fuse-2.9.3-9.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151346" comment="fuse is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139460" comment="libfuse2-2.9.3-9.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151347" comment="libfuse2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0707</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0707" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0707" source="CVE"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0707.html">CVE-2011-0707</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0707">SUSE bug 671745</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140240" comment="mailman-2.1.22-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151563" comment="mailman is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0708</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0708" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0708" source="CVE"/>
    <description>
    exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0708.html">CVE-2011-0708</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0708">SUSE bug 671710</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0712</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0712" source="CVE"/>
    <description>
    Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0712.html">CVE-2011-0712</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0712">SUSE bug 672499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0712">SUSE bug 672499</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0713</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0713" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0713" source="CVE"/>
    <description>
    Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long record in a Nokia DCT3 trace file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0713.html">CVE-2011-0713</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0713">SUSE bug 672916</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0715</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0715" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0715" source="CVE"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0715.html">CVE-2011-0715</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0715">SUSE bug 676949</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0719</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0719" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0719" source="CVE"/>
    <description>
    Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0719.html">CVE-2011-0719</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0719">SUSE bug 670431</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0904</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0904" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0904" source="CVE"/>
    <description>
    The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0904.html">CVE-2011-0904</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 691356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0904">SUSE bug 691207</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140390" comment="vino-3.20.2-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151564" comment="vino is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140391" comment="vino-lang-3.20.2-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151565" comment="vino-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0905</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0905" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0905" source="CVE"/>
    <description>
    The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0905.html">CVE-2011-0905</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 691356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 691207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 690238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0905">SUSE bug 691207</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140390" comment="vino-3.20.2-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151564" comment="vino is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140391" comment="vino-lang-3.20.2-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151565" comment="vino-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20110997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-0997</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-0997" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997" source="CVE"/>
    <description>
    dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-0997.html">CVE-2011-0997</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0997">SUSE bug 675052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0997">SUSE bug 675052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0997">SUSE bug 689182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0997">SUSE bug 708527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-0997">SUSE bug 715172</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1000</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1000" source="CVE"/>
    <description>
    jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1000.html">CVE-2011-1000</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1000">SUSE bug 673257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1000">SUSE bug 673257</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140371" comment="telepathy-gabble-0.18.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151566" comment="telepathy-gabble is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1002</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1002" source="CVE"/>
    <description>
    avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1002.html">CVE-2011-1002</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1002">SUSE bug 671797</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139278" comment="avahi-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151208" comment="avahi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139279" comment="avahi-autoipd-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151209" comment="avahi-autoipd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139280" comment="avahi-compat-mDNSResponder-devel-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151210" comment="avahi-compat-mDNSResponder-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139281" comment="avahi-lang-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151211" comment="avahi-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139282" comment="libavahi-client3-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151212" comment="libavahi-client3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139283" comment="libavahi-client3-32bit-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151213" comment="libavahi-client3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139284" comment="libavahi-common3-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151214" comment="libavahi-common3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139285" comment="libavahi-common3-32bit-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151215" comment="libavahi-common3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139286" comment="libavahi-core7-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151216" comment="libavahi-core7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139287" comment="libavahi-devel-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151217" comment="libavahi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139288" comment="libdns_sd-0.6.32-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151218" comment="libdns_sd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1004</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1004" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1004" source="CVE"/>
    <description>
    The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1004.html">CVE-2011-1004</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1004">SUSE bug 673740</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140353" comment="ruby-2.1-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151366" comment="ruby is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140354" comment="ruby-devel-2.1-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151367" comment="ruby-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1005</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1005" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1005" source="CVE"/>
    <description>
    The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1005.html">CVE-2011-1005</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1005">SUSE bug 673750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1005">SUSE bug 783511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1005">SUSE bug 783525</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1005">SUSE bug 673750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1005">SUSE bug 880899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1005">SUSE bug 673750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1005">SUSE bug 673750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1005">SUSE bug 673750</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140353" comment="ruby-2.1-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151366" comment="ruby is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140354" comment="ruby-devel-2.1-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151367" comment="ruby-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1020</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1020" source="CVE"/>
    <description>
    The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1020.html">CVE-2011-1020</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1020">SUSE bug 674982</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1091</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1091" source="CVE"/>
    <description>
    libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG notification packet, and allows (2) remote Yahoo! servers to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG SMS message.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1091.html">CVE-2011-1091</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1091">SUSE bug 736189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1091">SUSE bug 736189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1091">SUSE bug 736189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1091">SUSE bug 736189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1091">SUSE bug 736189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1091">SUSE bug 736189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1091">SUSE bug 736189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1091">SUSE bug 736189</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1092</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1092" source="CVE"/>
    <description>
    Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1092.html">CVE-2011-1092</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1092">SUSE bug 677782</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1097</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1097" source="CVE"/>
    <description>
    rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1097.html">CVE-2011-1097</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1097">SUSE bug 684387</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140351" comment="rsync-3.1.0-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151567" comment="rsync is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1098</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1098" source="CVE"/>
    <description>
    Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1098.html">CVE-2011-1098</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1098">SUSE bug 677336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1098">SUSE bug 677335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1098">SUSE bug 677335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1098">SUSE bug 1007000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1098">SUSE bug 677335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1098">SUSE bug 677335</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140238" comment="logrotate-3.8.7-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151568" comment="logrotate is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1138</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1138" source="CVE"/>
    <description>
    Off-by-one error in the dissect_6lowpan_iphc function in packet-6lowpan.c in Wireshark 1.4.0 through 1.4.3 on 32-bit platforms allows remote attackers to cause a denial of service (application crash) via a malformed 6LoWPAN IPv6 packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1138.html">CVE-2011-1138</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1138">SUSE bug 678567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1139</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1139" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1139" source="CVE"/>
    <description>
    wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) via a pcap-ng file that contains a large packet-length field.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1139.html">CVE-2011-1139</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1139">SUSE bug 678568</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1140</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1140" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1140" source="CVE"/>
    <description>
    Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less LDAP (CLDAP) packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1140.html">CVE-2011-1140</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1140">SUSE bug 678569</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1143" source="CVE"/>
    <description>
    epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted .pcap file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1143.html">CVE-2011-1143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1143">SUSE bug 678571</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1145</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1145" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1145.html">CVE-2011-1145</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1145">SUSE bug 678796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1145">SUSE bug 764737</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140385" comment="unixODBC-2.3.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151569" comment="unixODBC is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1146</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1146" source="CVE"/>
    <description>
    libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS crash) or possibly execute arbitrary code via a (1) virNodeDeviceDettach, (2) virNodeDeviceReset, (3) virDomainRevertToSnapshot, (4) virDomainSnapshotDelete, (5) virNodeDeviceReAttach, or (6) virConnectDomainXMLToNative call, a different vulnerability than CVE-2008-5086.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1146.html">CVE-2011-1146</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1146">SUSE bug 678406</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1153</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1153" source="CVE"/>
    <description>
    Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1153.html">CVE-2011-1153</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1153">SUSE bug 778941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1153">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1154</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1154" source="CVE"/>
    <description>
    The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1154.html">CVE-2011-1154</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1154">SUSE bug 679661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1154">SUSE bug 677335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1154">SUSE bug 681984</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140238" comment="logrotate-3.8.7-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151568" comment="logrotate is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1155</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1155" source="CVE"/>
    <description>
    The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1155.html">CVE-2011-1155</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1155">SUSE bug 679662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1155">SUSE bug 677335</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140238" comment="logrotate-3.8.7-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151568" comment="logrotate is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1164</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1164" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1164" source="CVE"/>
    <description>
    Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier for remote attackers to perform attacks.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1164.html">CVE-2011-1164</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1164">SUSE bug 680072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1164">SUSE bug 680072</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140390" comment="vino-3.20.2-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151564" comment="vino is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140391" comment="vino-lang-3.20.2-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151565" comment="vino-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1167</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1167" source="CVE"/>
    <description>
    Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1167.html">CVE-2011-1167</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1167">SUSE bug 683337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1167">SUSE bug 854393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1176</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1176" source="CVE"/>
    <description>
    The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileges by leveraging the root uid and root gid of an mpm-itk process.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1176.html">CVE-2011-1176</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1176">SUSE bug 681176</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1187</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1187" source="CVE"/>
    <description>
    Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1187.html">CVE-2011-1187</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1187">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1202</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1202" source="CVE"/>
    <description>
    The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1202.html">CVE-2011-1202</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1202">SUSE bug 689281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1202">SUSE bug 692619</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1466</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1466" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1466" source="CVE"/>
    <description>
    Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1466.html">CVE-2011-1466</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 738221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 741520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 742273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 742806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 743308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 744966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 746661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 749111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1466">SUSE bug 736169</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1485</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1485" source="CVE"/>
    <description>
    Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1485.html">CVE-2011-1485</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1485">SUSE bug 688788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1485">SUSE bug 688788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1485">SUSE bug 688788</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139970" comment="libpolkit0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139971" comment="polkit-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139972" comment="polkit-devel-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151395" comment="polkit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139973" comment="typelib-1_0-Polkit-1_0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1521</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1521" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1521" source="CVE"/>
    <description>
    The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1521.html">CVE-2011-1521</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1521">SUSE bug 682554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1521">SUSE bug 682554</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1523</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1523" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1523.html">CVE-2011-1523</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1523">SUSE bug 682966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1523">SUSE bug 697895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1523">SUSE bug 682966</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140250" comment="nagios-3.5.1-2.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151576" comment="nagios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140251" comment="nagios-www-3.5.1-2.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151577" comment="nagios-www is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1527</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1527" source="CVE"/>
    <description>
    The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1527.html">CVE-2011-1527</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1527">SUSE bug 719393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1527">SUSE bug 743742</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1528</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1528" source="CVE"/>
    <description>
    The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, related to the locked_check_p function.  NOTE: the Berkeley DB vector is covered by CVE-2011-4151.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1528.html">CVE-2011-1528</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1528">SUSE bug 719393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1528">SUSE bug 743742</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1529</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1529" source="CVE"/>
    <description>
    The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1529.html">CVE-2011-1529</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1529">SUSE bug 719393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1529">SUSE bug 743742</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1530</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1530" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1530" source="CVE"/>
    <description>
    The process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS request that triggers an error other than the KRB5_KDB_NOENTRY error.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1530.html">CVE-2011-1530</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1530">SUSE bug 730393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1530">SUSE bug 730393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1577</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1577" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1577" source="CVE"/>
    <description>
    Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1577.html">CVE-2011-1577</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1577">SUSE bug 687113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1577">SUSE bug 692784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1577">SUSE bug 692784</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1588</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1588" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1588" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1588.html">CVE-2011-1588</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1588">SUSE bug 687874</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140144" comment="libthunarx-2-0-1.6.10-4.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151578" comment="libthunarx-2-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140145" comment="thunar-1.6.10-4.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151579" comment="thunar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140146" comment="thunar-lang-1.6.10-4.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151580" comment="thunar-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1590</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1590" source="CVE"/>
    <description>
    The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1590.html">CVE-2011-1590</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1590">SUSE bug 688109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1590">SUSE bug 688109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1591</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1591" source="CVE"/>
    <description>
    Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1591.html">CVE-2011-1591</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1591">SUSE bug 688109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1591">SUSE bug 688109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1592</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1592" source="CVE"/>
    <description>
    The NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4.5 on Windows uses an incorrect integer data type during decoding of SETCLIENTID calls, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1592.html">CVE-2011-1592</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1592">SUSE bug 688109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1592">SUSE bug 688109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1709</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1709" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1709" source="CVE"/>
    <description>
    GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1709.html">CVE-2011-1709</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1709">SUSE bug 694858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139477" comment="gdm-3.14.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151581" comment="gdm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139478" comment="gdm-lang-3.14.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151582" comment="gdm-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139479" comment="gdmflexiserver-3.14.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151583" comment="gdmflexiserver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139480" comment="libgdm1-3.14.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151584" comment="libgdm1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139481" comment="typelib-1_0-Gdm-1_0-3.14.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151585" comment="typelib-1_0-Gdm-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1752</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1752" source="CVE"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1752.html">CVE-2011-1752</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1752">SUSE bug 698205</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1758</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1758" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1758" source="CVE"/>
    <description>
    The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by listing the /tmp directory to obtain the pathname.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1758.html">CVE-2011-1758</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1758">SUSE bug 691135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1758">SUSE bug 691135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1758">SUSE bug 691135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1758">SUSE bug 691135</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140106" comment="libsss_idmap0-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151530" comment="libsss_idmap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140107" comment="libsss_sudo-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152073" comment="libsss_sudo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140108" comment="sssd-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151531" comment="sssd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140109" comment="sssd-32bit-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151532" comment="sssd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140110" comment="sssd-krb5-common-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151533" comment="sssd-krb5-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140111" comment="sssd-ldap-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151534" comment="sssd-ldap is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1761</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1761" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1761" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ABC file.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1761.html">CVE-2011-1761</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1761">SUSE bug 691137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1761">SUSE bug 710726</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139937" comment="libmodplug1-0.8.8.5-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151586" comment="libmodplug1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1783</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1783" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1783" source="CVE"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1783.html">CVE-2011-1783</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1783">SUSE bug 698205</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1898</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1898" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1898" source="CVE"/>
    <description>
    Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1898.html">CVE-2011-1898</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1898">SUSE bug 702025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1898">SUSE bug 724906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1898">SUSE bug 724906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1898">SUSE bug 702025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1898">SUSE bug 724906</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1907</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1907" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1907" source="CVE"/>
    <description>
    ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1907.html">CVE-2011-1907</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1907">SUSE bug 692210</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1910</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1910" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1910" source="CVE"/>
    <description>
    Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1910.html">CVE-2011-1910</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1910">SUSE bug 696585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1910">SUSE bug 696585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1910">SUSE bug 698286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1910">SUSE bug 698286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1910">SUSE bug 698286</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111921" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1921</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1921" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1921" source="CVE"/>
    <description>
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1921.html">CVE-2011-1921</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1921">SUSE bug 698205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1921">SUSE bug 698205</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1928</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1928" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1928" source="CVE"/>
    <description>
    The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI that does not match unspecified types of wildcard patterns, as demonstrated by attacks against mod_autoindex in httpd when a /*/WEB-INF/ configuration pattern is used.  NOTE: this issue exists because of an incorrect fix for CVE-2011-0419.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1928.html">CVE-2011-1928</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1928">SUSE bug 693778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1928">SUSE bug 693778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1928">SUSE bug 693778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1928">SUSE bug 693778</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139757" comment="libapr1-1.5.1-6.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151326" comment="libapr1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139758" comment="libapr1-devel-1.5.1-6.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151327" comment="libapr1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1944</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1944" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1944" source="CVE"/>
    <description>
    Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1944.html">CVE-2011-1944</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1944">SUSE bug 697372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1944">SUSE bug 697372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1946</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1946" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1946" source="CVE"/>
    <description>
    gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid function, which allows local users to gain privileges by leveraging access to two unprivileged user accounts, and running many processes under one of these accounts.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1946.html">CVE-2011-1946</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1946">SUSE bug 695627</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139862" comment="libgnomesu-2.0.0-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151593" comment="libgnomesu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139863" comment="libgnomesu-lang-2.0.0-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151594" comment="libgnomesu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139864" comment="libgnomesu0-2.0.0-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151595" comment="libgnomesu0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1947</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1947" source="CVE"/>
    <description>
    fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote servers to cause a denial of service (application hang) by acknowledging the request but not sending additional packets.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1947.html">CVE-2011-1947</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1947">SUSE bug 697368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1947">SUSE bug 697368</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139439" comment="fetchmail-6.3.26-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151334" comment="fetchmail is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1957</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1957" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1957" source="CVE"/>
    <description>
    The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infinite loop) via an invalid PDU length.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1957.html">CVE-2011-1957</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1957">SUSE bug 697516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1957">SUSE bug 697516</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1958</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1958" source="CVE"/>
    <description>
    Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Diameter dictionary file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1958.html">CVE-2011-1958</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1958">SUSE bug 697516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1958">SUSE bug 697516</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20111959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-1959</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-1959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1959" source="CVE"/>
    <description>
    The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-1959.html">CVE-2011-1959</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1959">SUSE bug 697516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-1959">SUSE bug 697516</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2054</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2054" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2054.html">CVE-2011-2054</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2054">SUSE bug 709167</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140085" comment="libsoup-2_4-1-2.54.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151596" comment="libsoup-2_4-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140086" comment="libsoup-devel-2.54.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151597" comment="libsoup-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140087" comment="libsoup-lang-2.54.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151598" comment="libsoup-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140088" comment="typelib-1_0-Soup-2_4-2.54.1-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151599" comment="typelib-1_0-Soup-2_4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2174</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2174" source="CVE"/>
    <description>
    Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a packet with malformed data that uses zlib compression.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2174.html">CVE-2011-2174</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2174">SUSE bug 697516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2174">SUSE bug 697516</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2175</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2175" source="CVE"/>
    <description>
    Integer underflow in the visual_read function in wiretap/visual.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a malformed Visual Networks file that triggers a heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2175.html">CVE-2011-2175</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2175">SUSE bug 697516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2175">SUSE bug 697516</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2186</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2186" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2186.html">CVE-2011-2186</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2186">SUSE bug 698456</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139494" comment="git-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151600" comment="git is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139495" comment="git-core-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151601" comment="git-core is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139496" comment="git-cvs-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151602" comment="git-cvs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139497" comment="git-daemon-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151603" comment="git-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139498" comment="git-email-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151604" comment="git-email is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139499" comment="git-gui-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151605" comment="git-gui is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139500" comment="git-svn-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151606" comment="git-svn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139501" comment="git-web-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151607" comment="git-web is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139502" comment="gitk-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151608" comment="gitk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2199</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2199" source="CVE"/>
    <description>
    Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2199.html">CVE-2011-2199</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2199">SUSE bug 699714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2199">SUSE bug 699714</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140373" comment="tftp-5.2-12.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151609" comment="tftp is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2202</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2202" source="CVE"/>
    <description>
    The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2202.html">CVE-2011-2202</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2202">SUSE bug 699711</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2203</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2203" source="CVE"/>
    <description>
    The hfs_find_init function in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and Oops) by mounting an HFS file system with a malformed MDB extent record.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2203.html">CVE-2011-2203</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2203">SUSE bug 699709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2362</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2362" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2362" source="CVE"/>
    <description>
    Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2362.html">CVE-2011-2362</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2362">SUSE bug 701296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2362">SUSE bug 704750</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2363</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2363" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2363" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2363.html">CVE-2011-2363</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2363">SUSE bug 702020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2363">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2364</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2364" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2364" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2365.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2364.html">CVE-2011-2364</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2364">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2365</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2365" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2364.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2365.html">CVE-2011-2365</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2365">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112366" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2366</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2366" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2366" source="CVE"/>
    <description>
    Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2366.html">CVE-2011-2366</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2366">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2367</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2367" source="CVE"/>
    <description>
    The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2367.html">CVE-2011-2367</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2367">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2368</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2368" source="CVE"/>
    <description>
    The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2368.html">CVE-2011-2368</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2368">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2369</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2369" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2369" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitrary web script or HTML via an SVG element containing an HTML-encoded entity.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2369.html">CVE-2011-2369</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2369">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2370</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2370" source="CVE"/>
    <description>
    Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2370.html">CVE-2011-2370</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2370">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2371</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2371" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2371" source="CVE"/>
    <description>
    Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2371.html">CVE-2011-2371</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2371">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2372</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2372" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2372" source="CVE"/>
    <description>
    Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2372.html">CVE-2011-2372</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2372">SUSE bug 720264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2373</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2373" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2373.html">CVE-2011-2373</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2373">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2374</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2374" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2374.html">CVE-2011-2374</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2374">SUSE bug 701296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2374">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2375</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2375" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2375.html">CVE-2011-2375</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2375">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2376</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2376" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2376.html">CVE-2011-2376</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2376">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2377</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2377" source="CVE"/>
    <description>
    Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2377.html">CVE-2011-2377</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2377">SUSE bug 701296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2464</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464" source="CVE"/>
    <description>
    Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2464.html">CVE-2011-2464</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2464">SUSE bug 703907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2464">SUSE bug 703907</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2483" source="CVE"/>
    <description>
    crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2483.html">CVE-2011-2483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2483">SUSE bug 700876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2483">SUSE bug 700876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2483">SUSE bug 701491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2483">SUSE bug 713727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2483">SUSE bug 701491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2483">SUSE bug 738221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2483">SUSE bug 701489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2483">SUSE bug 749299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2483">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2483">SUSE bug 749303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140366" comment="sysvinit-tools-2.88+-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151610" comment="sysvinit-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140367" comment="whois-5.2.12-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151611" comment="whois is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140425" comment="yast2-core-3.1.23-1.20 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151612" comment="yast2-core is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2485</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2485" source="CVE"/>
    <description>
    The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values, which allows remote attackers to cause a denial of service (memory consumption) via a crafted GIF image file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2485.html">CVE-2011-2485</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2485">SUSE bug 702028</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139466" comment="gdk-pixbuf-devel-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151614" comment="gdk-pixbuf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139467" comment="gdk-pixbuf-lang-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139468" comment="gdk-pixbuf-query-loaders-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139469" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151617" comment="gdk-pixbuf-query-loaders-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139470" comment="libgdk_pixbuf-2_0-0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139471" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151619" comment="libgdk_pixbuf-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139472" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2486</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2486" source="CVE"/>
    <description>
    nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2486.html">CVE-2011-2486</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2486">SUSE bug 702034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2486">SUSE bug 702034</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140256" comment="nspluginwrapper-1.4.4-20.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151621" comment="nspluginwrapper is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2489</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2489" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2489" source="CVE"/>
    <description>
    Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2489.html">CVE-2011-2489</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2489">SUSE bug 698772</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140271" comment="opie-2.4-727.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151622" comment="opie is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140272" comment="opie-32bit-2.4-727.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151623" comment="opie-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2490</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2490" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2490" source="CVE"/>
    <description>
    opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2490.html">CVE-2011-2490</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2490">SUSE bug 698772</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140271" comment="opie-2.4-727.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151622" comment="opie is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140272" comment="opie-32bit-2.4-727.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151623" comment="opie-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2501</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2501" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2501" source="CVE"/>
    <description>
    The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data.  NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2501.html">CVE-2011-2501</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2501">SUSE bug 702578</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139967" comment="libpng12-0-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139968" comment="libpng12-0-32bit-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139969" comment="libpng12-devel-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117932" comment="libpng16-16-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117933" comment="libpng16-16-32bit-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117936" comment="libpng16-compat-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117937" comment="libpng16-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2511</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2511" source="CVE"/>
    <description>
    Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2511.html">CVE-2011-2511</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2511">SUSE bug 703084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2513</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2513" source="CVE"/>
    <description>
    The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2513.html">CVE-2011-2513</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2513">SUSE bug 704309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2513">SUSE bug 704309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2513">SUSE bug 704309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139604" comment="icedtea-web-javadoc-1.6.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139605" comment="java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151625" comment="java-1_8_0-openjdk-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2514</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2514" source="CVE"/>
    <description>
    The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warning dialog box to represent a different filename than the file for which access will be granted.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2514.html">CVE-2011-2514</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2514">SUSE bug 704309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139604" comment="icedtea-web-javadoc-1.6.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139605" comment="java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151625" comment="java-1_8_0-openjdk-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2522</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2522" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2522" source="CVE"/>
    <description>
    Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shares, (4) remove shares, (5) add printers, (6) remove printers, (7) add user accounts, or (8) remove user accounts, as demonstrated by certain start, stop, and restart parameters to the status program.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2522.html">CVE-2011-2522</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2522">SUSE bug 705241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2522">SUSE bug 705241</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2597</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2597" source="CVE"/>
    <description>
    The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2597.html">CVE-2011-2597</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2597">SUSE bug 706728</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2690</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2690" source="CVE"/>
    <description>
    Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2690.html">CVE-2011-2690</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2690">SUSE bug 706387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2690">SUSE bug 706388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2690">SUSE bug 854395</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117932" comment="libpng16-16-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117933" comment="libpng16-16-32bit-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117936" comment="libpng16-compat-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117937" comment="libpng16-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2691</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2691" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2691" source="CVE"/>
    <description>
    The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2691.html">CVE-2011-2691</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2691">SUSE bug 706388</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117932" comment="libpng16-16-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117933" comment="libpng16-16-32bit-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117936" comment="libpng16-compat-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117937" comment="libpng16-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2692</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2692" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2692" source="CVE"/>
    <description>
    The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2692.html">CVE-2011-2692</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2692">SUSE bug 706389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2692">SUSE bug 854395</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117932" comment="libpng16-16-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117933" comment="libpng16-16-32bit-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117936" comment="libpng16-compat-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117937" comment="libpng16-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2694</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2694" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program (aka the user field to the Change Password page).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2694.html">CVE-2011-2694</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2696</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2696" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2696" source="CVE"/>
    <description>
    Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2696.html">CVE-2011-2696</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2696">SUSE bug 705681</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119287" comment="libsndfile-devel-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119271" comment="libsndfile1-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119272" comment="libsndfile1-32bit-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2697</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2697" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2697" source="CVE"/>
    <description>
    foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2697.html">CVE-2011-2697</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 704608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 704608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2697">SUSE bug 957531</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139597" comment="hplip-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151009" comment="hplip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139598" comment="hplip-hpijs-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151010" comment="hplip-hpijs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139599" comment="hplip-sane-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151011" comment="hplip-sane is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2698</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2698" source="CVE"/>
    <description>
    Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (infinite loop) via an invalid packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2698.html">CVE-2011-2698</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2698">SUSE bug 706728</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2709</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2709" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2709" source="CVE"/>
    <description>
    libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment variable, as demonstrated using mount.nfs.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2709.html">CVE-2011-2709</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2709">SUSE bug 694598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2709">SUSE bug 694598</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139865" comment="libgssglue-devel-0.4-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151626" comment="libgssglue-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139866" comment="libgssglue1-0.4-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151627" comment="libgssglue1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2721</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2721" source="CVE"/>
    <description>
    Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2721.html">CVE-2011-2721</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2721">SUSE bug 708263</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2722</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2722" source="CVE"/>
    <description>
    The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2722.html">CVE-2011-2722</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2722">SUSE bug 704608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2722">SUSE bug 713717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2722">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2722">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2722">SUSE bug 704608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2722">SUSE bug 59233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2722">SUSE bug 698451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2722">SUSE bug 704608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2722">SUSE bug 808355</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139597" comment="hplip-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151009" comment="hplip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139598" comment="hplip-hpijs-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151010" comment="hplip-hpijs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139599" comment="hplip-sane-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151011" comment="hplip-sane is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2729</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2729" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2729" source="CVE"/>
    <description>
    native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2729.html">CVE-2011-2729</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2729">SUSE bug 715656</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139206" comment="apache-commons-daemon-1.0.15-12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151628" comment="apache-commons-daemon is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2748</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2748" source="CVE"/>
    <description>
    The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted DHCP packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2748.html">CVE-2011-2748</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2748">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2748">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2748">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2748">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2748">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2748">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2748">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2748">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2748">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2748">SUSE bug 712653</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2749</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749" source="CVE"/>
    <description>
    The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2749.html">CVE-2011-2749</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2749">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2749">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2749">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2749">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2749">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2749">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2749">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2749">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2749">SUSE bug 712653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2749">SUSE bug 712653</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2766</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2766" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2766" source="CVE"/>
    <description>
    The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP headers.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2766.html">CVE-2011-2766</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2766">SUSE bug 735882</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139157" comment="FastCGI-2.4.0-171.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151629" comment="FastCGI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139158" comment="perl-FastCGI-2.4.0-171.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151630" comment="perl-FastCGI is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2895</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2895" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2895" source="CVE"/>
    <description>
    The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2895.html">CVE-2011-2895</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 709851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 711487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 711487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 709851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 709851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 711487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 711487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 711487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 711487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 711487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 711487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 711487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 711487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2895">SUSE bug 711487</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139721" comment="libXfont-devel-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151631" comment="libXfont-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139722" comment="libXfont1-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140417" comment="xorg-x11-devel-7.6-48.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151633" comment="xorg-x11-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2896</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2896" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2896" source="CVE"/>
    <description>
    The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2896.html">CVE-2011-2896</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 711490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 601830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 680210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 680212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 700987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 711490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 715643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 601830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 671735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 680210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 711490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 711491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 715643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 711490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 711490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 711490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 711490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 711491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 711490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2896">SUSE bug 711491</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139487" comment="gimp-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151540" comment="gimp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139488" comment="gimp-help-browser-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151541" comment="gimp-help-browser is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139489" comment="gimp-lang-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151542" comment="gimp-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139490" comment="gimp-plugin-aa-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151543" comment="gimp-plugin-aa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139491" comment="gimp-plugins-python-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151544" comment="gimp-plugins-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139492" comment="libgimp-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151545" comment="libgimp-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139493" comment="libgimpui-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151546" comment="libgimpui-2_0-0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2985</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2985" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2985.html">CVE-2011-2985</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2985">SUSE bug 712224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2986</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2986" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2986" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D (aka D2D) API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2986.html">CVE-2011-2986</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2986">SUSE bug 712224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2987</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2987" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2987" source="CVE"/>
    <description>
    Heap-based buffer overflow in Almost Native Graphics Layer Engine (ANGLE), as used in the WebGL implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products might allow remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2987.html">CVE-2011-2987</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2987">SUSE bug 712224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2988</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2988" source="CVE"/>
    <description>
    Buffer overflow in an unspecified string class in the WebGL shader implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long source-code block for a shader.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2988.html">CVE-2011-2988</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2988">SUSE bug 712224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2989</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2989" source="CVE"/>
    <description>
    The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement WebGL, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2989.html">CVE-2011-2989</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2989">SUSE bug 712224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2989">SUSE bug 712224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2990</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2990" source="CVE"/>
    <description>
    The implementation of Content Security Policy (CSP) violation reports in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not remove proxy-authorization credentials from the listed request headers, which allows attackers to obtain sensitive information by reading a report, related to incorrect host resolution that occurs with certain redirects.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2990.html">CVE-2011-2990</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2990">SUSE bug 712224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2991</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2991" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2991" source="CVE"/>
    <description>
    The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement JavaScript, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2991.html">CVE-2011-2991</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2991">SUSE bug 712224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2992</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2992" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2992" source="CVE"/>
    <description>
    The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2992.html">CVE-2011-2992</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2992">SUSE bug 712224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2993</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2993" source="CVE"/>
    <description>
    The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not prevent calls from unsigned JavaScript code to signed code, which allows remote attackers to bypass the Same Origin Policy and gain privileges via a crafted web site, a different vulnerability than CVE-2008-2801.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2993.html">CVE-2011-2993</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2993">SUSE bug 712224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2995</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2995" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2995.html">CVE-2011-2995</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2995">SUSE bug 720264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2996</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2996" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2996" source="CVE"/>
    <description>
    Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2996.html">CVE-2011-2996</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2996">SUSE bug 720264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20112997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-2997</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-2997" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2997" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-2997.html">CVE-2011-2997</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-2997">SUSE bug 720264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3000</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3000" source="CVE"/>
    <description>
    Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting attacks via crafted header values.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3000.html">CVE-2011-3000</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3000">SUSE bug 720264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3001</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3001" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an unspecified internal error.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3001.html">CVE-2011-3001</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3001">SUSE bug 720264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3002</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3002" source="CVE"/>
    <description>
    Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 7.0 and SeaMonkey before 2.4, does not validate the return value of a GrowAtomTable function call, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a memory-allocation error and a resulting buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3002.html">CVE-2011-3002</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3002">SUSE bug 720264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3003</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3003" source="CVE"/>
    <description>
    Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unspecified WebGL test case that triggers a memory-allocation error and a resulting out-of-bounds write operation.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3003.html">CVE-2011-3003</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3003">SUSE bug 720264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3004</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3004" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3004" source="CVE"/>
    <description>
    The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey before 2.4 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3004.html">CVE-2011-3004</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3004">SUSE bug 720264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3005</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3005" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3005" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OGG headers in a .ogg file.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3005.html">CVE-2011-3005</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3005">SUSE bug 720264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3026</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3026" source="CVE"/>
    <description>
    Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3026.html">CVE-2011-3026</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 773612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 747311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3026">SUSE bug 854395</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139967" comment="libpng12-0-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139968" comment="libpng12-0-32bit-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139969" comment="libpng12-devel-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3045</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3045" source="CVE"/>
    <description>
    Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3045.html">CVE-2011-3045</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3045">SUSE bug 752008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3045">SUSE bug 752008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3045">SUSE bug 752008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3045">SUSE bug 752008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3045">SUSE bug 754456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3045">SUSE bug 752008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3045">SUSE bug 752008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3045">SUSE bug 754456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3045">SUSE bug 752008</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139967" comment="libpng12-0-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139968" comment="libpng12-0-32bit-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139969" comment="libpng12-devel-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3048</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3048" source="CVE"/>
    <description>
    The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3048.html">CVE-2011-3048</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3048">SUSE bug 754745</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3048">SUSE bug 754745</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3048">SUSE bug 754745</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3048">SUSE bug 754745</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3048">SUSE bug 854395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3048">SUSE bug 754745</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139967" comment="libpng12-0-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139968" comment="libpng12-0-32bit-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139969" comment="libpng12-devel-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3062</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3062" source="CVE"/>
    <description>
    Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3062.html">CVE-2011-3062</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3062">SUSE bug 754458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3062">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3079</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3079" source="CVE"/>
    <description>
    The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3079.html">CVE-2011-3079</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3079">SUSE bug 760264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3079">SUSE bug 930622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3101</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3101" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3101" source="CVE"/>
    <description>
    Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which has unknown impact and attack vectors.  NOTE: see CVE-2012-3105 for the related MFSA 2012-34 issue in Mozilla products.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3101.html">CVE-2011-3101</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3101">SUSE bug 762481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3101">SUSE bug 765204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3146</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3146" source="CVE"/>
    <description>
    librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as a RsvgFilterPrimitive.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3146.html">CVE-2011-3146</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3146">SUSE bug 714980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3146">SUSE bug 714980</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139473" comment="gdk-pixbuf-loader-rsvg-2.40.15-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151634" comment="gdk-pixbuf-loader-rsvg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139474" comment="librsvg-2-2-2.40.15-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151635" comment="librsvg-2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139475" comment="librsvg-devel-2.40.15-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151636" comment="librsvg-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139476" comment="typelib-1_0-Rsvg-2_0-2.40.15-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151637" comment="typelib-1_0-Rsvg-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3148</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3148" source="CVE"/>
    <description>
    Stack-based buffer overflow in the _assemble_line function in modules/pam_env/pam_env.c in Linux-PAM (aka pam) before 1.1.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam_environment file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3148.html">CVE-2011-3148</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3148">SUSE bug 724480</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140276" comment="pam-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151504" comment="pam is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140277" comment="pam-32bit-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151505" comment="pam-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140278" comment="pam-devel-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151506" comment="pam-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113149" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3149</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3149" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3149" source="CVE"/>
    <description>
    The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow, which allows local users to cause a denial of service (CPU consumption).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3149.html">CVE-2011-3149</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3149">SUSE bug 724480</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140276" comment="pam-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151504" comment="pam is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140277" comment="pam-32bit-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151505" comment="pam-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140278" comment="pam-devel-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151506" comment="pam-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3153</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3153" source="CVE"/>
    <description>
    dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack on ~/.dmrc.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3153.html">CVE-2011-3153</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3153">SUSE bug 728627</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139922" comment="liblightdm-gobject-1-0-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151638" comment="liblightdm-gobject-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139923" comment="lightdm-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151639" comment="lightdm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139924" comment="lightdm-lang-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151640" comment="lightdm-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3172</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3172" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3172" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3172.html">CVE-2011-3172</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3172">SUSE bug 707645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3172">SUSE bug 707645</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140279" comment="pam-modules-12.1-27.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151641" comment="pam-modules is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140280" comment="pam-modules-32bit-12.1-27.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151642" comment="pam-modules-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3177</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3177" source="CVE"/>
    <description>
    The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3177.html">CVE-2011-3177</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3177">SUSE bug 713661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3177">SUSE bug 713661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3177">SUSE bug 713661</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140424" comment="yast2-3.1.206-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151643" comment="yast2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140425" comment="yast2-core-3.1.23-1.20 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151612" comment="yast2-core is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3192</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192" source="CVE"/>
    <description>
    The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3192.html">CVE-2011-3192</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 714306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 714306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 716634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 716634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 718106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 716634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 718106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 722545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 726139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 716634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 716634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 716634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 732051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 732051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 732051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 732051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 732051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 732051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 732051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 732051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 716634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 718106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 726139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 732051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 732051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 718106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 726139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 732051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 713966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3192">SUSE bug 983778</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3193</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3193" source="CVE"/>
    <description>
    Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3193.html">CVE-2011-3193</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3193">SUSE bug 714984</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3207</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3207" source="CVE"/>
    <description>
    crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3207.html">CVE-2011-3207</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3207">SUSE bug 716143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3207">SUSE bug 716143</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3210" source="CVE"/>
    <description>
    The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3210.html">CVE-2011-3210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3210">SUSE bug 716144</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3232</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3232" source="CVE"/>
    <description>
    YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, and SeaMonkey before 2.4, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3232.html">CVE-2011-3232</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3232">SUSE bug 720264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3256</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3256" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3256" source="CVE"/>
    <description>
    FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3256.html">CVE-2011-3256</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3256">SUSE bug 728044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3256">SUSE bug 730124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3256">SUSE bug 748083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3266</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3266" source="CVE"/>
    <description>
    The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in a tree.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3266.html">CVE-2011-3266</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3266">SUSE bug 718032</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3328</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3328" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3328" source="CVE"/>
    <description>
    The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed PNG image containing a cHRM chunk associated with a certain zero value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3328.html">CVE-2011-3328</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3328">SUSE bug 720017</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117932" comment="libpng16-16-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117933" comment="libpng16-16-32bit-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117936" comment="libpng16-compat-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117937" comment="libpng16-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3349</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3349" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3349" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Not set</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3349.html">CVE-2011-3349</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3349">SUSE bug 708205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3349">SUSE bug 708205</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139922" comment="liblightdm-gobject-1-0-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151638" comment="liblightdm-gobject-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139923" comment="lightdm-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151639" comment="lightdm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139924" comment="lightdm-lang-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151640" comment="lightdm-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113360" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3360</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3360" source="CVE"/>
    <description>
    Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified directory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3360.html">CVE-2011-3360</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3360">SUSE bug 718032</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3368</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3368" source="CVE"/>
    <description>
    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3368.html">CVE-2011-3368</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3368">SUSE bug 722545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3368">SUSE bug 722545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3368">SUSE bug 728876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3368">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3368">SUSE bug 791794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3368">SUSE bug 722545</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3372</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3372" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3372" source="CVE"/>
    <description>
    imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3372.html">CVE-2011-3372</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3372">SUSE bug 719998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3372">SUSE bug 719998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139363" comment="cyradm-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151342" comment="cyradm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139364" comment="cyrus-imapd-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151343" comment="cyrus-imapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139365" comment="perl-Cyrus-IMAP-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151344" comment="perl-Cyrus-IMAP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139366" comment="perl-Cyrus-SIEVE-managesieve-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151345" comment="perl-Cyrus-SIEVE-managesieve is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3377</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3377" source="CVE"/>
    <description>
    The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (SOP) and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a different sub-domain than the targeted domain.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3377.html">CVE-2011-3377</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3377">SUSE bug 729870</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139604" comment="icedtea-web-javadoc-1.6.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139605" comment="java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151625" comment="java-1_8_0-openjdk-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3379</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3379" source="CVE"/>
    <description>
    The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3379.html">CVE-2011-3379</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3379">SUSE bug 728350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3379">SUSE bug 728350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3379">SUSE bug 728350</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3389</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389" source="CVE"/>
    <description>
    The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3389.html">CVE-2011-3389</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 716002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 719047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 725167</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 726096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 726096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 739248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 739256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 742306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 751718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 759666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 759666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 759666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 759666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 759666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 759666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 759666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 759666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 759666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 759666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 759666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 719047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3389">SUSE bug 719047</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139439" comment="fetchmail-6.3.26-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151334" comment="fetchmail is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3439</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3439" source="CVE"/>
    <description>
    FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3439.html">CVE-2011-3439</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3439">SUSE bug 730124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3439">SUSE bug 730124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3439">SUSE bug 748083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3483" source="CVE"/>
    <description>
    Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed capture file that leads to an invalid root tvbuff, related to a "buffer exception handling vulnerability."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3483.html">CVE-2011-3483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3483">SUSE bug 718032</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3594</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3594" source="CVE"/>
    <description>
    The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service (crash) via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, related to interactions with certain versions of glib2.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3594.html">CVE-2011-3594</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3594">SUSE bug 722199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3594">SUSE bug 736161</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3602</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3602" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3602" source="CVE"/>
    <description>
    Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. (dot dot) in an interface name.  NOTE: this can be leveraged with a symlink to overwrite arbitrary files.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3602.html">CVE-2011-3602</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3602">SUSE bug 721968</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140349" comment="radvd-2.11-4.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151648" comment="radvd is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3607</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3607" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3607" source="CVE"/>
    <description>
    Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3607.html">CVE-2011-3607</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 728876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 806721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3607">SUSE bug 729181</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3627</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3627" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3627" source="CVE"/>
    <description>
    The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3627.html">CVE-2011-3627</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3627">SUSE bug 724856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3627">SUSE bug 809945</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3630</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3630" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3630" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3630.html">CVE-2011-3630</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139596" comment="hardlink-1.0-9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151649" comment="hardlink is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3631</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3631" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3631" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3631.html">CVE-2011-3631</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139596" comment="hardlink-1.0-9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151649" comment="hardlink is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3632</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3632" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3632.html">CVE-2011-3632</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139596" comment="hardlink-1.0-9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151649" comment="hardlink is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3635</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3635" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3635" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3635.html">CVE-2011-3635</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3635">SUSE bug 727003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139410" comment="empathy-3.12.12-1.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151650" comment="empathy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139411" comment="empathy-lang-3.12.12-1.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151651" comment="empathy-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139412" comment="telepathy-mission-control-plugin-goa-3.12.12-1.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151652" comment="telepathy-mission-control-plugin-goa is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3640</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3640" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3640" source="CVE"/>
    <description>
    ** DISPUTED ** Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory.  NOTE: the vendor's response was "Strange behavior, but we're not treating this as a security bug."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3640.html">CVE-2011-3640</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3640">SUSE bug 726096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3640">SUSE bug 726096</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3648</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3648" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3648" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 allows remote attackers to inject arbitrary web script or HTML via crafted text with Shift JIS encoding.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3648.html">CVE-2011-3648</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3650</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3650" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3650" source="CVE"/>
    <description>
    Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3650.html">CVE-2011-3650</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3651</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3651" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3651" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3651.html">CVE-2011-3651</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3652</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3652" source="CVE"/>
    <description>
    The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3652.html">CVE-2011-3652</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3654</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3654" source="CVE"/>
    <description>
    The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SVG elements, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3654.html">CVE-2011-3654</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3655</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3655" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3655" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3655.html">CVE-2011-3655</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3658</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3658" source="CVE"/>
    <description>
    The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3658.html">CVE-2011-3658</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3658">SUSE bug 737533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3658">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3658">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3658">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3659</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3659" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3659" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access to removed nsDOMAttribute child nodes.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3659.html">CVE-2011-3659</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3659">SUSE bug 744275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3660</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3660" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3660" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function, and unknown other vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3660.html">CVE-2011-3660</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3660">SUSE bug 737533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3661</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3661" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3661" source="CVE"/>
    <description>
    YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3661.html">CVE-2011-3661</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3661">SUSE bug 737533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3663</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3663" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture keystrokes entered on a web page, even when JavaScript is disabled, by using SVG animation accessKey events within that web page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3663.html">CVE-2011-3663</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3663">SUSE bug 737533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20113922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-3922</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-3922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3922" source="CVE"/>
    <description>
    Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to glyph handling.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-3922.html">CVE-2011-3922</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3922">SUSE bug 739904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3922">SUSE bug 739904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3922">SUSE bug 739904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3922">SUSE bug 740493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3922">SUSE bug 739904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3922">SUSE bug 739904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3922">SUSE bug 739904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3922">SUSE bug 739904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-3922">SUSE bug 739904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4105</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4105" source="CVE"/>
    <description>
    LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4105.html">CVE-2011-4105</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4105">SUSE bug 730062</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139922" comment="liblightdm-gobject-1-0-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151638" comment="liblightdm-gobject-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139923" comment="lightdm-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151639" comment="lightdm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139924" comment="lightdm-lang-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151640" comment="lightdm-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4108</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4108" source="CVE"/>
    <description>
    The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4108.html">CVE-2011-4108</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4108">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4108">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4108">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4108">SUSE bug 742821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4108">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4108">SUSE bug 778825</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4128</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4128" source="CVE"/>
    <description>
    Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4128.html">CVE-2011-4128</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4128">SUSE bug 729486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4128">SUSE bug 729486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4128">SUSE bug 729486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4128">SUSE bug 729486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4128">SUSE bug 729486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4128">SUSE bug 729486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4128">SUSE bug 729486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4128">SUSE bug 729486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4128">SUSE bug 729486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4128">SUSE bug 729486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4128">SUSE bug 729486</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4153</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4153" source="CVE"/>
    <description>
    PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4153.html">CVE-2011-4153</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 742273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 742273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 742806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 743308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 744966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 746661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 749111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 738221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 742273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 742806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 743308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 744966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 746661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 749111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4153">SUSE bug 741859</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4182</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4182" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4182.html">CVE-2011-4182</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4182">SUSE bug 735394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4182">SUSE bug 735394</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140364" comment="sysconfig-0.84.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151653" comment="sysconfig is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140365" comment="sysconfig-netconfig-0.84.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151654" comment="sysconfig-netconfig is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4313</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4313" source="CVE"/>
    <description>
    query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4313.html">CVE-2011-4313</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 738156</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4313">SUSE bug 730995</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4317</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4317" source="CVE"/>
    <description>
    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4317.html">CVE-2011-4317</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4317">SUSE bug 722545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4317">SUSE bug 728876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4317">SUSE bug 729181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4317">SUSE bug 791794</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4349</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4349" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4349" source="CVE"/>
    <description>
    Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4349.html">CVE-2011-4349</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4349">SUSE bug 732996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4349">SUSE bug 698250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4349">SUSE bug 732996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4349">SUSE bug 732996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4349">SUSE bug 732996</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139316" comment="colord-1.3.3-1.12 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151655" comment="colord is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139317" comment="colord-gtk-lang-0.1.26-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151656" comment="colord-gtk-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139318" comment="colord-lang-1.3.3-1.12 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151657" comment="colord-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139319" comment="libcolord-gtk1-0.1.26-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151658" comment="libcolord-gtk1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139320" comment="libcolord2-1.3.3-1.12 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151659" comment="libcolord2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139321" comment="libcolorhug2-1.3.3-1.12 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151660" comment="libcolorhug2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4405</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4405" source="CVE"/>
    <description>
    The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4405.html">CVE-2011-4405</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4405">SUSE bug 733542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4405">SUSE bug 733542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4405">SUSE bug 733542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4405">SUSE bug 733542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4405">SUSE bug 733542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4405">SUSE bug 735322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4405">SUSE bug 733542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4405">SUSE bug 733542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4405">SUSE bug 733542</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140321" comment="python3-cupshelpers-1.5.7-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154100" comment="python3-cupshelpers is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140322" comment="system-config-printer-1.5.7-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151662" comment="system-config-printer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140323" comment="system-config-printer-applet-1.5.7-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151663" comment="system-config-printer-applet is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140324" comment="system-config-printer-common-1.5.7-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151664" comment="system-config-printer-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140325" comment="system-config-printer-common-lang-1.5.7-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151665" comment="system-config-printer-common-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140326" comment="system-config-printer-dbus-service-1.5.7-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151666" comment="system-config-printer-dbus-service is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140327" comment="udev-configure-printer-1.5.7-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151667" comment="udev-configure-printer is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4539</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4539" source="CVE"/>
    <description>
    dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4539.html">CVE-2011-4539</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4539">SUSE bug 735610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4539">SUSE bug 735610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4539">SUSE bug 735610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4539">SUSE bug 741239</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4566</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4566" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4566" source="CVE"/>
    <description>
    Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4566.html">CVE-2011-4566</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 738221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 741520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 742273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 742806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 743308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 744966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 746661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 749111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4566">SUSE bug 733590</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4576</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4576" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4576" source="CVE"/>
    <description>
    The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4576.html">CVE-2011-4576</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4576">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4576">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4576">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4576">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4576">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4576">SUSE bug 778825</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4576">SUSE bug 758060</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4577</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4577" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4577" source="CVE"/>
    <description>
    OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4577.html">CVE-2011-4577</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4577">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4577">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4577">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4577">SUSE bug 758060</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4600" source="CVE"/>
    <description>
    The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4600.html">CVE-2011-4600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4600">SUSE bug 736082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4600">SUSE bug 736082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4600">SUSE bug 736082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4600">SUSE bug 736082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4600">SUSE bug 736082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4600">SUSE bug 736082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4600">SUSE bug 736082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4600">SUSE bug 736082</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4619</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4619" source="CVE"/>
    <description>
    The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4619.html">CVE-2011-4619</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4619">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4619">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4619">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4619">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4619">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4619">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4619">SUSE bug 799454</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4718</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4718" source="CVE"/>
    <description>
    Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4718.html">CVE-2011-4718</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4718">SUSE bug 834813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4718">SUSE bug 834813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4718">SUSE bug 834813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4718">SUSE bug 834813</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4815</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4815" source="CVE"/>
    <description>
    Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4815.html">CVE-2011-4815</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4815">SUSE bug 739122</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140353" comment="ruby-2.1-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151366" comment="ruby is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140354" comment="ruby-devel-2.1-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151367" comment="ruby-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4868</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4868" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4868" source="CVE"/>
    <description>
    The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4868.html">CVE-2011-4868</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4868">SUSE bug 741239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4868">SUSE bug 741239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4868">SUSE bug 741239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4868">SUSE bug 741239</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4885</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4885" source="CVE"/>
    <description>
    PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4885.html">CVE-2011-4885</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 738221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 744966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 749111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 749111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 741520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 742273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 742806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 743308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 744966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 746661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 749111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 738221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 741520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 742273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 742806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 743308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 744966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 746661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4885">SUSE bug 749111</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20114944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2011-4944</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2011-4944" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4944" source="CVE"/>
    <description>
    Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2011-4944.html">CVE-2011-4944</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2011-4944">SUSE bug 754447</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0021</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0021" source="CVE"/>
    <description>
    The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0021.html">CVE-2012-0021</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0021">SUSE bug 743744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0021">SUSE bug 743744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0021">SUSE bug 743744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0021">SUSE bug 743744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0021">SUSE bug 743744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0021">SUSE bug 743744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0021">SUSE bug 743744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0021">SUSE bug 743744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0021">SUSE bug 743744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0021">SUSE bug 743744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0021">SUSE bug 1078450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120027" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0027</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0027" source="CVE"/>
    <description>
    The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0027.html">CVE-2012-0027</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0027">SUSE bug 739719</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0029</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0029" source="CVE"/>
    <description>
    Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0029.html">CVE-2012-0029</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0029">SUSE bug 740165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0029">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0029">SUSE bug 740165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0029">SUSE bug 747331</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0031</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0031" source="CVE"/>
    <description>
    scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0031.html">CVE-2012-0031</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 806721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0031">SUSE bug 741243</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0035</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0035" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0035" source="CVE"/>
    <description>
    Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0035.html">CVE-2012-0035</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0035">SUSE bug 740447</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139405" comment="emacs-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139406" comment="emacs-info-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139407" comment="emacs-nox-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139408" comment="emacs-x11-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151671" comment="emacs-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139409" comment="etags-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0037</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0037" source="CVE"/>
    <description>
    Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0037.html">CVE-2012-0037</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0037">SUSE bug 740453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0037">SUSE bug 745298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0037">SUSE bug 734781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0037">SUSE bug 740453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0037">SUSE bug 37195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0037">SUSE bug 734781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0037">SUSE bug 740453</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140031" comment="libraptor2-0-2.0.15-3.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151673" comment="libraptor2-0 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0050</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0050" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0050" source="CVE"/>
    <description>
    OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0050.html">CVE-2012-0050</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0050">SUSE bug 742821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0050">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0050">SUSE bug 739719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0050">SUSE bug 758060</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0053</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0053" source="CVE"/>
    <description>
    protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0053.html">CVE-2012-0053</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0053">SUSE bug 743743</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0056</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0056" source="CVE"/>
    <description>
    The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/&lt;pid&gt;/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0056.html">CVE-2012-0056</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0056">SUSE bug 742028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0056">SUSE bug 742279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0056">SUSE bug 742279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0056">SUSE bug 742279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0056">SUSE bug 653148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0056">SUSE bug 742279</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0217</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0217" source="CVE"/>
    <description>
    The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1; and possibly other operating systems, when running on an Intel processor, incorrectly uses the sysret path in cases where a certain address is not a canonical address, which allows local users to gain privileges via a crafted application.  NOTE: because this issue is due to incorrect use of the Intel specification, it should have been split into separate identifiers; however, there was some value in preserving the original mapping of the multi-codebase coordinated-disclosure effort to a single identifier.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0217.html">CVE-2012-0217</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 764077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 785429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 785434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 785434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0217">SUSE bug 757537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0247</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0247" source="CVE"/>
    <description>
    ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0247.html">CVE-2012-0247</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 752879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0247">SUSE bug 746880</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0248</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0248" source="CVE"/>
    <description>
    ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0248.html">CVE-2012-0248</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 752879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0248">SUSE bug 746880</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0390</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0390" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0390" source="CVE"/>
    <description>
    The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related issue to CVE-2011-4108.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0390.html">CVE-2012-0390</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0390">SUSE bug 739898</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0441</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0441" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0441" source="CVE"/>
    <description>
    The ASN.1 decoder in the QuickDER decoder in Mozilla Network Security Services (NSS) before 3.13.4, as used in Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10, allows remote attackers to cause a denial of service (application crash) via a zero-length item, as demonstrated by (1) a zero-length basic constraint or (2) a zero-length field in an OCSP response.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0441.html">CVE-2012-0441</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0441">SUSE bug 765204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0442</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0442" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0442" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0442.html">CVE-2012-0442</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0442">SUSE bug 744275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0443</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0443" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0443" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0443.html">CVE-2012-0443</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0443">SUSE bug 744275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0444</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0444" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0444" source="CVE"/>
    <description>
    Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0444.html">CVE-2012-0444</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0444">SUSE bug 744275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0444">SUSE bug 747912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0444">SUSE bug 747912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0444">SUSE bug 747912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0444">SUSE bug 747912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0444">SUSE bug 747912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0444">SUSE bug 747912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0444">SUSE bug 747912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0444">SUSE bug 747912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140183" comment="libvorbis-devel-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151121" comment="libvorbis-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140184" comment="libvorbis0-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140185" comment="libvorbis0-32bit-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140186" comment="libvorbisenc2-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140187" comment="libvorbisenc2-32bit-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140188" comment="libvorbisfile3-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140189" comment="libvorbisfile3-32bit-1.3.3-4.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151127" comment="libvorbisfile3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0445</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0445" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0445" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating a form submission target with a sub-frame's name attribute.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0445.html">CVE-2012-0445</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0445">SUSE bug 744275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0446</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0446" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0446" source="CVE"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or HTML via a (1) web page or (2) Firefox extension, related to improper enforcement of XPConnect security restrictions for frame scripts that call untrusted objects.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0446.html">CVE-2012-0446</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0446">SUSE bug 744275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0447</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0447" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an ICO image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0447.html">CVE-2012-0447</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0447">SUSE bug 744275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0449</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0449" source="CVE"/>
    <description>
    Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0449.html">CVE-2012-0449</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0449">SUSE bug 744275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0451</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0451" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0451" source="CVE"/>
    <description>
    CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site scripting (XSS) attacks via crafted HTTP headers.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0451.html">CVE-2012-0451</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0451">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0451">SUSE bug 752168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0451">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0451">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0451">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0451">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0452</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0452" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0452" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger failure of an nsXBLDocumentInfo::ReadPrototypeBindings function call, related to the cycle collector's access to a hash table containing a stale XBL binding.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0452.html">CVE-2012-0452</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0452">SUSE bug 746616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0452">SUSE bug 746616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0452">SUSE bug 746663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0452">SUSE bug 746616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0452">SUSE bug 746616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0452">SUSE bug 746616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0452">SUSE bug 746616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0452">SUSE bug 746616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0452">SUSE bug 746616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0452">SUSE bug 746616</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120455" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0455</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0455" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0455" source="CVE"/>
    <description>
    Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web page, related to a "DragAndDropJacking" issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0455.html">CVE-2012-0455</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0455">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0455">SUSE bug 752168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0455">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0455">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0455">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0455">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0456</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0456" source="CVE"/>
    <description>
    The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via vectors that trigger an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0456.html">CVE-2012-0456</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0456">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0456">SUSE bug 752168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0456">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0456">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0456">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0456">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0457</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0457" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0457" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote attackers to execute arbitrary code via an SVG animation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0457.html">CVE-2012-0457</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0457">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0457">SUSE bug 752168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0457">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0457">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0457">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0457">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0458</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0458" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0458" source="CVE"/>
    <description>
    Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict setting the home page through the dragging of a URL to the home button, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript: URL that is later interpreted in the about:sessionrestore context.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0458.html">CVE-2012-0458</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0458">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0458">SUSE bug 752168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0458">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0458">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0458">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0458">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0459</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0459" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0459" source="CVE"/>
    <description>
    The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via dynamic modification of a keyframe followed by access to the cssText of the keyframe.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0459.html">CVE-2012-0459</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0459">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0459">SUSE bug 752168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0459">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0459">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0459">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0459">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0460</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0460" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0460" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0460.html">CVE-2012-0460</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0460">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0460">SUSE bug 752168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0460">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0460">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0460">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0460">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0461</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0461" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0461.html">CVE-2012-0461</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0461">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0461">SUSE bug 752168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0461">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0461">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0461">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0461">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0462</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0462" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0462.html">CVE-2012-0462</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0462">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0462">SUSE bug 752168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0462">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0462">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0462">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0462">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0463</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0463" source="CVE"/>
    <description>
    The nsWindow implementation in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 does not check the validity of an instance after event dispatching, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, as demonstrated by Mobile Firefox on Android.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0463.html">CVE-2012-0463</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0463">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0463">SUSE bug 752168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0463">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0463">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0463">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0463">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0464</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0464" source="CVE"/>
    <description>
    Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors involving an empty argument to the array.join function in conjunction with the triggering of garbage collection.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0464.html">CVE-2012-0464</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0464">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0464">SUSE bug 752168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0464">SUSE bug 746591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0464">SUSE bug 747320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0464">SUSE bug 750044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0464">SUSE bug 750044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0467</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0467" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0467.html">CVE-2012-0467</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0467">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0468</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0468" source="CVE"/>
    <description>
    The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion failure and memory corruption) or possibly execute arbitrary code via vectors related to jsval.h and the js::array_shift function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0468.html">CVE-2012-0468</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0468">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0469</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0469" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0469.html">CVE-2012-0469</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0469">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0470</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0470" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0470" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (invalid gfxImageSurface free operation) or possibly execute arbitrary code by leveraging the use of "different number systems."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0470.html">CVE-2012-0470</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0470">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0471</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0471" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0471" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via a multibyte character set.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0471.html">CVE-2012-0471</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0471">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0472</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0472" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0472" source="CVE"/>
    <description>
    The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9, when certain Windows Vista and Windows 7 configurations are used, does not properly restrict font-rendering attempts, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0472.html">CVE-2012-0472</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0472">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0473</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0473" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0473" source="CVE"/>
    <description>
    The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 calls the FindMaxElementInSubArray function with incorrect template arguments, which allows remote attackers to obtain sensitive information from video memory via a crafted WebGL.drawElements call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0473.html">CVE-2012-0473</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0473">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0474</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0474" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0474" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via vectors related to short-circuited page loads, aka "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0474.html">CVE-2012-0474</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0474">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0475</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0475" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and Sec-WebSocket-Origin HTTP headers, which might allow remote attackers to bypass an IPv6 literal ACL via a cross-site (1) XMLHttpRequest or (2) WebSocket operation involving a nonstandard port number and an IPv6 address that contains certain zero fields.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0475.html">CVE-2012-0475</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0475">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0477</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0477" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0477" source="CVE"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) ISO-2022-KR or (2) ISO-2022-CN character set.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0477.html">CVE-2012-0477</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0477">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0478</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0478" source="CVE"/>
    <description>
    The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 does not properly restrict JSVAL_TO_OBJECT casts, which might allow remote attackers to execute arbitrary code via a crafted web page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0478.html">CVE-2012-0478</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0478">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0479</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0479" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom XML content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0479.html">CVE-2012-0479</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0479">SUSE bug 758408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0759</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0759" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0759" source="CVE"/>
    <description>
    Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0771.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0759.html">CVE-2012-0759</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0759">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0786</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0786" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0786" source="CVE"/>
    <description>
    The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0786.html">CVE-2012-0786</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0786">SUSE bug 853044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0786">SUSE bug 885003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0786">SUSE bug 885003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0786">SUSE bug 885003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0786">SUSE bug 885003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0786">SUSE bug 885003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0786">SUSE bug 885003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0786">SUSE bug 885003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0786">SUSE bug 885003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0786">SUSE bug 885003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139272" comment="augeas-1.2.0-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154101" comment="augeas is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139273" comment="augeas-lenses-1.2.0-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151682" comment="augeas-lenses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139274" comment="libaugeas0-1.2.0-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151683" comment="libaugeas0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0804</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0804" source="CVE"/>
    <description>
    Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0804.html">CVE-2012-0804</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0804">SUSE bug 744059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0804">SUSE bug 744059</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139362" comment="cvs-1.12.12-184.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151684" comment="cvs is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0817</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0817" source="CVE"/>
    <description>
    Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service (memory and CPU consumption) by making many connection requests.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0817.html">CVE-2012-0817</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0817">SUSE bug 743986</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0830" source="CVE"/>
    <description>
    The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0830.html">CVE-2012-0830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 744966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 749111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 749111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 741520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 742273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 742806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 743308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 744966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 746661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 749111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 733590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 736169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 738221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 741520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 741859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 742273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 742806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 743308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 744966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 746661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0830">SUSE bug 749111</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0845</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0845" source="CVE"/>
    <description>
    SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0845.html">CVE-2012-0845</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0845">SUSE bug 747125</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0862</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0862" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0862" source="CVE"/>
    <description>
    builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0862.html">CVE-2012-0862</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 855685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0862">SUSE bug 762294</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140412" comment="xinetd-2.3.15-9.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151685" comment="xinetd is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0866</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0866" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0866" source="CVE"/>
    <description>
    CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0866.html">CVE-2012-0866</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 701489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0866">SUSE bug 749299</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0867</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0867" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0867" source="CVE"/>
    <description>
    PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0867.html">CVE-2012-0867</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 701489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0867">SUSE bug 749301</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0868</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0868" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0868" source="CVE"/>
    <description>
    CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted remote attackers to execute arbitrary SQL commands via a crafted file containing object names with newlines, which are inserted into an SQL script that is used when the database is restored.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0868.html">CVE-2012-0868</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 701489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0868">SUSE bug 749303</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0870</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0870" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0870" source="CVE"/>
    <description>
    Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0870.html">CVE-2012-0870</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 747934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 747934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 747934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 747934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 747934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 747934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 747934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 747934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 747934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 752797</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 747934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0870">SUSE bug 747934</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120876" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0876</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0876" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0876" source="CVE"/>
    <description>
    The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0876.html">CVE-2012-0876</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 751464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 751465</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0876">SUSE bug 983216</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139435" comment="expat-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139436" comment="libexpat-devel-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139437" comment="libexpat1-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139438" comment="libexpat1-32bit-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20120884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-0884</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-0884" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0884" source="CVE"/>
    <description>
    The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-0884.html">CVE-2012-0884</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0884">SUSE bug 751977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0884">SUSE bug 749210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0884">SUSE bug 754640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0884">SUSE bug 754640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0884">SUSE bug 754640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0884">SUSE bug 749735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0884">SUSE bug 751977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0884">SUSE bug 761819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-0884">SUSE bug 761819</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1012</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1012" source="CVE"/>
    <description>
    server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1012.html">CVE-2012-1012</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1012">SUSE bug 766109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1013</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1013" source="CVE"/>
    <description>
    The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service (NULL pointer dereference and daemon crash) via a KRB5_KDB_DISALLOW_ALL_TIX create request that lacks a password.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1013.html">CVE-2012-1013</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1013">SUSE bug 765485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1013">SUSE bug 765485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1013">SUSE bug 765485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1013">SUSE bug 765485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1013">SUSE bug 765485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1013">SUSE bug 765485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1013">SUSE bug 765485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1016</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1016" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1016" source="CVE"/>
    <description>
    The pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 attempts to find an agility KDF identifier in inappropriate circumstances, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted Draft 9 request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1016.html">CVE-2012-1016</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1016">SUSE bug 807556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1016">SUSE bug 807556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1016">SUSE bug 807556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1016">SUSE bug 807556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1016">SUSE bug 807556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1016">SUSE bug 807556</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1095</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1095" source="CVE"/>
    <description>
    osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1095.html">CVE-2012-1095</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1095">SUSE bug 749335</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140274" comment="osc-0.155.0-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151686" comment="osc is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1111</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1111" source="CVE"/>
    <description>
    lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1111.html">CVE-2012-1111</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1111">SUSE bug 745339</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139922" comment="liblightdm-gobject-1-0-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151638" comment="liblightdm-gobject-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139923" comment="lightdm-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151639" comment="lightdm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139924" comment="lightdm-lang-1.19.5-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151640" comment="lightdm-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1126</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1126" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1126.html">CVE-2012-1126</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1126">SUSE bug 750937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1126">SUSE bug 750937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1126">SUSE bug 750937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1126">SUSE bug 750937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1126">SUSE bug 750937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1126">SUSE bug 750937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1126">SUSE bug 750937</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1127</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1127" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1127" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1127.html">CVE-2012-1127</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1127">SUSE bug 750947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1127">SUSE bug 750947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1127">SUSE bug 750947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1127">SUSE bug 750947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1127">SUSE bug 750947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1127">SUSE bug 750947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1127">SUSE bug 750947</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1128</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1128" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1128.html">CVE-2012-1128</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1128">SUSE bug 750942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1128">SUSE bug 750942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1128">SUSE bug 750942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1128">SUSE bug 750942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1128">SUSE bug 750942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1128">SUSE bug 750942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1129</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1129" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1129" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1129.html">CVE-2012-1129</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1129">SUSE bug 750952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1129">SUSE bug 750952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1129">SUSE bug 750952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1129">SUSE bug 750952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1129">SUSE bug 750952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1129">SUSE bug 750952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1129">SUSE bug 750952</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1130</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1130" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1130" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1130.html">CVE-2012-1130</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1130">SUSE bug 750951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1130">SUSE bug 750951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1130">SUSE bug 750951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1130">SUSE bug 750951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1130">SUSE bug 750951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1130">SUSE bug 750951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1130">SUSE bug 750951</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1131</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1131" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1131" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors related to the cell table of a font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1131.html">CVE-2012-1131</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1131">SUSE bug 750953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1131">SUSE bug 750953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1131">SUSE bug 750953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1131">SUSE bug 750953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1131">SUSE bug 750953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1131">SUSE bug 750953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1131">SUSE bug 750953</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1132</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1132" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1132.html">CVE-2012-1132</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1132">SUSE bug 750950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1132">SUSE bug 750950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1132">SUSE bug 750950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1132">SUSE bug 750950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1132">SUSE bug 750950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1132">SUSE bug 750950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1132">SUSE bug 750950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1133</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1133" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1133.html">CVE-2012-1133</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1133">SUSE bug 750940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1133">SUSE bug 750940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1133">SUSE bug 750940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1133">SUSE bug 750940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1133">SUSE bug 750940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1133">SUSE bug 750940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1133">SUSE bug 750940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1134</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1134" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1134.html">CVE-2012-1134</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1134">SUSE bug 750945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1134">SUSE bug 750945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1134">SUSE bug 750945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1134">SUSE bug 750945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1134">SUSE bug 750945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1134">SUSE bug 750945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1134">SUSE bug 750945</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1135</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1135" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1135" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueType font.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1135.html">CVE-2012-1135</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1135">SUSE bug 750946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1135">SUSE bug 750946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1135">SUSE bug 750946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1135">SUSE bug 750946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1135">SUSE bug 750946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1135">SUSE bug 750946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1135">SUSE bug 750946</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1136</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1136" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1136" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODING field.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1136.html">CVE-2012-1136</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1136">SUSE bug 750939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1136">SUSE bug 750939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1136">SUSE bug 750939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1136">SUSE bug 750939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1136">SUSE bug 750939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1136">SUSE bug 750939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1136">SUSE bug 750939</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1137</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1137" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1137" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1137.html">CVE-2012-1137</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1137">SUSE bug 750943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1137">SUSE bug 750943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1137">SUSE bug 750943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1137">SUSE bug 750943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1137">SUSE bug 750943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1137">SUSE bug 750943</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1138</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1138" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1138.html">CVE-2012-1138</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1138">SUSE bug 750941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1138">SUSE bug 750941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1138">SUSE bug 750941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1138">SUSE bug 750941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1138">SUSE bug 750941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1138">SUSE bug 750941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1138">SUSE bug 750941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1139</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1139" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1139" source="CVE"/>
    <description>
    Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1139.html">CVE-2012-1139</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1139">SUSE bug 750938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1139">SUSE bug 750938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1139">SUSE bug 750938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1139">SUSE bug 750938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1139">SUSE bug 750938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1139">SUSE bug 750938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1139">SUSE bug 750938</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1140</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1140" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1140" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1140.html">CVE-2012-1140</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1140">SUSE bug 750954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1140">SUSE bug 750954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1140">SUSE bug 750954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1140">SUSE bug 750954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1140">SUSE bug 750954</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1141</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1141" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1141.html">CVE-2012-1141</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1141">SUSE bug 750955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1141">SUSE bug 750955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1141">SUSE bug 750955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1141">SUSE bug 750955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1141">SUSE bug 750955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1141">SUSE bug 750955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1141">SUSE bug 750955</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1142" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1142.html">CVE-2012-1142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1142">SUSE bug 750948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1142">SUSE bug 750948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1142">SUSE bug 750948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1142">SUSE bug 750948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1142">SUSE bug 750948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1142">SUSE bug 750948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1142">SUSE bug 750948</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1143" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1143.html">CVE-2012-1143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1143">SUSE bug 750949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1143">SUSE bug 750949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1143">SUSE bug 750949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1143">SUSE bug 750949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1143">SUSE bug 750949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1143">SUSE bug 750949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1143">SUSE bug 750949</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1144</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1144" source="CVE"/>
    <description>
    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1144.html">CVE-2012-1144</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1144">SUSE bug 750944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1144">SUSE bug 750944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1144">SUSE bug 750944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1144">SUSE bug 750944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1144">SUSE bug 750944</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1147</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1147" source="CVE"/>
    <description>
    readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1147.html">CVE-2012-1147</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1147">SUSE bug 751464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1147">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1147">SUSE bug 751464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1147">SUSE bug 751465</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139435" comment="expat-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139436" comment="libexpat-devel-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139437" comment="libexpat1-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139438" comment="libexpat1-32bit-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1148</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1148" source="CVE"/>
    <description>
    Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1148.html">CVE-2012-1148</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1148">SUSE bug 751465</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1148">SUSE bug 750914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1148">SUSE bug 751464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1148">SUSE bug 751465</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139435" comment="expat-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139436" comment="libexpat-devel-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139437" comment="libexpat1-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139438" comment="libexpat1-32bit-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1150</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1150" source="CVE"/>
    <description>
    Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1150.html">CVE-2012-1150</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1150">SUSE bug 751718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1150">SUSE bug 755383</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1150">SUSE bug 826682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1150">SUSE bug 826682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1150">SUSE bug 826682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1150">SUSE bug 826682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1150">SUSE bug 826682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1150">SUSE bug 826682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1150">SUSE bug 826682</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1152</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1152" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1152" source="CVE"/>
    <description>
    Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) module 0.38 for Perl allow remote attackers to cause a denial of service (process crash) via format string specifiers in a (1) YAML stream to the Load function, (2) YAML node to the load_node function, (3) YAML mapping to the load_mapping function, or (4) YAML sequence to the load_sequence function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1152.html">CVE-2012-1152</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1152">SUSE bug 751503</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140295" comment="perl-YAML-LibYAML-0.38-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151687" comment="perl-YAML-LibYAML is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1162</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1162" source="CVE"/>
    <description>
    Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1162.html">CVE-2012-1162</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1162">SUSE bug 751829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1162">SUSE bug 751829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1162">SUSE bug 751830</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140235" comment="libzip-devel-0.11.1-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151554" comment="libzip-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140236" comment="libzip2-0.11.1-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151555" comment="libzip2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1163</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1163" source="CVE"/>
    <description>
    Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an information leak.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1163.html">CVE-2012-1163</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1163">SUSE bug 751830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1163">SUSE bug 751829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1163">SUSE bug 751830</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140235" comment="libzip-devel-0.11.1-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151554" comment="libzip-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140236" comment="libzip2-0.11.1-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151555" comment="libzip2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1165</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1165" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1165" source="CVE"/>
    <description>
    The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1165.html">CVE-2012-1165</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1165">SUSE bug 751946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1165">SUSE bug 754640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1165">SUSE bug 754640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1165">SUSE bug 749210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1165">SUSE bug 749213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1165">SUSE bug 751946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1165">SUSE bug 754640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1165">SUSE bug 751946</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1173</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1173" source="CVE"/>
    <description>
    Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1173.html">CVE-2012-1173</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1173">SUSE bug 753362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1173">SUSE bug 753362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1173">SUSE bug 753362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1173">SUSE bug 753362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1173">SUSE bug 854393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1173">SUSE bug 753362</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1174</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1174" source="CVE"/>
    <description>
    The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1174.html">CVE-2012-1174</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1174">SUSE bug 752281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140121" comment="libsystemd0-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140122" comment="libsystemd0-32bit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140123" comment="libudev-devel-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151690" comment="libudev-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140124" comment="libudev1-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140125" comment="libudev1-32bit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140126" comment="systemd-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140127" comment="systemd-32bit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140128" comment="systemd-bash-completion-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151695" comment="systemd-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140129" comment="systemd-logger-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151696" comment="systemd-logger is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140130" comment="systemd-sysvinit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140131" comment="udev-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1182</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1182" source="CVE"/>
    <description>
    The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1182.html">CVE-2012-1182</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1182">SUSE bug 752797</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1182">SUSE bug 747934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1182">SUSE bug 752797</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1182">SUSE bug 754443</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1185</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1185" source="CVE"/>
    <description>
    Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0247.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1185.html">CVE-2012-1185</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1185">SUSE bug 752879</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1186</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1186" source="CVE"/>
    <description>
    Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1186.html">CVE-2012-1186</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1186">SUSE bug 752879</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1457</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1457" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1457" source="CVE"/>
    <description>
    The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1457.html">CVE-2012-1457</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1457">SUSE bug 753611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1457">SUSE bug 767574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1457">SUSE bug 753611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1457">SUSE bug 753611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1457">SUSE bug 753611</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1458</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1458" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1458" source="CVE"/>
    <description>
    The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CHM parser implementations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1458.html">CVE-2012-1458</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1458">SUSE bug 753613</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1458">SUSE bug 767574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1458">SUSE bug 753613</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1458">SUSE bug 753613</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1458">SUSE bug 753613</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1459</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1459" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1459" source="CVE"/>
    <description>
    The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1459.html">CVE-2012-1459</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1459">SUSE bug 753610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1459">SUSE bug 753610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1459">SUSE bug 767574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1459">SUSE bug 753610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1459">SUSE bug 753610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1459">SUSE bug 753610</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1569</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1569" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1569" source="CVE"/>
    <description>
    The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1569.html">CVE-2012-1569</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1569">SUSE bug 753301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1569">SUSE bug 752193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1569">SUSE bug 752193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1569">SUSE bug 924966</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1571</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1571" source="CVE"/>
    <description>
    file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1571.html">CVE-2012-1571</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1571">SUSE bug 753303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1571">SUSE bug 753303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1571">SUSE bug 883306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1571">SUSE bug 883306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1571">SUSE bug 884986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1571">SUSE bug 884986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1571">SUSE bug 987530</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139440" comment="file-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139441" comment="file-devel-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151701" comment="file-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139442" comment="file-magic-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139443" comment="libmagic1-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139444" comment="libmagic1-32bit-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1573</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1573" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1573" source="CVE"/>
    <description>
    gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1573.html">CVE-2012-1573</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1573">SUSE bug 754223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1573">SUSE bug 752193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1573">SUSE bug 752193</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1586</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1586" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1586" source="CVE"/>
    <description>
    mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1586.html">CVE-2012-1586</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1586">SUSE bug 754443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1586">SUSE bug 754443</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139312" comment="cifs-utils-6.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151261" comment="cifs-utils is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1616</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1616" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1616" source="CVE"/>
    <description>
    Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1616.html">CVE-2012-1616</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1616">SUSE bug 768322</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139258" comment="argyllcms-1.6.3-5.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151705" comment="argyllcms is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1667</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1667" source="CVE"/>
    <description>
    ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1667.html">CVE-2012-1667</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1667">SUSE bug 765315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1667">SUSE bug 792926</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1823</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1823" source="CVE"/>
    <description>
    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1823.html">CVE-2012-1823</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1823">SUSE bug 760536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1823">SUSE bug 761631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1823">SUSE bug 761631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1823">SUSE bug 761631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1823">SUSE bug 760536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1823">SUSE bug 850694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1823">SUSE bug 850694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1823">SUSE bug 850694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1823">SUSE bug 850694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1823">SUSE bug 850694</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1937</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1937" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1937.html">CVE-2012-1937</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1937">SUSE bug 765204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1938</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1938" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) methodjit/ImmutableSync.cpp, (2) the JSObject::makeDenseArraySlow function in js/src/jsarray.cpp, and unknown other components.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1938.html">CVE-2012-1938</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1938">SUSE bug 765204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121940" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1940</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1940" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1940" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by changing the size of a container of absolutely positioned elements in a column.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1940.html">CVE-2012-1940</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1940">SUSE bug 765204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1941</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1941" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1941" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsHTMLReflowState::CalculateHypotheticalBox function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code by resizing a window displaying absolutely positioned and relatively positioned elements in nested columns.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1941.html">CVE-2012-1941</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1941">SUSE bug 765204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1944</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1944" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1944" source="CVE"/>
    <description>
    The Content Security Policy (CSP) implementation in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 does not block inline event handlers, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1944.html">CVE-2012-1944</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1944">SUSE bug 765204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1945</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1945" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1945" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allow local users to obtain sensitive information via an HTML document that loads a shortcut (aka .lnk) file for display within an IFRAME element, as demonstrated by a network share implemented by (1) Microsoft Windows or (2) Samba.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1945.html">CVE-2012-1945</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1945">SUSE bug 765204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1946</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1946" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1946" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsINode::ReplaceOrInsertBefore function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 might allow remote attackers to execute arbitrary code via document changes involving replacement or insertion of a node.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1946.html">CVE-2012-1946</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1946">SUSE bug 765204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1947</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1947" source="CVE"/>
    <description>
    Heap-based buffer overflow in the utf16_to_isolatin1 function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code via vectors that trigger a character-set conversion failure.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1947.html">CVE-2012-1947</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1947">SUSE bug 765204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1948</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1948" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1948" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1948.html">CVE-2012-1948</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1948">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121949" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1949</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1949" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1949" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1949.html">CVE-2012-1949</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1949">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1950</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1950" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1950" source="CVE"/>
    <description>
    The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the address bar by canceling a page load.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1950.html">CVE-2012-1950</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1950">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1951</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1951" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1951" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code by interacting with objects used for SMIL Timing.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1951.html">CVE-2012-1951</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1951">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1952</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1952" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1952" source="CVE"/>
    <description>
    The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly perform a cast of a frame variable during processing of mixed row-group and column-group frames, which might allow remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1952.html">CVE-2012-1952</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1952">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1953</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1953" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1953" source="CVE"/>
    <description>
    The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (buffer over-read, incorrect pointer dereference, and heap-based buffer overflow) or possibly execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1953.html">CVE-2012-1953</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1953">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1954</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1954" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1954" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors involving multiple adoptions and empty documents.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1954.html">CVE-2012-1954</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1954">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1955</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1955" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1955" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to spoof the address bar via vectors involving history.forward and history.back calls.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1955.html">CVE-2012-1955</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1955">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1956</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1956" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1956" source="CVE"/>
    <description>
    Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1956.html">CVE-2012-1956</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1956">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1957</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1957" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1957" source="CVE"/>
    <description>
    An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly handle EMBED elements within description elements in RSS feeds, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a feed.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1957.html">CVE-2012-1957</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1957">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1958</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1958" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 might allow remote attackers to execute arbitrary code via vectors related to focused content.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1958.html">CVE-2012-1958</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1958">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1959</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1959" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-compartment security wrappers (SCSW) during the cross-compartment wrapping of objects, which allows remote attackers to bypass intended XBL access restrictions via crafted content.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1959.html">CVE-2012-1959</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1959">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1960</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1960" source="CVE"/>
    <description>
    The qcms_transform_data_rgb_out_lut_sse2 function in the QCMS implementation in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 might allow remote attackers to obtain sensitive information from process memory via a crafted color profile that triggers an out-of-bounds read operation.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1960.html">CVE-2012-1960</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1960">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1961</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1961" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1961" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values in X-Frame-Options headers, which makes it easier for remote attackers to conduct clickjacking attacks via a FRAME element referencing a web site that produces these duplicate values.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1961.html">CVE-2012-1961</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1961">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1962</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1962" source="CVE"/>
    <description>
    Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving strings with multiple dependencies.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1962.html">CVE-2012-1962</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1962">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1963</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1963" source="CVE"/>
    <description>
    The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violation report, which allows remote web servers to capture OpenID credentials and OAuth 2.0 access tokens by triggering a violation.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1963.html">CVE-2012-1963</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1963">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1965</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1965" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting (XSS) protection mechanisms via a feed:javascript: URL.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1965.html">CVE-2012-1965</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1965">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1966</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1966" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1966" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1966.html">CVE-2012-1966</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1966">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1967</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1967" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1967" source="CVE"/>
    <description>
    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript sandbox utility, which allows remote attackers to execute arbitrary JavaScript code with improper privileges via a javascript: URL.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1967.html">CVE-2012-1967</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1967">SUSE bug 771583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1970</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1970" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1970" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1970.html">CVE-2012-1970</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1970">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1972</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1972" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1972" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1972.html">CVE-2012-1972</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1972">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1973</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1973" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1973.html">CVE-2012-1973</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1973">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1974</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1974" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1974" source="CVE"/>
    <description>
    Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1974.html">CVE-2012-1974</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1974">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1975</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1975" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1975" source="CVE"/>
    <description>
    Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1975.html">CVE-2012-1975</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1975">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20121976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-1976</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-1976" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1976" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-1976.html">CVE-2012-1976</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-1976">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2110</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110" source="CVE"/>
    <description>
    The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2110.html">CVE-2012-2110</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 778825</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2110">SUSE bug 758060</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2111</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2111" source="CVE"/>
    <description>
    The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2111.html">CVE-2012-2111</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 757576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 757576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 757576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 757576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 757576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 757576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 757576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 754443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 757576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 757576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 757576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2111">SUSE bug 757576</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2113</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2113" source="CVE"/>
    <description>
    Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2113.html">CVE-2012-2113</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2113">SUSE bug 767852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2113">SUSE bug 767852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2113">SUSE bug 767852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2113">SUSE bug 767852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2113">SUSE bug 767852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2113">SUSE bug 767852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2113">SUSE bug 767852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2113">SUSE bug 854393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2113">SUSE bug 767852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2113">SUSE bug 767852</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2141</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2141" source="CVE"/>
    <description>
    Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and snmpd crash) via an SNMP GET request for an entry not in the extension table.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2141.html">CVE-2012-2141</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2141">SUSE bug 759352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2141">SUSE bug 826684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2141">SUSE bug 826684</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140079" comment="libsnmp30-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151706" comment="libsnmp30 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140080" comment="libsnmp30-32bit-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151707" comment="libsnmp30-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140081" comment="net-snmp-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151708" comment="net-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140082" comment="net-snmp-devel-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151709" comment="net-snmp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140083" comment="perl-SNMP-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151710" comment="perl-SNMP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140084" comment="snmp-mibs-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151711" comment="snmp-mibs is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2143" source="CVE"/>
    <description>
    The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2143.html">CVE-2012-2143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766797</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766797</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766797</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766797</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766797</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766797</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2143">SUSE bug 766797</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2150</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2150" source="CVE"/>
    <description>
    xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2150.html">CVE-2012-2150</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2150">SUSE bug 939367</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140411" comment="xfsprogs-4.3.0-2.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151712" comment="xfsprogs is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2214</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2214" source="CVE"/>
    <description>
    proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service (application crash) via a sequence of XMPP file-transfer requests.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2214.html">CVE-2012-2214</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2214">SUSE bug 760890</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2311</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2311" source="CVE"/>
    <description>
    sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2311.html">CVE-2012-2311</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2311">SUSE bug 760536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2311">SUSE bug 761631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2311">SUSE bug 761631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122335" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2335</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2335" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2335" source="CVE"/>
    <description>
    php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and execute arbitrary code by leveraging improper interaction between the PHP sapi/cgi/cgi_main.c component and a query string beginning with a +- sequence.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2335.html">CVE-2012-2335</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2335">SUSE bug 761631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2335">SUSE bug 761631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2336</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2336" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2336" source="CVE"/>
    <description>
    sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2336.html">CVE-2012-2336</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2336">SUSE bug 761631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2336">SUSE bug 761631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2337</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2337" source="CVE"/>
    <description>
    sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2337.html">CVE-2012-2337</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2337">SUSE bug 762327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2337">SUSE bug 762327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2337">SUSE bug 762327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2337">SUSE bug 762327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2337">SUSE bug 762327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2337">SUSE bug 762327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2337">SUSE bug 762327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2337">SUSE bug 762327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2337">SUSE bug 826687</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140363" comment="sudo-1.8.10p3-5.22 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2385</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2385" source="CVE"/>
    <description>
    The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2385.html">CVE-2012-2385</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140245" comment="mosh-1.2.5-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151714" comment="mosh is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2392</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2392" source="CVE"/>
    <description>
    Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop) via vectors related to the (1) ANSI MAP, (2) ASF, (3) IEEE 802.11, (4) IEEE 802.3, and (5) LTP dissectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2392.html">CVE-2012-2392</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2392">SUSE bug 763634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2392">SUSE bug 763855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2392">SUSE bug 763855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2392">SUSE bug 763855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2392">SUSE bug 763855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2392">SUSE bug 763855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2392">SUSE bug 763855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2392">SUSE bug 769578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2392">SUSE bug 763855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2392">SUSE bug 769578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2392">SUSE bug 763855</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2393</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2393" source="CVE"/>
    <description>
    epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers incorrect memory allocation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2393.html">CVE-2012-2393</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2393">SUSE bug 763634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2393">SUSE bug 763857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2393">SUSE bug 763857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2393">SUSE bug 763857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2393">SUSE bug 763857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2393">SUSE bug 763855</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2394</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2394" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2394" source="CVE"/>
    <description>
    Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2394.html">CVE-2012-2394</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2394">SUSE bug 763634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2394">SUSE bug 763859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2394">SUSE bug 763859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2394">SUSE bug 763859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2394">SUSE bug 763859</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2396</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2396" source="CVE"/>
    <description>
    VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2396.html">CVE-2012-2396</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2396">SUSE bug 760496</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140132" comment="libtag-devel-1.11-1.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151715" comment="libtag-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140133" comment="libtag1-1.11-1.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151716" comment="libtag1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140134" comment="libtag_c0-1.11-1.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151717" comment="libtag_c0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140135" comment="taglib-1.11-1.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151718" comment="taglib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2417</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2417" source="CVE"/>
    <description>
    PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2417.html">CVE-2012-2417</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2417">SUSE bug 764127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2417">SUSE bug 764127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2417">SUSE bug 764127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2417">SUSE bug 764127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2417">SUSE bug 764127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2417">SUSE bug 764127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2417">SUSE bug 764127</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140314" comment="python-pycrypto-2.6.1-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151719" comment="python-pycrypto is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140315" comment="python3-pycrypto-2.6.1-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154104" comment="python3-pycrypto is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2451</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2451" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2451" source="CVE"/>
    <description>
    The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.  NOTE: some of these details are obtained from third party information.  NOTE: it has been reported that this might only be exploitable by writing in the same directory as the .ini file. If this is the case, then this issue might not cross privilege boundaries.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2451.html">CVE-2012-2451</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2451">SUSE bug 760459</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140291" comment="perl-Config-IniFiles-2.82-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151720" comment="perl-Config-IniFiles is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2625</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2625" source="CVE"/>
    <description>
    The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2625.html">CVE-2012-2625</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 773401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2625">SUSE bug 762484</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2655</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2655" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2655" source="CVE"/>
    <description>
    PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2655.html">CVE-2012-2655</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2655">SUSE bug 765069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2655">SUSE bug 765069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2655">SUSE bug 765069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2655">SUSE bug 765069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2655">SUSE bug 765069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2655">SUSE bug 765069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2655">SUSE bug 765069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2655">SUSE bug 765069</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2669</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2669" source="CVE"/>
    <description>
    The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2669.html">CVE-2012-2669</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2669">SUSE bug 761200</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139601" comment="hyper-v-7-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151721" comment="hyper-v is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2673</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2673" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2673" source="CVE"/>
    <description>
    Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2673.html">CVE-2012-2673</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2673">SUSE bug 765444</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139858" comment="libgc1-7.2d-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151722" comment="libgc1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2686</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2686" source="CVE"/>
    <description>
    crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2686.html">CVE-2012-2686</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2686">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2686">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2686">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2686">SUSE bug 802648</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2687</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2687" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2687" source="CVE"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2687.html">CVE-2012-2687</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2687">SUSE bug 777260</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2688</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2688" source="CVE"/>
    <description>
    Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2688.html">CVE-2012-2688</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2688">SUSE bug 772582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2688">SUSE bug 772582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2688">SUSE bug 772582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2688">SUSE bug 772582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2688">SUSE bug 772582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2688">SUSE bug 772582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2688">SUSE bug 772582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2688">SUSE bug 772582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2688">SUSE bug 772582</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2737</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2737" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2737" source="CVE"/>
    <description>
    The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2737.html">CVE-2012-2737</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2737">SUSE bug 768807</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139191" comment="accountsservice-0.6.42-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151723" comment="accountsservice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139192" comment="accountsservice-lang-0.6.42-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151724" comment="accountsservice-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139193" comment="libaccountsservice0-0.6.42-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151725" comment="libaccountsservice0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139194" comment="typelib-1_0-AccountsService-1_0-0.6.42-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151726" comment="typelib-1_0-AccountsService-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2738</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2738" source="CVE"/>
    <description>
    The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2738.html">CVE-2012-2738</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2738">SUSE bug 772761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2738">SUSE bug 772761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2738">SUSE bug 772761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2738">SUSE bug 772761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2738">SUSE bug 772761</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140190" comment="libvte9-0.28.2-21.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151727" comment="libvte9 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140191" comment="vte2-lang-0.28.2-21.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151728" comment="vte2-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2808</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2808" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2808" source="CVE"/>
    <description>
    The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2015-0800.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2808.html">CVE-2012-2808</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2812</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2812" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2812" source="CVE"/>
    <description>
    The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2812.html">CVE-2012-2812</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2812">SUSE bug 771229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2812">SUSE bug 831515</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139846" comment="libexif-devel-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139847" comment="libexif12-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139848" comment="libexif12-32bit-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2813</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2813" source="CVE"/>
    <description>
    The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2813.html">CVE-2012-2813</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2813">SUSE bug 771229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2813">SUSE bug 831515</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139846" comment="libexif-devel-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139847" comment="libexif12-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139848" comment="libexif12-32bit-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2814</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2814" source="CVE"/>
    <description>
    Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2814.html">CVE-2012-2814</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2814">SUSE bug 771229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2814">SUSE bug 831515</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139846" comment="libexif-devel-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139847" comment="libexif12-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139848" comment="libexif12-32bit-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2836" source="CVE"/>
    <description>
    The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2836.html">CVE-2012-2836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2836">SUSE bug 771229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2836">SUSE bug 831515</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139846" comment="libexif-devel-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139847" comment="libexif12-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139848" comment="libexif12-32bit-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2837" source="CVE"/>
    <description>
    The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2837.html">CVE-2012-2837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2837">SUSE bug 771229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2837">SUSE bug 831515</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139846" comment="libexif-devel-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139847" comment="libexif12-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139848" comment="libexif12-32bit-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2840</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2840" source="CVE"/>
    <description>
    Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2840.html">CVE-2012-2840</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2840">SUSE bug 771229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2840">SUSE bug 831515</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139846" comment="libexif-devel-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139847" comment="libexif12-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139848" comment="libexif12-32bit-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2841</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2841" source="CVE"/>
    <description>
    Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2841.html">CVE-2012-2841</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2841">SUSE bug 771229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2841">SUSE bug 831515</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139846" comment="libexif-devel-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139847" comment="libexif12-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139848" comment="libexif12-32bit-0.6.21-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2845</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2845" source="CVE"/>
    <description>
    Integer overflow in the jpeg_data_load_data function in jpeg-data.c in libjpeg in exif 0.6.20 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain potentially sensitive information via a crafted JPEG file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2845.html">CVE-2012-2845</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2845">SUSE bug 771229</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139430" comment="exif-0.6.21-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151732" comment="exif is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20122944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-2944</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-2944" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2944" source="CVE"/>
    <description>
    Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-2944.html">CVE-2012-2944</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-2944">SUSE bug 764699</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140158" comment="libupsclient1-2.7.1-2.41 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151733" comment="libupsclient1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140159" comment="nut-2.7.1-2.41 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151734" comment="nut is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140160" comment="nut-cgi-2.7.1-2.41 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151735" comment="nut-cgi is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3236</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3236" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3236" source="CVE"/>
    <description>
    fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit file, as demonstrated using a long string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3236.html">CVE-2012-3236</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3236">SUSE bug 768376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3236">SUSE bug 769565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3236">SUSE bug 769565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3236">SUSE bug 769565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3236">SUSE bug 769565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3236">SUSE bug 769565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3236">SUSE bug 763595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3236">SUSE bug 769565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3236">SUSE bug 769565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3236">SUSE bug 769565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3236">SUSE bug 769565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139487" comment="gimp-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151540" comment="gimp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139488" comment="gimp-help-browser-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151541" comment="gimp-help-browser is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139489" comment="gimp-lang-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151542" comment="gimp-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139490" comment="gimp-plugin-aa-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151543" comment="gimp-plugin-aa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139491" comment="gimp-plugins-python-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151544" comment="gimp-plugins-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139492" comment="libgimp-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151545" comment="libgimp-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139493" comment="libgimpui-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151546" comment="libgimpui-2_0-0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3291</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3291" source="CVE"/>
    <description>
    Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3291.html">CVE-2012-3291</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3291">SUSE bug 767616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3291">SUSE bug 767616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3291">SUSE bug 767616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3291">SUSE bug 767616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3291">SUSE bug 767616</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140263" comment="openconnect-7.06-3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151736" comment="openconnect is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140264" comment="openconnect-devel-7.06-3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151737" comment="openconnect-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3356</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3356" source="CVE"/>
    <description>
    The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3356.html">CVE-2012-3356</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3356">SUSE bug 768680</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140389" comment="viewvc-1.1.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151738" comment="viewvc is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123357" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3357</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3357" source="CVE"/>
    <description>
    The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a readable path is copied from an unreadable path, which allows remote attackers to obtain sensitive information, related to a "log msg leak."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3357.html">CVE-2012-3357</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3357">SUSE bug 768680</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140389" comment="viewvc-1.1.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151738" comment="viewvc is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3358</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3358" source="CVE"/>
    <description>
    Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3358.html">CVE-2012-3358</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3358">SUSE bug 770649</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3365</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3365" source="CVE"/>
    <description>
    The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3365.html">CVE-2012-3365</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3365">SUSE bug 772580</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3374</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3374" source="CVE"/>
    <description>
    Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3374.html">CVE-2012-3374</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3374">SUSE bug 770304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3374">SUSE bug 770304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3374">SUSE bug 770304</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3386</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3386" source="CVE"/>
    <description>
    The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3386.html">CVE-2012-3386</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 786745</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3386">SUSE bug 770618</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139589" comment="gv-3.7.4-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151739" comment="gv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139967" comment="libpng12-0-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139968" comment="libpng12-0-32bit-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139969" comment="libpng12-devel-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139590" comment="wdiff-1.2.2-7.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151740" comment="wdiff is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139591" comment="wdiff-lang-1.2.2-7.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151741" comment="wdiff-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3401</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3401" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3401" source="CVE"/>
    <description>
    The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3401.html">CVE-2012-3401</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 854393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3401">SUSE bug 770816</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3406</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3406" source="CVE"/>
    <description>
    The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3406.html">CVE-2012-3406</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3406">SUSE bug 770891</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3422</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3422" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3422" source="CVE"/>
    <description>
    The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web page, which causes an uninitialized memory location to be read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3422.html">CVE-2012-3422</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3422">SUSE bug 773458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3422">SUSE bug 818768</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139604" comment="icedtea-web-javadoc-1.6.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139605" comment="java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151625" comment="java-1_8_0-openjdk-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3423</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3423" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3423" source="CVE"/>
    <description>
    The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of service (crash), obtain sensitive information from memory, or execute arbitrary code via a crafted Java applet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3423.html">CVE-2012-3423</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3423">SUSE bug 773458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3423">SUSE bug 818768</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139604" comment="icedtea-web-javadoc-1.6.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139605" comment="java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151625" comment="java-1_8_0-openjdk-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3432</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3432" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3432" source="CVE"/>
    <description>
    The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3432.html">CVE-2012-3432</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3432">SUSE bug 773401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3432">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3432">SUSE bug 773401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3432">SUSE bug 773401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3432">SUSE bug 773401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3432">SUSE bug 773401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3432">SUSE bug 773401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3432">SUSE bug 773401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3432">SUSE bug 773401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3432">SUSE bug 773401</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3433</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3433" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3433" source="CVE"/>
    <description>
    Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3433.html">CVE-2012-3433</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3433">SUSE bug 773393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3438</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3438" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3438" source="CVE"/>
    <description>
    The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3438.html">CVE-2012-3438</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 785093</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 785093</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 773612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 785093</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 773612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 773612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 773612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 773612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 773612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 773612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 785093</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3438">SUSE bug 773612</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139159" comment="GraphicsMagick-devel-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139160" comment="libGraphicsMagick-Q16-3-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139161" comment="libGraphicsMagick3-config-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139162" comment="libGraphicsMagickWand-Q16-2-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3445</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3445" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3445" source="CVE"/>
    <description>
    The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed parameters, which might allow remote authenticated users to cause a denial of service (libvirtd crash) via an RPC command with nparams set to zero, which triggers an out-of-bounds read or a free of an invalid pointer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3445.html">CVE-2012-3445</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3445">SUSE bug 773955</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3466</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3466" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3466" source="CVE"/>
    <description>
    GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a passphrase is cached, which allows attackers to have an unspecified impact via unknown attack vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3466.html">CVE-2012-3466</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3466">SUSE bug 775235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3466">SUSE bug 775235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3466">SUSE bug 775235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3466">SUSE bug 775235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3466">SUSE bug 775235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3466">SUSE bug 775235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3466">SUSE bug 775235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3466">SUSE bug 775235</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139526" comment="gnome-keyring-3.20.0-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151742" comment="gnome-keyring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139527" comment="gnome-keyring-32bit-3.20.0-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151743" comment="gnome-keyring-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139528" comment="gnome-keyring-lang-3.20.0-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151744" comment="gnome-keyring-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139529" comment="gnome-keyring-pam-3.20.0-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151745" comment="gnome-keyring-pam is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139530" comment="gnome-keyring-pam-32bit-3.20.0-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151746" comment="gnome-keyring-pam-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139531" comment="libgck-modules-gnome-keyring-3.20.0-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151747" comment="libgck-modules-gnome-keyring is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3482</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3482" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3482" source="CVE"/>
    <description>
    Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3482.html">CVE-2012-3482</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3482">SUSE bug 775988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3482">SUSE bug 775988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3482">SUSE bug 775988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3482">SUSE bug 775988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3482">SUSE bug 775988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3482">SUSE bug 775988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3482">SUSE bug 775988</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139439" comment="fetchmail-6.3.26-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151334" comment="fetchmail is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3488</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3488" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3488" source="CVE"/>
    <description>
    The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3488.html">CVE-2012-3488</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3488">SUSE bug 776523</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3489</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3489" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3489" source="CVE"/>
    <description>
    The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3489.html">CVE-2012-3489</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3489">SUSE bug 776524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3489">SUSE bug 776524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3489">SUSE bug 776524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3489">SUSE bug 776524</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3499</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3499" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3499" source="CVE"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3499.html">CVE-2012-3499</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3499">SUSE bug 806458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3499">SUSE bug 807511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3499">SUSE bug 806458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3499">SUSE bug 806458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3499">SUSE bug 806458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3499">SUSE bug 806458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3499">SUSE bug 806458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3499">SUSE bug 806458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3499">SUSE bug 806458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3499">SUSE bug 806458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3499">SUSE bug 806458</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3502</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3502" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3502" source="CVE"/>
    <description>
    The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server 2.4.x before 2.4.3 does not properly determine the situations that require closing a back-end connection, which allows remote attackers to obtain sensitive information in opportunistic circumstances by reading a response that was intended for a different client.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3502.html">CVE-2012-3502</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3502">SUSE bug 777119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3502">SUSE bug 777119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3502">SUSE bug 777119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3515</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515" source="CVE"/>
    <description>
    Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3515.html">CVE-2012-3515</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3515">SUSE bug 777084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3524</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3524" source="CVE"/>
    <description>
    libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable.  NOTE: libdbus maintainers state that this is a vulnerability in the applications that do not cleanse environment variables, not in libdbus itself: "we do not support use of libdbus in setuid binaries that do not sanitize their environment before their first call into libdbus."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3524.html">CVE-2012-3524</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 697105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 852781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 852781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 852781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 852781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 852781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 852781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 852781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 852781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 697105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 912016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3524">SUSE bug 697105</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139503" comment="glib2-devel-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151142" comment="glib2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139504" comment="glib2-lang-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151143" comment="glib2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139505" comment="glib2-tools-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151144" comment="glib2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139506" comment="libgio-2_0-0-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151145" comment="libgio-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139507" comment="libgio-2_0-0-32bit-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151146" comment="libgio-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139508" comment="libglib-2_0-0-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151147" comment="libglib-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139509" comment="libglib-2_0-0-32bit-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151148" comment="libglib-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139510" comment="libgmodule-2_0-0-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151149" comment="libgmodule-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139511" comment="libgmodule-2_0-0-32bit-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151150" comment="libgmodule-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139512" comment="libgobject-2_0-0-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151151" comment="libgobject-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139513" comment="libgobject-2_0-0-32bit-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151152" comment="libgobject-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139514" comment="libgthread-2_0-0-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151153" comment="libgthread-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139515" comment="libgthread-2_0-0-32bit-2.48.2-1.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151154" comment="libgthread-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3535</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3535" source="CVE"/>
    <description>
    Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3535.html">CVE-2012-3535</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3535">SUSE bug 777445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3535">SUSE bug 777445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3535">SUSE bug 777445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3535">SUSE bug 777445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3535">SUSE bug 777445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3535">SUSE bug 777445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3535">SUSE bug 777445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3535">SUSE bug 777445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3535">SUSE bug 777445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3535">SUSE bug 777445</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3548</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3548" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3548" source="CVE"/>
    <description>
    The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a small value for a certain length field in a capture file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3548.html">CVE-2012-3548</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3548">SUSE bug 778000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3548">SUSE bug 778000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3548">SUSE bug 778000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3548">SUSE bug 778000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3548">SUSE bug 783275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3548">SUSE bug 778000</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3570</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3570" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3570" source="CVE"/>
    <description>
    Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a crafted client identifier parameter.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3570.html">CVE-2012-3570</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3570">SUSE bug 772924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3570">SUSE bug 772924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3570">SUSE bug 772924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3570">SUSE bug 772924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3570">SUSE bug 772924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3570">SUSE bug 772924</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3571</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3571" source="CVE"/>
    <description>
    ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3571.html">CVE-2012-3571</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3571">SUSE bug 772924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3571">SUSE bug 772924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3571">SUSE bug 772924</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3817</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3817" source="CVE"/>
    <description>
    ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3817.html">CVE-2012-3817</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3817">SUSE bug 772945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3817">SUSE bug 772945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3817">SUSE bug 772945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3817">SUSE bug 772945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3817">SUSE bug 772945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3817">SUSE bug 772945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3817">SUSE bug 772945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3817">SUSE bug 772945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3817">SUSE bug 792926</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3868</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3868" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3868" source="CVE"/>
    <description>
    Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3868.html">CVE-2012-3868</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3868">SUSE bug 772946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3868">SUSE bug 772946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3868">SUSE bug 772946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3868">SUSE bug 772946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3868">SUSE bug 792926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3868">SUSE bug 772946</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3954</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3954" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3954" source="CVE"/>
    <description>
    Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3954.html">CVE-2012-3954</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3954">SUSE bug 772924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3954">SUSE bug 772924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3954">SUSE bug 772924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3954">SUSE bug 772924</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3955</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3955" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3955" source="CVE"/>
    <description>
    ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3955.html">CVE-2012-3955</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3955">SUSE bug 780167</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3955">SUSE bug 780167</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3955">SUSE bug 780167</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3955">SUSE bug 780167</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3955">SUSE bug 780167</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3955">SUSE bug 780167</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3956</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3956" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3956" source="CVE"/>
    <description>
    Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3956.html">CVE-2012-3956</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3956">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3957</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3957" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3957" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3957.html">CVE-2012-3957</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3957">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3958</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3958" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3958.html">CVE-2012-3958</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3958">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3959</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3959" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3959.html">CVE-2012-3959</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3959">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3960</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3960" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3960.html">CVE-2012-3960</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3960">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3961</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3961" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3961" source="CVE"/>
    <description>
    Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3961.html">CVE-2012-3961</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3961">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3962</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3962" source="CVE"/>
    <description>
    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly iterate through the characters in a text run, which allows remote attackers to execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3962.html">CVE-2012-3962</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3962">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3963</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3963" source="CVE"/>
    <description>
    Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3963.html">CVE-2012-3963</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3963">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3964</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3964" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3964" source="CVE"/>
    <description>
    Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3964.html">CVE-2012-3964</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3964">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3965</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3965" source="CVE"/>
    <description>
    Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3965.html">CVE-2012-3965</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3965">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3966</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3966" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3966" source="CVE"/>
    <description>
    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a negative height value in a BMP image within a .ICO file, related to (1) improper handling of the transparency bitmask by the nsICODecoder component and (2) improper processing of the alpha channel by the nsBMPDecoder component.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3966.html">CVE-2012-3966</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3966">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3967</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3967" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3967" source="CVE"/>
    <description>
    The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3967.html">CVE-2012-3967</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3967">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123968" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3968</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3968" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3968" source="CVE"/>
    <description>
    Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via vectors related to deletion of a fragment shader by its accessor.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3968.html">CVE-2012-3968</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3968">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3969</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3969" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3969" source="CVE"/>
    <description>
    Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via a crafted SVG filter that triggers an incorrect sum calculation, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3969.html">CVE-2012-3969</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3969">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3970</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3970" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3970" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving movement of a requiredFeatures attribute from one SVG document to another.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3970.html">CVE-2012-3970</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3970">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3971</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3971" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3971" source="CVE"/>
    <description>
    Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the (1) Silf::readClassMap and (2) Pass::readPass functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3971.html">CVE-2012-3971</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3971">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3972</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3972" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3972" source="CVE"/>
    <description>
    The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3972.html">CVE-2012-3972</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3972">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3973</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3973" source="CVE"/>
    <description>
    The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict access to the remote-debugging service, which allows remote attackers to execute arbitrary code by leveraging the presence of the HTTPMonitor extension and connecting to that service through the HTTPMonitor port.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3973.html">CVE-2012-3973</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3973">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3975</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3975" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3975" source="CVE"/>
    <description>
    The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote attackers to obtain sensitive information by providing crafted data to privileged extension code.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3975.html">CVE-2012-3975</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3975">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3976</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3976" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3976" source="CVE"/>
    <description>
    Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows remote attackers to spoof the X.509 certificate information in the address bar via a crafted web page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3976.html">CVE-2012-3976</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3976">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3978</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3978" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3978" source="CVE"/>
    <description>
    The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3978.html">CVE-2012-3978</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3978">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3980</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3980" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3980" source="CVE"/>
    <description>
    The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that injects this code and triggers an eval operation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3980.html">CVE-2012-3980</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3980">SUSE bug 777588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3982</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3982" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3982" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3982.html">CVE-2012-3982</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3982">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3983</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3983" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3983.html">CVE-2012-3983</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3983">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3984</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3984" source="CVE"/>
    <description>
    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3984.html">CVE-2012-3984</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3984">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3985</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3985" source="CVE"/>
    <description>
    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging initial-origin access after document.domain has been set.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3985.html">CVE-2012-3985</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3985">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3986</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3986" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3986" source="CVE"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (aka nsDOMWindowUtils) methods, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3986.html">CVE-2012-3986</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3986">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3988</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3988" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-assisted remote attackers to execute arbitrary code via vectors involving use of mozRequestFullScreen to enter full-screen mode, and use of the history.back method for backwards history navigation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3988.html">CVE-2012-3988</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3988">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3989</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3989" source="CVE"/>
    <description>
    Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable during use of the instanceof operator on a JavaScript object, which allows remote attackers to execute arbitrary code or cause a denial of service (assertion failure) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3989.html">CVE-2012-3989</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3989">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3990</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3990" source="CVE"/>
    <description>
    Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors, related to the nsIContent::GetNameSpaceID function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3990.html">CVE-2012-3990</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3990">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3991</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3991" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3991" source="CVE"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI access to the GetProperty function, which allows remote attackers to bypass the Same Origin Policy and possibly have unspecified other impact via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3991.html">CVE-2012-3991</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3991">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3992</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3992" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3992" source="CVE"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history data, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive POST content via vectors involving a location.hash write operation and history navigation that triggers the loading of a URL into the history object.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3992.html">CVE-2012-3992</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3992">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3993</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3993" source="CVE"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an "XrayWrapper pollution" issue.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3993.html">CVE-2012-3993</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3993">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3994</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3994" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3994" source="CVE"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to conduct cross-site scripting (XSS) attacks via a binary plugin that uses Object.defineProperty to shadow the top object, and leverages the relationship between top.location and the location property.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3994.html">CVE-2012-3994</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3994">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20123995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-3995</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-3995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3995" source="CVE"/>
    <description>
    The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-3995.html">CVE-2012-3995</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-3995">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4024</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4024" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4024" source="CVE"/>
    <description>
    Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted list file (aka a crafted file for the -ef option).  NOTE: probably in most cases, the list file is a trusted file constructed by the program's user; however, there are some realistic situations in which a list file would be obtained from an untrusted remote source.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4024.html">CVE-2012-4024</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4024">SUSE bug 773015</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140360" comment="squashfs-4.3-7.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151752" comment="squashfs is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4025</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4025" source="CVE"/>
    <description>
    Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted block_log field in the superblock of a .sqsh file, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4025.html">CVE-2012-4025</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4025">SUSE bug 773015</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140360" comment="squashfs-4.3-7.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151752" comment="squashfs is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4048</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4048" source="CVE"/>
    <description>
    The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted packet, as demonstrated by a usbmon dump.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4048.html">CVE-2012-4048</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4048">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4048">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4048">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4048">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4048">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4048">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4048">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4048">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4048">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4048">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4048">SUSE bug 772738</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4049</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4049" source="CVE"/>
    <description>
    epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4049.html">CVE-2012-4049</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4049">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4049">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4049">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4049">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4049">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4049">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4049">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4049">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4049">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4049">SUSE bug 772738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4049">SUSE bug 772738</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4179</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4179" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4179.html">CVE-2012-4179</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4179">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4180</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4180" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4180.html">CVE-2012-4180</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4180">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4181</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4181" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4181.html">CVE-2012-4181</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4181">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4182</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4182" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4182.html">CVE-2012-4182</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4182">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4183</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4183" source="CVE"/>
    <description>
    Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4183.html">CVE-2012-4183</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4183">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4184</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4184" source="CVE"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not prevent access to properties of a prototype for a standard class, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4184.html">CVE-2012-4184</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4184">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4185</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4185" source="CVE"/>
    <description>
    Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4185.html">CVE-2012-4185</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4185">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4186</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4186" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4186.html">CVE-2012-4186</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4186">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4187</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4187" source="CVE"/>
    <description>
    Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and assertion failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4187.html">CVE-2012-4187</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4187">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4188</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4188" source="CVE"/>
    <description>
    Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4188.html">CVE-2012-4188</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4188">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4191" source="CVE"/>
    <description>
    The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4191.html">CVE-2012-4191</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4192</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4192" source="CVE"/>
    <description>
    Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue to CVE-2012-4193.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4192.html">CVE-2012-4192</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4193</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4193" source="CVE"/>
    <description>
    Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security wrappers, which allows remote attackers to bypass the Same Origin Policy and read the properties of a Location object, or execute arbitrary JavaScript code, via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4193.html">CVE-2012-4193</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4193">SUSE bug 783533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4194</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4194" source="CVE"/>
    <description>
    Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4194.html">CVE-2012-4194</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4194">SUSE bug 786522</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4195</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4195" source="CVE"/>
    <description>
    The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine the calling document and principal in its return value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site, and makes it easier for remote attackers to execute arbitrary JavaScript code by leveraging certain add-on behavior.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4195.html">CVE-2012-4195</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4195">SUSE bug 786522</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4196</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4196" source="CVE"/>
    <description>
    Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read the Location object via a prototype property-injection attack that defeats certain protection mechanisms for this object.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4196.html">CVE-2012-4196</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4196">SUSE bug 786522</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4201</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4201" source="CVE"/>
    <description>
    The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code that sets the location.href property, which allows remote attackers to conduct cross-site scripting (XSS) attacks or read arbitrary files by leveraging a sandboxed add-on.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4201.html">CVE-2012-4201</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4201">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4202</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4202" source="CVE"/>
    <description>
    Heap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4202.html">CVE-2012-4202</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4202">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4203</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4203" source="CVE"/>
    <description>
    The New Tab page in Mozilla Firefox before 17.0 uses a privileged context for execution of JavaScript code by bookmarklets, which allows user-assisted remote attackers to run arbitrary programs by leveraging a javascript: URL in a bookmark.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4203.html">CVE-2012-4203</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4203">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4204</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4204" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4204" source="CVE"/>
    <description>
    The str_unescape function in the JavaScript engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4204.html">CVE-2012-4204</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4204">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4205</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4205" source="CVE"/>
    <description>
    Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XMLHttpRequest objects created in sandboxes, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks or obtain sensitive information by leveraging a sandboxed add-on.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4205.html">CVE-2012-4205</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4205">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4207</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4207" source="CVE"/>
    <description>
    The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly handle a ~ (tilde) character in proximity to a chunk delimiter, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4207.html">CVE-2012-4207</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4207">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4208</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4208" source="CVE"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 does not consider the compartment during property filtering, which allows remote attackers to bypass intended chrome-only restrictions on reading DOM object properties via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4208.html">CVE-2012-4208</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4208">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4209</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4209" source="CVE"/>
    <description>
    Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 do not prevent use of a "top" frame name-attribute value to access the location property, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a binary plugin.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4209.html">CVE-2012-4209</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4209">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4210" source="CVE"/>
    <description>
    The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences, which allows user-assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted stylesheet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4210.html">CVE-2012-4210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4210">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4212</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4212" source="CVE"/>
    <description>
    Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4212.html">CVE-2012-4212</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4212">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4213</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4213" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsEditor::FindNextLeafNode function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4213.html">CVE-2012-4213</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4213">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4214</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4214" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-5840.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4214.html">CVE-2012-4214</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4214">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4215</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4215" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4215" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsPlaintextEditor::FireClipboardEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4215.html">CVE-2012-4215</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4215">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4216</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4216" source="CVE"/>
    <description>
    Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4216.html">CVE-2012-4216</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4216">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4217</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4217" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsViewManager::ProcessPendingUpdates function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4217.html">CVE-2012-4217</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4217">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4218</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4218" source="CVE"/>
    <description>
    Use-after-free vulnerability in the BuildTextRunsScanner::BreakSink::SetBreaks function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4218.html">CVE-2012-4218</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4218">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4244</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4244" source="CVE"/>
    <description>
    ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4244.html">CVE-2012-4244</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 780157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4244">SUSE bug 792926</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4285</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4285" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4285" source="CVE"/>
    <description>
    The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4285.html">CVE-2012-4285</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4285">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4286</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4286" source="CVE"/>
    <description>
    The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4286.html">CVE-2012-4286</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4286">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4287</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4287" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4287" source="CVE"/>
    <description>
    epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4287.html">CVE-2012-4287</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4287">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4288</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4288" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4288" source="CVE"/>
    <description>
    Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large value for a span length.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4288.html">CVE-2012-4288</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4288">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4289</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4289" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4289" source="CVE"/>
    <description>
    epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4289.html">CVE-2012-4289</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4289">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4290</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4290" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4290" source="CVE"/>
    <description>
    The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4290.html">CVE-2012-4290</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4290">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4291</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4291" source="CVE"/>
    <description>
    The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4291.html">CVE-2012-4291</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4291">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4292</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4292" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4292" source="CVE"/>
    <description>
    The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4292.html">CVE-2012-4292</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4292">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4293</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4293" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4293" source="CVE"/>
    <description>
    plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly handle certain integer fields, which allows remote attackers to cause a denial of service (application exit) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4293.html">CVE-2012-4293</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4293">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4294</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4294" source="CVE"/>
    <description>
    Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed (aka rate) value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4294.html">CVE-2012-4294</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4294">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4295</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4295" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4295" source="CVE"/>
    <description>
    Array index error in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service (application crash) via a crafted speed (aka rate) value.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4295.html">CVE-2012-4295</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4295">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4296</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4296" source="CVE"/>
    <description>
    Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4296.html">CVE-2012-4296</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4296">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4297</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4297" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4297" source="CVE"/>
    <description>
    Buffer overflow in the dissect_gsm_rlcmac_downlink function in epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4297.html">CVE-2012-4297</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4297">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4298</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4298" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4298" source="CVE"/>
    <description>
    Integer signedness error in the vwr_read_rec_data_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4298.html">CVE-2012-4298</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4298">SUSE bug 776083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4411</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4411" source="CVE"/>
    <description>
    The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor.  NOTE: this might be a duplicate of CVE-2007-0998.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4411.html">CVE-2012-4411</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4411">SUSE bug 779212</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4412</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412" source="CVE"/>
    <description>
    Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4412.html">CVE-2012-4412</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 848783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 779320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 920055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 920169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 920338</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 920169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4412">SUSE bug 920338</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4425</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4425" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4425" source="CVE"/>
    <description>
    libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable.  NOTE: it could be argued that this is a vulnerability in the applications that do not cleanse environment variables, not in libgio itself.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4425.html">CVE-2012-4425</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140089" comment="libspice-client-glib-2_0-8-0.31-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151753" comment="libspice-client-glib-2_0-8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140090" comment="libspice-client-glib-helper-0.31-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154105" comment="libspice-client-glib-helper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140091" comment="libspice-client-gtk-2_0-4-0.31-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151754" comment="libspice-client-gtk-2_0-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140092" comment="libspice-client-gtk-3_0-4-0.31-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151755" comment="libspice-client-gtk-3_0-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140093" comment="libspice-controller0-0.31-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151756" comment="libspice-controller0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140094" comment="python-SpiceClientGtk-0.31-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151757" comment="python-SpiceClientGtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140095" comment="typelib-1_0-SpiceClientGlib-2_0-0.31-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151758" comment="typelib-1_0-SpiceClientGlib-2_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140096" comment="typelib-1_0-SpiceClientGtk-3_0-0.31-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151759" comment="typelib-1_0-SpiceClientGtk-3_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4433</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4433" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4433" source="CVE"/>
    <description>
    Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large (1) width or (2) height value in a Portable Pixel Map (ppm) image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4433.html">CVE-2012-4433</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 1023636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 1023636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 1028070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 1028070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 789835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 1089725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4433">SUSE bug 1089725</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149868" comment="gegl-0.2.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154106" comment="gegl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149869" comment="gegl-0_2-0.2.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154107" comment="gegl-0_2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149870" comment="gegl-0_2-lang-0.2.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154108" comment="gegl-0_2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149871" comment="gegl-devel-0.2.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154109" comment="gegl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149872" comment="gegl-doc-0.2.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154110" comment="gegl-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149873" comment="libgegl-0_2-0-0.2.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154111" comment="libgegl-0_2-0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4453</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4453" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4453" source="CVE"/>
    <description>
    dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to obtain sensitive information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4453.html">CVE-2012-4453</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4453">SUSE bug 782734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4453">SUSE bug 1008340</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139392" comment="dracut-044-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151760" comment="dracut is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4504</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4504" source="CVE"/>
    <description>
    Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4504.html">CVE-2012-4504</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 784523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4504">SUSE bug 795039</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139982" comment="libproxy-devel-0.4.13-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151761" comment="libproxy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139983" comment="libproxy1-0.4.13-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151762" comment="libproxy1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139984" comment="libproxy1-config-gnome3-0.4.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151763" comment="libproxy1-config-gnome3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139985" comment="libproxy1-config-kde-0.4.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154112" comment="libproxy1-config-kde is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139986" comment="libproxy1-networkmanager-0.4.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151765" comment="libproxy1-networkmanager is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139987" comment="libproxy1-pacrunner-webkit-0.4.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151766" comment="libproxy1-pacrunner-webkit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4507</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4507" source="CVE"/>
    <description>
    The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted email.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4507.html">CVE-2012-4507</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4507">SUSE bug 784463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4507">SUSE bug 784463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4507">SUSE bug 784463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4507">SUSE bug 784463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4507">SUSE bug 784463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4507">SUSE bug 784463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4507">SUSE bug 784463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4507">SUSE bug 784463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4507">SUSE bug 784463</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139314" comment="claws-mail-3.13.2-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151767" comment="claws-mail is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139315" comment="claws-mail-lang-3.13.2-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151768" comment="claws-mail-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4510</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4510" source="CVE"/>
    <description>
    cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4510.html">CVE-2012-4510</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4510">SUSE bug 783488</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139360" comment="cups-pk-helper-0.2.5-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151769" comment="cups-pk-helper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139361" comment="cups-pk-helper-lang-0.2.5-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151770" comment="cups-pk-helper-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4535</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4535" source="CVE"/>
    <description>
    Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4535.html">CVE-2012-4535</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4535">SUSE bug 786516</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4536</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4536" source="CVE"/>
    <description>
    The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq value that triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4536.html">CVE-2012-4536</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4536">SUSE bug 786518</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4537</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4537" source="CVE"/>
    <description>
    Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4537.html">CVE-2012-4537</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4537">SUSE bug 786517</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4538" source="CVE"/>
    <description>
    The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4538.html">CVE-2012-4538</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4538">SUSE bug 786519</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4539</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4539" source="CVE"/>
    <description>
    Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vulnerability."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4539.html">CVE-2012-4539</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4539">SUSE bug 786520</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4540</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4540" source="CVE"/>
    <description>
    Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a "triggering event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4540.html">CVE-2012-4540</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 787846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4540">SUSE bug 840572</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139604" comment="icedtea-web-javadoc-1.6.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139605" comment="java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151625" comment="java-1_8_0-openjdk-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4544</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4544" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4544" source="CVE"/>
    <description>
    The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4544.html">CVE-2012-4544</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 779212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 786516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 786518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 786519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 786520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 787163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4544">SUSE bug 787163</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4559</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4559" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4559" source="CVE"/>
    <description>
    Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pubkey function in auth.c, (4) sftp_parse_attr_3 function in sftp.c, and (5) try_publickey_from_file function in keyfiles.c in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4559.html">CVE-2012-4559</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4559">SUSE bug 789827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4559">SUSE bug 789827</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140104" comment="libssh-devel-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151771" comment="libssh-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140105" comment="libssh4-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4560</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4560" source="CVE"/>
    <description>
    Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4560.html">CVE-2012-4560</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4560">SUSE bug 789827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4560">SUSE bug 789827</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140104" comment="libssh-devel-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151771" comment="libssh-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140105" comment="libssh4-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4561</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4561" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4561" source="CVE"/>
    <description>
    The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to cause a denial of service (crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4561.html">CVE-2012-4561</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4561">SUSE bug 789827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4561">SUSE bug 789827</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140104" comment="libssh-devel-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151771" comment="libssh-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140105" comment="libssh4-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4564</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4564" source="CVE"/>
    <description>
    ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4564.html">CVE-2012-4564</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 781995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 791607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 787892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4564">SUSE bug 854393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20124929" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-4929</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-4929" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4929" source="CVE"/>
    <description>
    The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-4929.html">CVE-2012-4929</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 793420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 793420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 803004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 793420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 793420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 779952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 793420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 793420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 793420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 793420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 847895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 793420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 793420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 793420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-4929">SUSE bug 1011293</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140237" comment="links-2.8-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151773" comment="links is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140239" comment="lynx-2.8.7-4.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151020" comment="lynx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140398" comment="w3m-0.5.3-158.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140399" comment="wget-1.14-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5112</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5112" source="CVE"/>
    <description>
    Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5112.html">CVE-2012-5112</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5112">SUSE bug 786698</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5133</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5133" source="CVE"/>
    <description>
    Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5133.html">CVE-2012-5133</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5133">SUSE bug 791234</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5134</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="CVE"/>
    <description>
    Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5134.html">CVE-2012-5134</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 791234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 795039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 804033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 804033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 804033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5134">SUSE bug 793334</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5166</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5166" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5166" source="CVE"/>
    <description>
    ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5166.html">CVE-2012-5166</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5166">SUSE bug 784602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5166">SUSE bug 784602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5166">SUSE bug 784602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5166">SUSE bug 784602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5166">SUSE bug 784602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5166">SUSE bug 784602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5166">SUSE bug 784602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5166">SUSE bug 792926</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5237</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5237" source="CVE"/>
    <description>
    The dissect_hsrp function in epan/dissectors/packet-hsrp.c in the HSRP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5237.html">CVE-2012-5237</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5237">SUSE bug 783275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5238</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5238" source="CVE"/>
    <description>
    epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.3 uses incorrect OUI data structures during the decoding of (1) PPP and (2) LCP data, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5238.html">CVE-2012-5238</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5238">SUSE bug 783275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5239</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5239" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5239" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-3548.  Reason: This candidate is a reservation duplicate of CVE-2012-3548.  Notes: All CVE users should reference CVE-2012-3548 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5239.html">CVE-2012-5239</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5239">SUSE bug 783275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5240</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5240" source="CVE"/>
    <description>
    Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5240.html">CVE-2012-5240</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5240">SUSE bug 783275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5468</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5468" source="CVE"/>
    <description>
    Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5468.html">CVE-2012-5468</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5468">SUSE bug 792939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5468">SUSE bug 792939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5468">SUSE bug 792939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5468">SUSE bug 792939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5468">SUSE bug 792939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5468">SUSE bug 792939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5468">SUSE bug 792939</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139302" comment="bogofilter-common-1.2.4-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151443" comment="bogofilter-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139303" comment="bogofilter-db-1.2.4-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151444" comment="bogofilter-db is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5510</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510" source="CVE"/>
    <description>
    Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5510.html">CVE-2012-5510</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5510">SUSE bug 789945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5510">SUSE bug 789945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5510">SUSE bug 789945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5510">SUSE bug 789945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5510">SUSE bug 789945</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5511</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="CVE"/>
    <description>
    Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5511.html">CVE-2012-5511</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5511">SUSE bug 789944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5511">SUSE bug 789944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5511">SUSE bug 789944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5511">SUSE bug 789944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5511">SUSE bug 789944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5511">SUSE bug 789944</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5513</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="CVE"/>
    <description>
    The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5513.html">CVE-2012-5513</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5513">SUSE bug 789951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5513">SUSE bug 789951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5513">SUSE bug 789951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5513">SUSE bug 789951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5513">SUSE bug 789951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5513">SUSE bug 789951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5513">SUSE bug 789951</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5514</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="CVE"/>
    <description>
    The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5514.html">CVE-2012-5514</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5514">SUSE bug 789948</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5515</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515" source="CVE"/>
    <description>
    The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5515.html">CVE-2012-5515</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5515">SUSE bug 789950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5515">SUSE bug 789950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5515">SUSE bug 789950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5515">SUSE bug 789950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5515">SUSE bug 789950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5515">SUSE bug 789950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5515">SUSE bug 789950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5519</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5519" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5519" source="CVE"/>
    <description>
    CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5519.html">CVE-2012-5519</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 882905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 882905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 882905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 882905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 882905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 882905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 882905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 789566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 882905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 882905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5519">SUSE bug 924208</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5525</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5525" source="CVE"/>
    <description>
    The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5525.html">CVE-2012-5525</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5525">SUSE bug 789952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5525">SUSE bug 789952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5525">SUSE bug 789952</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5532</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5532" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5532" source="CVE"/>
    <description>
    The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.8-rc1, allows local users to cause a denial of service (daemon exit) via a crafted application that sends a Netlink message.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-2669.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5532.html">CVE-2012-5532</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5532">SUSE bug 791605</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139601" comment="hyper-v-7-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151721" comment="hyper-v is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5576</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5576" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5576" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5576.html">CVE-2012-5576</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5576">SUSE bug 791372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5576">SUSE bug 791372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5576">SUSE bug 791372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5576">SUSE bug 791372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5576">SUSE bug 791372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5576">SUSE bug 791372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5576">SUSE bug 791372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5576">SUSE bug 791372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5576">SUSE bug 791372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5576">SUSE bug 791372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5576">SUSE bug 791372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139487" comment="gimp-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151540" comment="gimp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139488" comment="gimp-help-browser-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151541" comment="gimp-help-browser is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139489" comment="gimp-lang-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151542" comment="gimp-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139490" comment="gimp-plugin-aa-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151543" comment="gimp-plugin-aa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139491" comment="gimp-plugins-python-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151544" comment="gimp-plugins-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139492" comment="libgimp-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151545" comment="libgimp-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139493" comment="libgimpui-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151546" comment="libgimpui-2_0-0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5592</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5592" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6052.  Reason: This candidate is a reservation duplicate of CVE-2012-6052.  Notes: All CVE users should reference CVE-2012-6052 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5592.html">CVE-2012-5592</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5592">SUSE bug 792005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5593</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5593" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5593" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6053.  Reason: This candidate is a reservation duplicate of CVE-2012-6053.  Notes: All CVE users should reference CVE-2012-6053 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5593.html">CVE-2012-5593</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5593">SUSE bug 792005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5594</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5594" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6054.  Reason: This candidate is a reservation duplicate of CVE-2012-6054.  Notes: All CVE users should reference CVE-2012-6054 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5594.html">CVE-2012-5594</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5594">SUSE bug 792005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5595</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5595" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5595" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6056.  Reason: This candidate is a reservation duplicate of CVE-2012-6056.  Notes: All CVE users should reference CVE-2012-6056 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5595.html">CVE-2012-5595</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5595">SUSE bug 792005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5596</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5596" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5596" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6057.  Reason: This candidate is a reservation duplicate of CVE-2012-6057.  Notes: All CVE users should reference CVE-2012-6057 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5596.html">CVE-2012-5596</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5596">SUSE bug 792005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5597</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5597" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6059.  Reason: This candidate is a reservation duplicate of CVE-2012-6059.  Notes: All CVE users should reference CVE-2012-6059 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5597.html">CVE-2012-5597</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5597">SUSE bug 792005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5598</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5598" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5598" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6060.  Reason: This candidate is a reservation duplicate of CVE-2012-6060.  Notes: All CVE users should reference CVE-2012-6060 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5598.html">CVE-2012-5598</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5598">SUSE bug 792005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5599</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5599" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5599" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6061.  Reason: This candidate is a reservation duplicate of CVE-2012-6061.  Notes: All CVE users should reference CVE-2012-6061 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5599.html">CVE-2012-5599</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5599">SUSE bug 792005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5600" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6062.  Reason: This candidate is a reservation duplicate of CVE-2012-6062.  Notes: All CVE users should reference CVE-2012-6062 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5600.html">CVE-2012-5600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5600">SUSE bug 792005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5601</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5601" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5601" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6055.  Reason: This candidate is a reservation duplicate of CVE-2012-6055.  Notes: All CVE users should reference CVE-2012-6055 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5601.html">CVE-2012-5601</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5601">SUSE bug 792005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5602</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5602" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5602" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6058.  Reason: This candidate is a reservation duplicate of CVE-2012-6058.  Notes: All CVE users should reference CVE-2012-6058 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5602.html">CVE-2012-5602</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5602">SUSE bug 792005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5615</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615" source="CVE"/>
    <description>
    Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5615.html">CVE-2012-5615</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5615">SUSE bug 792440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5615">SUSE bug 792440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5615">SUSE bug 792440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5615">SUSE bug 792440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5615">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5615">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5615">SUSE bug 915913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5615">SUSE bug 792440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5615">SUSE bug 792440</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5634</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5634" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5634" source="CVE"/>
    <description>
    Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5634.html">CVE-2012-5634</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5634">SUSE bug 794316</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5643</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5643" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5643" source="CVE"/>
    <description>
    Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5643.html">CVE-2012-5643</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 794954</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5643">SUSE bug 796999</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5668</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5668" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5668" source="CVE"/>
    <description>
    FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5668.html">CVE-2012-5668</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5668">SUSE bug 795826</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5669</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5669" source="CVE"/>
    <description>
    The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5669.html">CVE-2012-5669</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5669">SUSE bug 795826</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5670</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5670" source="CVE"/>
    <description>
    The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5670.html">CVE-2012-5670</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5670">SUSE bug 795826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5670">SUSE bug 795826</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5688</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5688" source="CVE"/>
    <description>
    ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5688.html">CVE-2012-5688</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5688">SUSE bug 792926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5688">SUSE bug 792926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5688">SUSE bug 792926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5688">SUSE bug 792926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5688">SUSE bug 792926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5688">SUSE bug 792926</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5689</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5689" source="CVE"/>
    <description>
    ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5689.html">CVE-2012-5689</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5689">SUSE bug 800822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5689">SUSE bug 800822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5689">SUSE bug 800822</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5783</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5783" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5783" source="CVE"/>
    <description>
    Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5783.html">CVE-2012-5783</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5783">SUSE bug 803332</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139207" comment="apache-commons-httpclient-3.1-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151783" comment="apache-commons-httpclient is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5829</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5829" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5829.html">CVE-2012-5829</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5829">SUSE bug 790140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5829">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5830" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X allows remote attackers to execute arbitrary code via an HTML document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5830.html">CVE-2012-5830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5830">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5833</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5833" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5833" source="CVE"/>
    <description>
    The texImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via function calls involving certain values of the level parameter.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5833.html">CVE-2012-5833</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5833">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5835" source="CVE"/>
    <description>
    Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via crafted data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5835.html">CVE-2012-5835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5835">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5836" source="CVE"/>
    <description>
    Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving the setting of Cascading Style Sheets (CSS) properties in conjunction with SVG text.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5836.html">CVE-2012-5836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5836">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5837" source="CVE"/>
    <description>
    The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5837.html">CVE-2012-5837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5837">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5838</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5838" source="CVE"/>
    <description>
    The copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via large image dimensions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5838.html">CVE-2012-5838</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5838">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5839</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5839" source="CVE"/>
    <description>
    Heap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5839.html">CVE-2012-5839</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5839">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5840</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5840" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5840.html">CVE-2012-5840</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5840">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5841</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5841" source="CVE"/>
    <description>
    Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 implement cross-origin wrappers with a filtering behavior that does not properly restrict write actions, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5841.html">CVE-2012-5841</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5841">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5842</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5842" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5842.html">CVE-2012-5842</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5842">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5843</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5843" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5843.html">CVE-2012-5843</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5843">SUSE bug 790140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5958</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5958" source="CVE"/>
    <description>
    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5958.html">CVE-2012-5958</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5958">SUSE bug 801061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140157" comment="libupnp6-1.6.19-3.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154113" comment="libupnp6 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5959</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5959" source="CVE"/>
    <description>
    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that contains a :: (colon colon) in a UDP packet.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5959.html">CVE-2012-5959</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5959">SUSE bug 801061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140157" comment="libupnp6-1.6.19-3.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154113" comment="libupnp6 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5960</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5960" source="CVE"/>
    <description>
    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5960.html">CVE-2012-5960</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5960">SUSE bug 801061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140157" comment="libupnp6-1.6.19-3.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154113" comment="libupnp6 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5961</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5961" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5961" source="CVE"/>
    <description>
    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka device) field in a UDP packet.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5961.html">CVE-2012-5961</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5961">SUSE bug 801061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140157" comment="libupnp6-1.6.19-3.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154113" comment="libupnp6 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5962</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5962" source="CVE"/>
    <description>
    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn) field in a UDP packet.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5962.html">CVE-2012-5962</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5962">SUSE bug 801061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140157" comment="libupnp6-1.6.19-3.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154113" comment="libupnp6 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5963</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5963" source="CVE"/>
    <description>
    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that lacks a :: (colon colon) in a UDP packet.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5963.html">CVE-2012-5963</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5963">SUSE bug 801061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140157" comment="libupnp6-1.6.19-3.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154113" comment="libupnp6 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5964</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5964" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5964" source="CVE"/>
    <description>
    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long ServiceType (aka urn service) field in a UDP packet.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5964.html">CVE-2012-5964</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5964">SUSE bug 801061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140157" comment="libupnp6-1.6.19-3.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154113" comment="libupnp6 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20125965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-5965</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-5965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5965" source="CVE"/>
    <description>
    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn device) field in a UDP packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-5965.html">CVE-2012-5965</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-5965">SUSE bug 801061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140157" comment="libupnp6-1.6.19-3.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154113" comment="libupnp6 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6075</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-6075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6075" source="CVE"/>
    <description>
    Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-6075.html">CVE-2012-6075</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6075">SUSE bug 797523</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6093</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-6093" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6093" source="CVE"/>
    <description>
    The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-6093.html">CVE-2012-6093</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6093">SUSE bug 797006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6093">SUSE bug 802634</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6094</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-6094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6094" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-6094.html">CVE-2012-6094</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 795624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 795624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 795624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6094">SUSE bug 857372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6096</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-6096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6096" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow remote attackers to execute arbitrary code via a long (1) host_name variable (host parameter) or (2) svc_description variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-6096.html">CVE-2012-6096</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6096">SUSE bug 797237</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140244" comment="monitoring-tools-1.13.3-2.41 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151784" comment="monitoring-tools is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6128</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-6128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6128" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-6128.html">CVE-2012-6128</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6128">SUSE bug 803347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6128">SUSE bug 803347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6128">SUSE bug 803347</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140263" comment="openconnect-7.06-3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151736" comment="openconnect is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140264" comment="openconnect-devel-7.06-3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151737" comment="openconnect-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6150</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-6150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6150" source="CVE"/>
    <description>
    The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging an administrator's pam_winbind configuration-file mistake.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-6150.html">CVE-2012-6150</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6150">SUSE bug 853347</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6152</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-6152" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6152" source="CVE"/>
    <description>
    The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service (application crash) via crafted byte sequences.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-6152.html">CVE-2012-6152</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6152">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6152">SUSE bug 861019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6303</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-6303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6303" source="CVE"/>
    <description>
    Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large chunk size in a WAV file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-6303.html">CVE-2012-6303</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6303">SUSE bug 793860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6303">SUSE bug 793860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6303">SUSE bug 793860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6303">SUSE bug 793860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6303">SUSE bug 793860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6303">SUSE bug 793860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6303">SUSE bug 793860</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166941" comment="snack-2.2.10-217.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166942" comment="snack is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6702</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2012-6702" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6702" source="CVE"/>
    <description>
    Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-6702.html">CVE-2012-6702</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6702">SUSE bug 983215</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148512" comment="expat-2.1.0-19.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148513" comment="libexpat-devel-2.1.0-19.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148514" comment="libexpat-devel-32bit-2.1.0-19.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151785" comment="libexpat-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148515" comment="libexpat1-2.1.0-19.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148516" comment="libexpat1-32bit-2.1.0-19.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20126706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2012-6706</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
            <platform>openSUSE Leap 42.2 NonFree</platform>
    </affected>
    <reference ref_id="CVE-2012-6706" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6706" source="CVE"/>
    <description>
    A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the "DestPos" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2012-6706.html">CVE-2012-6706</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1051712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1051712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1051712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1051712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1051712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1051712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1051712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1051712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1053919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1083915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2012-6706">SUSE bug 1045315</bugzilla>
</advisory>
 </metadata>
  <criteria operator="OR">
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158021" comment="clamav-0.99.2-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 NonFree is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157257" comment="libunrar-devel-5.5.5-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157260" comment="libunrar-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157258" comment="libunrar5_5_5-5.5.5-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157261" comment="libunrar5_5_5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157259" comment="unrar-5.5.5-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157262" comment="unrar is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
  </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130151" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0151</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0151" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0151" source="CVE"/>
    <description>
    The do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not prevent HVM_PARAM_NESTEDHVM (aka nested virtualization) operations, which allows guest OS users to cause a denial of service (long-duration page mappings and host OS crash) by leveraging administrative access to an HVM guest in a domain with a large number of VCPUs.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0151.html">CVE-2013-0151</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0151">SUSE bug 797285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0151">SUSE bug 797285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0151">SUSE bug 797285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0151">SUSE bug 797285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0151">SUSE bug 797285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0151">SUSE bug 797285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0151">SUSE bug 797285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0151">SUSE bug 797285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0151">SUSE bug 797285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0151">SUSE bug 797285</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0152</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0152" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0152" source="CVE"/>
    <description>
    Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers errors that are not properly handled.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0152.html">CVE-2013-0152</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0152">SUSE bug 797287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0152">SUSE bug 797287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0152">SUSE bug 797287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0152">SUSE bug 797287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0152">SUSE bug 797287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0152">SUSE bug 797287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0152">SUSE bug 800798</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0153</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0153" source="CVE"/>
    <description>
    The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0153.html">CVE-2013-0153</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0153">SUSE bug 800275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0157</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0157" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0157" source="CVE"/>
    <description>
    (a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0157.html">CVE-2013-0157</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0157">SUSE bug 797002</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139778" comment="libblkid-devel-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151786" comment="libblkid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139779" comment="libblkid1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151787" comment="libblkid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139780" comment="libblkid1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151788" comment="libblkid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139781" comment="libfdisk1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154114" comment="libfdisk1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139782" comment="libmount1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151789" comment="libmount1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139783" comment="libmount1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151790" comment="libmount1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139784" comment="libsmartcols1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151791" comment="libsmartcols1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139785" comment="libuuid-devel-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151792" comment="libuuid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139786" comment="libuuid1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151793" comment="libuuid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139787" comment="libuuid1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151794" comment="libuuid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139788" comment="util-linux-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151795" comment="util-linux is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139789" comment="util-linux-lang-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151796" comment="util-linux-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139790" comment="util-linux-systemd-2.28-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151797" comment="util-linux-systemd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0160</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0160" source="CVE"/>
    <description>
    The Linux kernel through 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the inotify API on the /dev/ptmx device.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0160.html">CVE-2013-0160</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 841063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 841063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 841063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 841063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 841063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 871595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0160">SUSE bug 797175</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0166</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0166" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166" source="CVE"/>
    <description>
    OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0166.html">CVE-2013-0166</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 813366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 821818</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 833408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 833408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 833408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0166">SUSE bug 911906</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0169</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169" source="CVE"/>
    <description>
    The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0169.html">CVE-2013-0169</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 804654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 803379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 809839</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 813939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 813366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 821818</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 977584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0169">SUSE bug 1070148</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0170</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0170" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0170" source="CVE"/>
    <description>
    Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0170.html">CVE-2013-0170</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0170">SUSE bug 800976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0170">SUSE bug 800976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0170">SUSE bug 800976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0170">SUSE bug 800976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0170">SUSE bug 800976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0170">SUSE bug 800976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0170">SUSE bug 800976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0170">SUSE bug 800976</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0172</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0172" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0172" source="CVE"/>
    <description>
    Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging (1) objectClass access by a user, (2) objectClass access by a group, or (3) write access to an attribute.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0172.html">CVE-2013-0172</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0172">SUSE bug 798364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0172">SUSE bug 798364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0172">SUSE bug 798364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0176</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0176" source="CVE"/>
    <description>
    The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0176.html">CVE-2013-0176</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0176">SUSE bug 802631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0176">SUSE bug 802631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0176">SUSE bug 802631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0176">SUSE bug 928323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0176">SUSE bug 802631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0176">SUSE bug 802631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140104" comment="libssh-devel-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151771" comment="libssh-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140105" comment="libssh4-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0211</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0211" source="CVE"/>
    <description>
    Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion between unsigned and signed types, leading to a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0211.html">CVE-2013-0211</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 800024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0211">SUSE bug 979005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0213</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0213" source="CVE"/>
    <description>
    The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0213.html">CVE-2013-0213</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 800982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 800982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 800982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 800982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 800982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 800982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 800982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 800982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 800982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 800982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 800982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0213">SUSE bug 880220</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0214</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0214" source="CVE"/>
    <description>
    Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and composing requests that perform SWAT actions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0214.html">CVE-2013-0214</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 799641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0214">SUSE bug 880220</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0219</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0219" source="CVE"/>
    <description>
    System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0219.html">CVE-2013-0219</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0219">SUSE bug 801036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0219">SUSE bug 801036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0219">SUSE bug 801036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0219">SUSE bug 801036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0219">SUSE bug 801036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0219">SUSE bug 801036</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140106" comment="libsss_idmap0-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151530" comment="libsss_idmap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140107" comment="libsss_sudo-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152073" comment="libsss_sudo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140108" comment="sssd-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151531" comment="sssd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140109" comment="sssd-32bit-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151532" comment="sssd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140110" comment="sssd-krb5-common-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151533" comment="sssd-krb5-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140111" comment="sssd-ldap-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151534" comment="sssd-ldap is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0220</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0220" source="CVE"/>
    <description>
    The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2013-0220.html">CVE-2013-0220</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0220">SUSE bug 801036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0220">SUSE bug 801036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0220">SUSE bug 801036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0220">SUSE bug 801036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0220">SUSE bug 801036</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140106" comment="libsss_idmap0-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151530" comment="libsss_idmap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140107" comment="libsss_sudo-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152073" comment="libsss_sudo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140108" comment="sssd-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151531" comment="sssd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140109" comment="sssd-32bit-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151532" comment="sssd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140110" comment="sssd-krb5-common-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151533" comment="sssd-krb5-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140111" comment="sssd-ldap-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151534" comment="sssd-ldap is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0221</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0221" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0221" source="CVE"/>
    <description>
    The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch, which triggers a stack-based buffer overflow in the alloca function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0221.html">CVE-2013-0221</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0221">SUSE bug 798538</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139322" comment="coreutils-8.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151803" comment="coreutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139323" comment="coreutils-lang-8.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151804" comment="coreutils-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0222</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0222" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0222" source="CVE"/>
    <description>
    The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0222.html">CVE-2013-0222</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0222">SUSE bug 796243</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139322" comment="coreutils-8.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151803" comment="coreutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139323" comment="coreutils-lang-8.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151804" comment="coreutils-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0223</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0223" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0223" source="CVE"/>
    <description>
    The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0223.html">CVE-2013-0223</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0223">SUSE bug 798541</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139322" comment="coreutils-8.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151803" comment="coreutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139323" comment="coreutils-lang-8.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151804" comment="coreutils-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0231</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0231" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0231" source="CVE"/>
    <description>
    The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0231.html">CVE-2013-0231</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 841063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 841063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 841063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 841063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 841063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 871595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0231">SUSE bug 801178</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0240</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0240" source="CVE"/>
    <description>
    Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0240.html">CVE-2013-0240</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0240">SUSE bug 802409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0240">SUSE bug 802409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0240">SUSE bug 802409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0240">SUSE bug 808534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0240">SUSE bug 802409</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139532" comment="gnome-online-accounts-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151805" comment="gnome-online-accounts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139533" comment="gnome-online-accounts-devel-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151806" comment="gnome-online-accounts-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139534" comment="gnome-online-accounts-lang-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151807" comment="gnome-online-accounts-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139535" comment="libgoa-1_0-0-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151808" comment="libgoa-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139536" comment="libgoa-backend-1_0-1-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151809" comment="libgoa-backend-1_0-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139537" comment="typelib-1_0-Goa-1_0-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151810" comment="typelib-1_0-Goa-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0242</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242" source="CVE"/>
    <description>
    Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0242.html">CVE-2013-0242</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 848783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0242">SUSE bug 801246</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0249</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0249" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0249" source="CVE"/>
    <description>
    Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0249.html">CVE-2013-0249</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0249">SUSE bug 802411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0249">SUSE bug 802411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0249">SUSE bug 802411</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0254</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0254" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0254" source="CVE"/>
    <description>
    The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0254.html">CVE-2013-0254</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0254">SUSE bug 802634</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0255</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0255" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0255" source="CVE"/>
    <description>
    PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0255.html">CVE-2013-0255</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0255">SUSE bug 802679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0255">SUSE bug 802679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0255">SUSE bug 803057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0255">SUSE bug 802679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0255">SUSE bug 802679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0255">SUSE bug 802679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0255">SUSE bug 802679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0255">SUSE bug 802679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0255">SUSE bug 802679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0255">SUSE bug 802679</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0271</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0271" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0271" source="CVE"/>
    <description>
    The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0271.html">CVE-2013-0271</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0271">SUSE bug 804742</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0272</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0272" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0272" source="CVE"/>
    <description>
    Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0272.html">CVE-2013-0272</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0272">SUSE bug 804742</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0273</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0273" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0273" source="CVE"/>
    <description>
    sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0273.html">CVE-2013-0273</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0273">SUSE bug 804742</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0274</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0274" source="CVE"/>
    <description>
    upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging access to the local network.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0274.html">CVE-2013-0274</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0274">SUSE bug 804742</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0287</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0287" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0287" source="CVE"/>
    <description>
    The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0287.html">CVE-2013-0287</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0287">SUSE bug 809153</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0287">SUSE bug 809153</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0287">SUSE bug 809153</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0287">SUSE bug 809153</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0287">SUSE bug 809153</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0287">SUSE bug 809153</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0287">SUSE bug 809153</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140106" comment="libsss_idmap0-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151530" comment="libsss_idmap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140107" comment="libsss_sudo-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152073" comment="libsss_sudo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140108" comment="sssd-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151531" comment="sssd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140109" comment="sssd-32bit-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151532" comment="sssd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140110" comment="sssd-krb5-common-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151533" comment="sssd-krb5-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140111" comment="sssd-ldap-1.13.4-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151534" comment="sssd-ldap is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0292</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0292" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0292" source="CVE"/>
    <description>
    The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0292.html">CVE-2013-0292</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 804392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 804392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 804392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 792095</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 804392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 792095</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 804392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 804392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 804392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 804392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 804392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0292">SUSE bug 804392</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139380" comment="dbus-1-glib-0.100.2-4.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151408" comment="dbus-1-glib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139381" comment="dbus-1-glib-32bit-0.100.2-4.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151409" comment="dbus-1-glib-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139382" comment="dbus-1-glib-devel-0.100.2-4.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151410" comment="dbus-1-glib-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0338</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0338" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0338" source="CVE"/>
    <description>
    libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0338.html">CVE-2013-0338</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0338">SUSE bug 805233</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0454</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0454" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0454" source="CVE"/>
    <description>
    The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0454.html">CVE-2013-0454</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0454">SUSE bug 811975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0454">SUSE bug 811975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0454">SUSE bug 811975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0454">SUSE bug 811975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0454">SUSE bug 811975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0454">SUSE bug 811975</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0743</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0743" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0743" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA at the suggestion of the CVE project team.  The candidate had been associated with a correct report of a security problem, but not a problem that is categorized as a vulnerability within CVE.  Compromised or unauthorized SSL certificates are not within CVE's scope.  Notes: none.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0743.html">CVE-2013-0743</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0743">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0744</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0744" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0744" source="CVE"/>
    <description>
    Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an HTML document with a table containing many columns and column groups.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0744.html">CVE-2013-0744</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0744">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0745</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0745" source="CVE"/>
    <description>
    The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly interact with garbage collection, which allows remote attackers to execute arbitrary code via a crafted HTML document referencing JavaScript objects.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0745.html">CVE-2013-0745</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0745">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0746</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0746" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0746" source="CVE"/>
    <description>
    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 do not properly implement quickstubs that use the jsval data type for their return values, which allows remote attackers to execute arbitrary code or cause a denial of service (compartment mismatch and application crash) via crafted JavaScript code that is not properly handled during garbage collection.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0746.html">CVE-2013-0746</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0746">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0747</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0747" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0747" source="CVE"/>
    <description>
    The gPluginHandler.handleEvent function in the plugin handler in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly enforce the Same Origin Policy, which allows remote attackers to conduct clickjacking attacks via crafted JavaScript code that listens for a mutation event.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0747.html">CVE-2013-0747</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0747">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0748</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0748" source="CVE"/>
    <description>
    The XBL.__proto__.toString implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 makes it easier for remote attackers to bypass the ASLR protection mechanism by calling the toString function of an XBL object.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0748.html">CVE-2013-0748</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0748">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0749</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0749" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0749.html">CVE-2013-0749</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0749">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0750</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0750" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0750" source="CVE"/>
    <description>
    Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted string concatenation, leading to improper memory allocation and a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0750.html">CVE-2013-0750</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0750">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0751</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0751" source="CVE"/>
    <description>
    Mozilla Firefox before 18.0 on Android and SeaMonkey before 2.15 do not restrict a touch event to a single IFRAME element, which allows remote attackers to obtain sensitive information or possibly conduct cross-site scripting (XSS) attacks via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0751.html">CVE-2013-0751</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0751">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0752</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0752" source="CVE"/>
    <description>
    Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XBL file with multiple bindings that have SVG content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0752.html">CVE-2013-0752</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0752">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0753</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0753" source="CVE"/>
    <description>
    Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via crafted web content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0753.html">CVE-2013-0753</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0753">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0754</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0754" source="CVE"/>
    <description>
    Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors involving the triggering of garbage collection after memory allocation for listener objects.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0754.html">CVE-2013-0754</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0754">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0755</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0755" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0755" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozVibrate implementation in the Vibrate library in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via vectors related to the domDoc pointer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0755.html">CVE-2013-0755</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0755">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0756</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0756" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0756" source="CVE"/>
    <description>
    Use-after-free vulnerability in the obj_toSource function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted web page referencing JavaScript Proxy objects that are not properly handled during garbage collection.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0756.html">CVE-2013-0756</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0756">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0757</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0757" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0757" source="CVE"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not prevent modifications to the prototype of an object, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by referencing Object.prototype.__proto__ in a crafted HTML document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0757.html">CVE-2013-0757</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0757">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0758</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0758" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0758" source="CVE"/>
    <description>
    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction between plugin objects and SVG elements.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0758.html">CVE-2013-0758</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0758">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0760</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0760" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0760" source="CVE"/>
    <description>
    Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0760.html">CVE-2013-0760</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0760">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0761</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0761" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0761" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0761.html">CVE-2013-0761</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0761">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0762</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0762" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0762" source="CVE"/>
    <description>
    Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0762.html">CVE-2013-0762</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0762">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0763</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0763" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0763" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to Mesa drivers and a resized WebGL canvas.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0763.html">CVE-2013-0763</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0763">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0764</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0764" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0764" source="CVE"/>
    <description>
    The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not ensure thread safety for SSL sessions, which allows remote attackers to execute arbitrary code via crafted data, as demonstrated by e-mail message data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0764.html">CVE-2013-0764</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0764">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0765</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0765" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0765" source="CVE"/>
    <description>
    Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of WebIDL objects, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0765.html">CVE-2013-0765</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0765">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0766</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0766" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0766" source="CVE"/>
    <description>
    Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0766.html">CVE-2013-0766</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0766">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0767</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0767" source="CVE"/>
    <description>
    The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0767.html">CVE-2013-0767</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0767">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0768</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0768" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0768" source="CVE"/>
    <description>
    Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via an HTML document that specifies invalid width and height values.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0768.html">CVE-2013-0768</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0768">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0769</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0769" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0769" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0769.html">CVE-2013-0769</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0769">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130770" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0770</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0770" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0770" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0770.html">CVE-2013-0770</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0770">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0771</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0771" source="CVE"/>
    <description>
    Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0771.html">CVE-2013-0771</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0771">SUSE bug 796895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0772</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0772" source="CVE"/>
    <description>
    The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0772.html">CVE-2013-0772</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0772">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0773</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0773" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0773" source="CVE"/>
    <description>
    The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent modifications to a prototype, which allows remote attackers to obtain sensitive information from chrome objects or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0773.html">CVE-2013-0773</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0773">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0774</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0774" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0774" source="CVE"/>
    <description>
    Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 do not prevent JavaScript workers from reading the browser-profile directory name, which has unspecified impact and remote attack vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0774.html">CVE-2013-0774</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0774">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0775</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0775" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via crafted web script.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0775.html">CVE-2013-0775</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0775">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0776</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0776" source="CVE"/>
    <description>
    Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web script, as demonstrated by a phishing attack on an HTTPS site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0776.html">CVE-2013-0776</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0776">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0777</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0777" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0777" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0777.html">CVE-2013-0777</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0777">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0778</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0778" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0778" source="CVE"/>
    <description>
    The ClusterIterator::NextCluster function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0778.html">CVE-2013-0778</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0778">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0779</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0779" source="CVE"/>
    <description>
    The nsCodingStateMachine::NextState function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0779.html">CVE-2013-0779</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0779">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130780" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0780</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0780" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0780" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document that uses Cascading Style Sheets (CSS) -moz-column-* properties.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0780.html">CVE-2013-0780</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0780">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0781</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0781" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0781" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsPrintEngine::CommonPrint function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0781.html">CVE-2013-0781</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0781">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0782</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0782" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0782" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0782.html">CVE-2013-0782</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0782">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0783</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0783" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0783" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0783.html">CVE-2013-0783</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0783">SUSE bug 804248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0787</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0787" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers to execute arbitrary code via vectors involving an execCommand call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0787.html">CVE-2013-0787</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0787">SUSE bug 808243</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0788</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0788" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0788.html">CVE-2013-0788</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0788">SUSE bug 813026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0788">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0789</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0789" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0789" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0 and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsContentUtils::HoldJSObjects function and the nsAutoPtr class, and other vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0789.html">CVE-2013-0789</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0789">SUSE bug 813026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0789">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0791</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0791" source="CVE"/>
    <description>
    The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0791.html">CVE-2013-0791</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0791">SUSE bug 813026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0791">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0792</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0792" source="CVE"/>
    <description>
    Mozilla Firefox before 20.0 and SeaMonkey before 2.17, when gfx.color_management.enablev4 is used, do not properly handle color profiles during PNG rendering, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a grayscale PNG image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0792.html">CVE-2013-0792</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0792">SUSE bug 813026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0792">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0793</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0793" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0793" source="CVE"/>
    <description>
    Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do not ensure the correctness of the address bar during history navigation, which allows remote attackers to conduct cross-site scripting (XSS) attacks or phishing attacks by leveraging control over navigation timing.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0793.html">CVE-2013-0793</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0793">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0794</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0794" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0794" source="CVE"/>
    <description>
    Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows remote attackers to conduct phishing attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0794.html">CVE-2013-0794</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0794">SUSE bug 813026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0794">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0795</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0795" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0795" source="CVE"/>
    <description>
    The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for cloning a protected node, which allows remote attackers to bypass the Same Origin Policy or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0795.html">CVE-2013-0795</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0795">SUSE bug 813026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0795">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0796</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0796" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0796" source="CVE"/>
    <description>
    The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0796.html">CVE-2013-0796</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0796">SUSE bug 813026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0796">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0800</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0800" source="CVE"/>
    <description>
    Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0800.html">CVE-2013-0800</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0800">SUSE bug 813026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0800">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0801</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0801" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0801" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0801.html">CVE-2013-0801</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0801">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20130913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-0913</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-0913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0913" source="CVE"/>
    <description>
    Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-0913.html">CVE-2013-0913</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 808829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-0913">SUSE bug 871595</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1415</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1415" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1415" source="CVE"/>
    <description>
    The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 and 1.11.x before 1.11.1 does not properly handle errors during extraction of fields from an X.509 certificate, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed KRB5_PADATA_PK_AS_REQ AS-REQ request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1415.html">CVE-2013-1415</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1415">SUSE bug 806715</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1417</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1417" source="CVE"/>
    <description>
    do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service (daemon crash) via a TGS-REQ request that triggers an attempted cross-realm referral for a host-based service principal.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1417.html">CVE-2013-1417</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1417">SUSE bug 850660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1417">SUSE bug 850660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1417">SUSE bug 850660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1417">SUSE bug 850660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1417">SUSE bug 850660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1417">SUSE bug 879587</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1418</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1418" source="CVE"/>
    <description>
    The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.7, when multiple realms are configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1418.html">CVE-2013-1418</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 866059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 849240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1418">SUSE bug 879587</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1431</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1431" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1431" source="CVE"/>
    <description>
    The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verification and perform a man-in-the-middle attacks.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1431.html">CVE-2013-1431</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1431">SUSE bug 822586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1431">SUSE bug 822586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1431">SUSE bug 822586</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140371" comment="telepathy-gabble-0.18.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151566" comment="telepathy-gabble is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1442</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1442" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1442" source="CVE"/>
    <description>
    Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, which allows local guest OSes to obtain sensitive information by reading the registers.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1442.html">CVE-2013-1442</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1442">SUSE bug 839596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1442">SUSE bug 839596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1442">SUSE bug 839596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1442">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1442">SUSE bug 839596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1442">SUSE bug 839596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1442">SUSE bug 839596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1442">SUSE bug 839596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1442">SUSE bug 839596</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1445</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1445" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1445" source="CVE"/>
    <description>
    The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a child process is created and accesses the PRNG within the same rate-limit period as another process.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1445.html">CVE-2013-1445</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1445">SUSE bug 846214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1445">SUSE bug 846214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1445">SUSE bug 846214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1445">SUSE bug 846214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1445">SUSE bug 846214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1445">SUSE bug 846214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1445">SUSE bug 846214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1445">SUSE bug 846214</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140314" comment="python-pycrypto-2.6.1-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151719" comment="python-pycrypto is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140315" comment="python3-pycrypto-2.6.1-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154104" comment="python3-pycrypto is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1447</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1447" source="CVE"/>
    <description>
    OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1447.html">CVE-2013-1447</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1447">SUSE bug 853644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1447">SUSE bug 853834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1447">SUSE bug 853834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1447">SUSE bug 853834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1447">SUSE bug 853834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1447">SUSE bug 853834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1447">SUSE bug 871412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1447">SUSE bug 853834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1447">SUSE bug 853834</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1571</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571" source="CVE"/>
    <description>
    Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1571.html">CVE-2013-1571</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 824397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 824397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 825624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 828665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 829708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 829212</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 825624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 824397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 824397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 825624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 824397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1571">SUSE bug 825624</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139200" comment="ant-1.9.4-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151811" comment="ant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139201" comment="ant-jmf-1.9.4-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151812" comment="ant-jmf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139202" comment="ant-junit-1.9.4-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151813" comment="ant-junit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139203" comment="ant-scripts-1.9.4-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151814" comment="ant-scripts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139204" comment="ant-swing-1.9.4-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151815" comment="ant-swing is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1572</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1572" source="CVE"/>
    <description>
    The dissect_oampdu_event_notification function in epan/dissectors/packet-slowprotocols.c in the IEEE 802.3 Slow Protocols dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle certain short lengths, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1572.html">CVE-2013-1572</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1572">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1573</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1573" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1573" source="CVE"/>
    <description>
    The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1573.html">CVE-2013-1573</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1573">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1574</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1574" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1574" source="CVE"/>
    <description>
    The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1574.html">CVE-2013-1574</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1574">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1575</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1575" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1575" source="CVE"/>
    <description>
    The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1575.html">CVE-2013-1575</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1575">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1576</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1576" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1576" source="CVE"/>
    <description>
    The dissect_sdp_media_attribute function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly process crypto-suite parameters, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1576.html">CVE-2013-1576</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1576">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1577</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1577" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1577" source="CVE"/>
    <description>
    The dissect_sip_p_charging_func_addresses function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle offset data associated with a quoted string, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1577.html">CVE-2013-1577</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1577">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1578</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1578" source="CVE"/>
    <description>
    The dissect_pw_eth_heuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service (loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1578.html">CVE-2013-1578</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1578">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1579</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1579" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1579" source="CVE"/>
    <description>
    The rtps_util_add_bitmap function in epan/dissectors/packet-rtps.c in the RTPS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly implement certain nested loops for processing bitmap data, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1579.html">CVE-2013-1579</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1579">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131580" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1580</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1580" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1580" source="CVE"/>
    <description>
    The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1580.html">CVE-2013-1580</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1580">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1581</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1581" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1581" source="CVE"/>
    <description>
    The dissect_pft_fec_detailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service (loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1581.html">CVE-2013-1581</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1581">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131582" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1582</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1582" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1582" source="CVE"/>
    <description>
    The dissect_clnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service (infinite loop or application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1582.html">CVE-2013-1582</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1582">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1583</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1583" source="CVE"/>
    <description>
    The dissect_version_4_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1583.html">CVE-2013-1583</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1583">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1584</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1584" source="CVE"/>
    <description>
    The dissect_version_5_and_6_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1584.html">CVE-2013-1584</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1584">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1585</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1585" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1585" source="CVE"/>
    <description>
    epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly validate certain length values for the MS-MMC dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1585.html">CVE-2013-1585</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1585">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1586</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1586" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1586" source="CVE"/>
    <description>
    The fragment_set_tot_len function in epan/reassemble.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly determine the length of a reassembled packet for the DTLS dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1586.html">CVE-2013-1586</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1586">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1587</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1587" source="CVE"/>
    <description>
    The dissect_rohc_ir_packet function in epan/dissectors/packet-rohc.c in the ROHC dissector in Wireshark 1.8.x before 1.8.5 does not properly handle unknown profiles, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1587.html">CVE-2013-1587</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1587">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1588</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1588" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1588" source="CVE"/>
    <description>
    Multiple buffer overflows in the dissect_pft_fec_detailed function in the DCP-ETSI dissector in epan/dissectors/packet-dcp-etsi.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1588.html">CVE-2013-1588</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1588">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1589</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1589" source="CVE"/>
    <description>
    Double free vulnerability in epan/proto.c in the dissection engine in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1589.html">CVE-2013-1589</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1589">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1590</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1590" source="CVE"/>
    <description>
    Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1590.html">CVE-2013-1590</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1590">SUSE bug 801131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1620</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1620" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1620" source="CVE"/>
    <description>
    The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1620.html">CVE-2013-1620</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1620">SUSE bug 802184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1620">SUSE bug 802184</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1635</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1635" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1635" source="CVE"/>
    <description>
    ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1635.html">CVE-2013-1635</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1635">SUSE bug 807707</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1643</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1643" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1643" source="CVE"/>
    <description>
    The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-1824.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1643.html">CVE-2013-1643</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1643">SUSE bug 807707</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1667</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1667" source="CVE"/>
    <description>
    The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and crash) via a crafted hash key.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1667.html">CVE-2013-1667</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1667">SUSE bug 804415</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139214" comment="apache2-mod_perl-2.0.9-3.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151816" comment="apache2-mod_perl is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1669</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1669" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1669.html">CVE-2013-1669</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1669">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1670</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1670" source="CVE"/>
    <description>
    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acquisition of chrome privileges during calls to content level constructors, which allows remote attackers to bypass certain read-only restrictions and conduct cross-site scripting (XSS) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1670.html">CVE-2013-1670</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1670">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1671</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1671" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1671" source="CVE"/>
    <description>
    Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1671.html">CVE-2013-1671</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1671">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1674</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1674" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1674" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1674.html">CVE-2013-1674</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1674">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1675</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1675" source="CVE"/>
    <description>
    Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1675.html">CVE-2013-1675</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1675">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1676</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1676" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1676" source="CVE"/>
    <description>
    The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1676.html">CVE-2013-1676</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1676">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1677</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1677" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1677" source="CVE"/>
    <description>
    The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1677.html">CVE-2013-1677</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1677">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1678</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1678" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1678" source="CVE"/>
    <description>
    The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (invalid write operation) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1678.html">CVE-2013-1678</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1678">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1679</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1679" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1679.html">CVE-2013-1679</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1679">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1680</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1680" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1680" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1680.html">CVE-2013-1680</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1680">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131681" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1681</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1681" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1681" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1681.html">CVE-2013-1681</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1681">SUSE bug 819204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1682</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1682" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1682" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1682.html">CVE-2013-1682</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1682">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1683</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1683" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1683" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1683.html">CVE-2013-1683</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1683">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131684" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1684</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1684" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1684" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1684.html">CVE-2013-1684</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1684">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1685</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1685" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1685" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1685.html">CVE-2013-1685</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1685">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1686</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1686" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1686.html">CVE-2013-1686</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1686">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1687</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1687" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1687" source="CVE"/>
    <description>
    The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly restrict XBL user-defined functions, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges, or conduct cross-site scripting (XSS) attacks, via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1687.html">CVE-2013-1687</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1687">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1688</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1688" source="CVE"/>
    <description>
    The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote attackers to execute arbitrary JavaScript code via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1688.html">CVE-2013-1688</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1688">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1690</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1690" source="CVE"/>
    <description>
    Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1690.html">CVE-2013-1690</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1690">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1692</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1692" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1692" source="CVE"/>
    <description>
    Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not prevent the inclusion of body data in an XMLHttpRequest HEAD request, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1692.html">CVE-2013-1692</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1692">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1693</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1693" source="CVE"/>
    <description>
    The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1693.html">CVE-2013-1693</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1693">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1694</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1694" source="CVE"/>
    <description>
    The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1694.html">CVE-2013-1694</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1694">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1695</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1695" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1695" source="CVE"/>
    <description>
    Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1695.html">CVE-2013-1695</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1695">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1696</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1696" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1696" source="CVE"/>
    <description>
    Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1696.html">CVE-2013-1696</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1696">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1697</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1697" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1697" source="CVE"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly restrict use of DefaultValue for method calls, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers use of a user-defined (1) toString or (2) valueOf method.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1697.html">CVE-2013-1697</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1697">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1698</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1698" source="CVE"/>
    <description>
    The getUserMedia permission implementation in Mozilla Firefox before 22.0 references the URL of a top-level document instead of the URL of a specific page, which makes it easier for remote attackers to trick users into permitting camera or microphone access via a crafted web site that uses IFRAME elements.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1698.html">CVE-2013-1698</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1698">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1699</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1699" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1699" source="CVE"/>
    <description>
    The Internationalized Domain Name (IDN) display algorithm in Mozilla Firefox before 22.0 does not properly handle the .com, .name, and .net top-level domains, which allows remote attackers to spoof the address bar via unspecified homograph characters.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1699.html">CVE-2013-1699</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1699">SUSE bug 825935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1701</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1701" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1701" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1701.html">CVE-2013-1701</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1701">SUSE bug 833389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1702</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1702" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1702" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1702.html">CVE-2013-1702</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1702">SUSE bug 833389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1704</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1704" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a DOM modification at the time of a SetBody mutation event.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1704.html">CVE-2013-1704</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1704">SUSE bug 833389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1705</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1705" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1705" source="CVE"/>
    <description>
    Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Certificate Request Message Format (CRMF) request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1705.html">CVE-2013-1705</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1705">SUSE bug 840485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1705">SUSE bug 833389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1708</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1708" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1708" source="CVE"/>
    <description>
    Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (application crash) via a crafted WAV file that is not properly handled by the nsCString::CharAt function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1708.html">CVE-2013-1708</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1708">SUSE bug 833389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1709</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1709" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1709" source="CVE"/>
    <description>
    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving spoofing a relative location in a previously visited document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1709.html">CVE-2013-1709</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1709">SUSE bug 833389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1710</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1710" source="CVE"/>
    <description>
    The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1710.html">CVE-2013-1710</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1710">SUSE bug 833389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1711</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1711" source="CVE"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging access to an unprivileged object.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1711.html">CVE-2013-1711</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1711">SUSE bug 833389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1713</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1713" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1713" source="CVE"/>
    <description>
    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks or install arbitrary add-ons via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1713.html">CVE-2013-1713</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1713">SUSE bug 833389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1714</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1714" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1714" source="CVE"/>
    <description>
    The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRequest calls, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1714.html">CVE-2013-1714</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1714">SUSE bug 833389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1717</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1717" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1717" source="CVE"/>
    <description>
    Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging a download to a fixed pathname or other predictable pathname.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1717.html">CVE-2013-1717</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1717">SUSE bug 833389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1718</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1718" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1718.html">CVE-2013-1718</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1718">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1719</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1719" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1719" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1719.html">CVE-2013-1719</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1719">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1720</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1720" source="CVE"/>
    <description>
    The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 does not properly maintain the state of the insertion-mode stack for template elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer over-read) by triggering use of this stack in its empty state.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1720.html">CVE-2013-1720</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1720">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1721</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1721" source="CVE"/>
    <description>
    Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 24.0 and SeaMonkey before 2.21, allows remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1721.html">CVE-2013-1721</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1721">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1722</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1722" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving stylesheet cloning.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1722.html">CVE-2013-1722</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1722">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1723</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1723" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1723" source="CVE"/>
    <description>
    The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key messages after destruction by a dispatched event listener, which allows remote attackers to cause a denial of service (application crash) by leveraging incorrect event usage after widget-memory reallocation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1723.html">CVE-2013-1723</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1723">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1724</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1724" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1724" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a destroyed SELECT element.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1724.html">CVE-2013-1724</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1724">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1725</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1725" source="CVE"/>
    <description>
    Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not ensure that initialization occurs for JavaScript objects with compartments, which allows remote attackers to execute arbitrary code by leveraging incorrect scope handling.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1725.html">CVE-2013-1725</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1725">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1728</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1728" source="CVE"/>
    <description>
    The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when Valgrind mode is used, does not properly initialize memory, which makes it easier for remote attackers to obtain sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1728.html">CVE-2013-1728</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1728">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1730</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1730" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1730" source="CVE"/>
    <description>
    Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly handle movement of XBL-backed nodes between documents, which allows remote attackers to execute arbitrary code or cause a denial of service (JavaScript compartment mismatch, or assertion failure and application exit) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1730.html">CVE-2013-1730</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1730">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1732</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1732" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1732" source="CVE"/>
    <description>
    Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via crafted use of lists and floats within a multi-column layout.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1732.html">CVE-2013-1732</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1732">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1735</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1735" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1735" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors related to image-document scrolling.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1735.html">CVE-2013-1735</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1735">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1736</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1736" source="CVE"/>
    <description>
    The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to improperly establishing parent-child relationships of range-request nodes.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1736.html">CVE-2013-1736</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1736">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1737</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1737" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1737" source="CVE"/>
    <description>
    Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1737.html">CVE-2013-1737</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1737">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1738</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1738" source="CVE"/>
    <description>
    Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code by leveraging incorrect garbage collection in situations involving default compartments and frame-chain restoration.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1738.html">CVE-2013-1738</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1738">SUSE bug 840485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1739</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1739" source="CVE"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1739.html">CVE-2013-1739</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1739">SUSE bug 842979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1739">SUSE bug 842979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1739">SUSE bug 842979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1739">SUSE bug 842979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1739">SUSE bug 842979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1739">SUSE bug 847708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1739">SUSE bug 842979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1739">SUSE bug 842979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1739">SUSE bug 842979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1740</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1740" source="CVE"/>
    <description>
    The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1740.html">CVE-2013-1740</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1740">SUSE bug 859055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1740">SUSE bug 859055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1740">SUSE bug 859055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1740">SUSE bug 859055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1740">SUSE bug 859055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1740">SUSE bug 859055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1740">SUSE bug 859055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1752</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1752" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1752.html">CVE-2013-1752</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1752">SUSE bug 856836</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1753</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1753" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1753.html">CVE-2013-1753</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1753">SUSE bug 856835</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1775</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1775" source="CVE"/>
    <description>
    sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1775.html">CVE-2013-1775</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 815325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 815325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 815325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 815325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 815325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 815325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 845568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 854381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 806919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 854381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1775">SUSE bug 815325</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140363" comment="sudo-1.8.10p3-5.22 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1776</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1776" source="CVE"/>
    <description>
    sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal.  NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1776.html">CVE-2013-1776</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 817349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 817350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1776">SUSE bug 806921</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140363" comment="sudo-1.8.10p3-5.22 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1788</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1788" source="CVE"/>
    <description>
    poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1788.html">CVE-2013-1788</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1788">SUSE bug 806793</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1789</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1789" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1789" source="CVE"/>
    <description>
    splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1789.html">CVE-2013-1789</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1789">SUSE bug 806793</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1790</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1790" source="CVE"/>
    <description>
    poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1790.html">CVE-2013-1790</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1790">SUSE bug 806793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1790">SUSE bug 806793</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1799</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1799" source="CVE"/>
    <description>
    Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts for providers who use the libsoup library, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network.  NOTE: this issue exists because of an incomplete fix for CVE-2013-0240.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1799.html">CVE-2013-1799</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1799">SUSE bug 808534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1799">SUSE bug 808534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1799">SUSE bug 808534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1799">SUSE bug 808534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1799">SUSE bug 808534</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139532" comment="gnome-online-accounts-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151805" comment="gnome-online-accounts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139533" comment="gnome-online-accounts-devel-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151806" comment="gnome-online-accounts-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139534" comment="gnome-online-accounts-lang-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151807" comment="gnome-online-accounts-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139535" comment="libgoa-1_0-0-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151808" comment="libgoa-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139536" comment="libgoa-backend-1_0-1-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151809" comment="libgoa-backend-1_0-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139537" comment="typelib-1_0-Goa-1_0-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151810" comment="typelib-1_0-Goa-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1824</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1824" source="CVE"/>
    <description>
    The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1824.html">CVE-2013-1824</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1824">SUSE bug 807707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1824">SUSE bug 807707</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1845</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1845" source="CVE"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting or (2) deleting a large number of properties for a file or directory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1845.html">CVE-2013-1845</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1845">SUSE bug 813913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1846</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1846" source="CVE"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a LOCK on an activity URL.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1846.html">CVE-2013-1846</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1846">SUSE bug 813913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1846">SUSE bug 813913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1847</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1847" source="CVE"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an anonymous LOCK for a URL that does not exist.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1847.html">CVE-2013-1847</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1847">SUSE bug 813913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1847">SUSE bug 813913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131849" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1849</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1849" source="CVE"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a PROPFIND request for an activity URL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1849.html">CVE-2013-1849</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1849">SUSE bug 813913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1863</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1863" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1863" source="CVE"/>
    <description>
    Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1863.html">CVE-2013-1863</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1863">SUSE bug 809624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1863">SUSE bug 809624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1863">SUSE bug 809624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1863">SUSE bug 809624</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1881</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1881" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1881" source="CVE"/>
    <description>
    GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1881.html">CVE-2013-1881</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1881">SUSE bug 840753</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139473" comment="gdk-pixbuf-loader-rsvg-2.40.15-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151634" comment="gdk-pixbuf-loader-rsvg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139474" comment="librsvg-2-2-2.40.15-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151635" comment="librsvg-2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139475" comment="librsvg-devel-2.40.15-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151636" comment="librsvg-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139476" comment="typelib-1_0-Rsvg-2_0-2.40.15-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151637" comment="typelib-1_0-Rsvg-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1884</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1884" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1884" source="CVE"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an invalid limit, which triggers an access of an uninitialized variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1884.html">CVE-2013-1884</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1884">SUSE bug 813913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1896</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1896" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1896" source="CVE"/>
    <description>
    mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which the URI is configured for handling by the mod_dav_svn module, but a certain href attribute in XML data refers to a non-DAV URI.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1896.html">CVE-2013-1896</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1896">SUSE bug 829056</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1899</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1899" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899" source="CVE"/>
    <description>
    Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1899.html">CVE-2013-1899</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1899">SUSE bug 812525</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1899">SUSE bug 812525</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1900</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1900" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1900" source="CVE"/>
    <description>
    PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1900.html">CVE-2013-1900</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1900">SUSE bug 812525</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1901</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1901" source="CVE"/>
    <description>
    PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1901.html">CVE-2013-1901</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1901">SUSE bug 812525</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131914" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1914</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1914" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1914" source="CVE"/>
    <description>
    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1914.html">CVE-2013-1914</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 826666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 920055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 937231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 937231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1914">SUSE bug 813121</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131917" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1917</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1917" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1917" source="CVE"/>
    <description>
    Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by another IRET instruction.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1917.html">CVE-2013-1917</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1917">SUSE bug 813673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1917">SUSE bug 813673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1917">SUSE bug 813673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1917">SUSE bug 813673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1917">SUSE bug 813673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1917">SUSE bug 813673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1917">SUSE bug 813673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1917">SUSE bug 813673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1917">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1917">SUSE bug 813673</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131918" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1918</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1918" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1918" source="CVE"/>
    <description>
    Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1918.html">CVE-2013-1918</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 816159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 816159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 816159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 816159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 813673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 816159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 826882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 823011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 826882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 816159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 826882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 826882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 826882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 826882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 826882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1918">SUSE bug 816159</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131919" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1919</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1919" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1919" source="CVE"/>
    <description>
    Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to "passed-through IRQs or PCI devices."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1919.html">CVE-2013-1919</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1919">SUSE bug 813675</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1922</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1922" source="CVE"/>
    <description>
    qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1922.html">CVE-2013-1922</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1922">SUSE bug 814059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1922">SUSE bug 814059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1922">SUSE bug 814059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1922">SUSE bug 814059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1922">SUSE bug 814059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1922">SUSE bug 814059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1922">SUSE bug 814059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1922">SUSE bug 934753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1922">SUSE bug 934768</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1926</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1926" source="CVE"/>
    <description>
    The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1926.html">CVE-2013-1926</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1926">SUSE bug 815596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1926">SUSE bug 815596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1926">SUSE bug 815596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1926">SUSE bug 815596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1926">SUSE bug 818768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1926">SUSE bug 815596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1926">SUSE bug 815596</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139604" comment="icedtea-web-javadoc-1.6.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139605" comment="java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151625" comment="java-1_8_0-openjdk-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131927" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1927</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1927" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1927" source="CVE"/>
    <description>
    The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1927.html">CVE-2013-1927</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1927">SUSE bug 815596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1927">SUSE bug 815596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1927">SUSE bug 815596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1927">SUSE bug 815596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1927">SUSE bug 818768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1927">SUSE bug 815596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1927">SUSE bug 815596</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139604" comment="icedtea-web-javadoc-1.6.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139605" comment="java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151625" comment="java-1_8_0-openjdk-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131940" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1940</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1940" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1940" source="CVE"/>
    <description>
    X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1940.html">CVE-2013-1940</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 815870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 815870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 814653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1940">SUSE bug 815870</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140418" comment="xorg-x11-server-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140419" comment="xorg-x11-server-extra-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140420" comment="xorg-x11-server-sdk-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1944</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1944" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1944" source="CVE"/>
    <description>
    The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1944.html">CVE-2013-1944</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1944">SUSE bug 814655</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1952</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1952" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1952" source="CVE"/>
    <description>
    Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessing a bridge device's interrupt remapping table entries for MSI interrupts, which allows local guest domains to cause a denial of service (interrupt injection) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1952.html">CVE-2013-1952</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1952">SUSE bug 816163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1952">SUSE bug 816163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1952">SUSE bug 813673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1952">SUSE bug 816163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1952">SUSE bug 816163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1952">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1952">SUSE bug 816163</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1960</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1960" source="CVE"/>
    <description>
    Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1960.html">CVE-2013-1960</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1960">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1960">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1960">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1960">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1960">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1960">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1960">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1960">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1960">SUSE bug 854393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1961</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1961" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1961" source="CVE"/>
    <description>
    Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1961.html">CVE-2013-1961</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 818117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 817573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 818117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 818117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 818117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 818117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 818117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 818117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 818117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 818117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1961">SUSE bug 854393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1962</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1962" source="CVE"/>
    <description>
    The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1962.html">CVE-2013-1962</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1962">SUSE bug 820397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1962">SUSE bug 820397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1962">SUSE bug 820397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1962">SUSE bug 820397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1962">SUSE bug 820397</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131968" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1968</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1968" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1968" source="CVE"/>
    <description>
    Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1968.html">CVE-2013-1968</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1968">SUSE bug 821505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1968">SUSE bug 821505</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1969</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1969" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1969" source="CVE"/>
    <description>
    Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the (1) htmlParseChunk and (2) xmldecl_done functions, as demonstrated by a buffer overflow in the xmlBufGetInputBase function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1969.html">CVE-2013-1969</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1969">SUSE bug 815665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1969">SUSE bug 815665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1969">SUSE bug 815665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1969">SUSE bug 815665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1969">SUSE bug 815665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1969">SUSE bug 815665</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1976</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1976" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1976" source="CVE"/>
    <description>
    The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1976.html">CVE-2013-1976</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 824284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1976">SUSE bug 822177</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140375" comment="tomcat-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140376" comment="tomcat-admin-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140377" comment="tomcat-el-3_0-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140378" comment="tomcat-jsp-2_3-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140379" comment="tomcat-lib-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140380" comment="tomcat-servlet-3_1-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140381" comment="tomcat-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1981</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1981" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1981" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XQueryFont, (2) _XF86BigfontQueryFont, (3) XListFontsWithInfo, (4) XGetMotionEvents, (5) XListHosts, (6) XGetModifierMapping, (7) XGetPointerMapping, (8) XGetKeyboardMapping, (9) XGetWindowProperty, (10) XGetImage, (11) LoadColornameDB, (12) XrmGetFileDatabase, (13) _XimParseStringFile, or (14) TransFileName functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1981.html">CVE-2013-1981</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1981">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1981">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1981">SUSE bug 821664</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139704" comment="libX11-6-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139705" comment="libX11-6-32bit-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151818" comment="libX11-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139706" comment="libX11-data-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139707" comment="libX11-devel-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151820" comment="libX11-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139708" comment="libX11-xcb1-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139709" comment="libX11-xcb1-32bit-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151822" comment="libX11-xcb1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1982</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1982" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1982" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormapEntries, (2) XcupStoreColors, (3) XdbeGetVisualInfo, (4) XeviGetVisualInfo, (5) XShapeGetRectangles, and (6) XSyncListSystemCounters functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1982.html">CVE-2013-1982</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1982">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1982">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1982">SUSE bug 821665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1982">SUSE bug 821665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1982">SUSE bug 821665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1982">SUSE bug 821665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1982">SUSE bug 821665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1982">SUSE bug 821665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1982">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1982">SUSE bug 821665</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139715" comment="libXext-devel-1.3.3-4.19 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151823" comment="libXext-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139716" comment="libXext6-1.3.3-4.19 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151824" comment="libXext6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139717" comment="libXext6-32bit-1.3.3-4.19 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151825" comment="libXext6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1983</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1983" source="CVE"/>
    <description>
    Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1983.html">CVE-2013-1983</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1983">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1983">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1983">SUSE bug 821667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1983">SUSE bug 821667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1983">SUSE bug 821667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1983">SUSE bug 821667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1983">SUSE bug 821667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1983">SUSE bug 821667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1983">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1983">SUSE bug 821667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1983">SUSE bug 880221</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139718" comment="libXfixes-devel-5.0.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151826" comment="libXfixes-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139719" comment="libXfixes3-5.0.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151827" comment="libXfixes3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139720" comment="libXfixes3-32bit-5.0.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151828" comment="libXfixes3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1984</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1984" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1984.html">CVE-2013-1984</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1984">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1984">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1984">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139723" comment="libXi-devel-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151829" comment="libXi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139724" comment="libXi6-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151830" comment="libXi6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139725" comment="libXi6-32bit-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151831" comment="libXi6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1985</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1985" source="CVE"/>
    <description>
    Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XineramaQueryScreens function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1985.html">CVE-2013-1985</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1985">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1985">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1985">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139726" comment="libXinerama-devel-1.1.3-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151832" comment="libXinerama-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139727" comment="libXinerama1-1.1.3-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151833" comment="libXinerama1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139728" comment="libXinerama1-32bit-1.1.3-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151834" comment="libXinerama1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1986</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1986" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1986" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRRQueryOutputProperty and (2) XRRQueryProviderProperty functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1986.html">CVE-2013-1986</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1986">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1986">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1986">SUSE bug 821663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1986">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1986">SUSE bug 815451</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139731" comment="libXrandr-devel-1.5.0-3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151835" comment="libXrandr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139732" comment="libXrandr2-1.5.0-3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151836" comment="libXrandr2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139733" comment="libXrandr2-32bit-1.5.0-3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151837" comment="libXrandr2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1987</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1987" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1987" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRenderQueryFilters, (2) XRenderQueryFormats, and (3) XRenderQueryPictIndexValues functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1987.html">CVE-2013-1987</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1987">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1987">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1987">SUSE bug 821669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1987">SUSE bug 821669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1987">SUSE bug 821669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1987">SUSE bug 821669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1987">SUSE bug 821669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1987">SUSE bug 821669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1987">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1987">SUSE bug 821669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1987">SUSE bug 880221</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139734" comment="libXrender-devel-0.9.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151838" comment="libXrender-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139735" comment="libXrender1-0.9.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151839" comment="libXrender1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139736" comment="libXrender1-32bit-0.9.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151840" comment="libXrender1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1988</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1988" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XResQueryClients and (2) XResQueryClientResources functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1988.html">CVE-2013-1988</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1988">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1988">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1988">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139710" comment="libXRes1-1.0.7-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151841" comment="libXRes1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139711" comment="libXres-devel-1.0.7-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151842" comment="libXres-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1989</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1989" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvQueryPortAttributes, (2) XvListImageFormats, and (3) XvCreateImage function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1989.html">CVE-2013-1989</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1989">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1989">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1989">SUSE bug 821671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1989">SUSE bug 880221</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139742" comment="libXv-devel-1.0.10-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151843" comment="libXv-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139743" comment="libXv1-1.0.10-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151844" comment="libXv1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139744" comment="libXv1-32bit-1.0.10-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151845" comment="libXv1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1990</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1990" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvMCListSurfaceTypes and (2) XvMCListSubpictureTypes functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1990.html">CVE-2013-1990</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1990">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1990">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1990">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139745" comment="libXvMC-devel-1.0.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151846" comment="libXvMC-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139746" comment="libXvMC1-1.0.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151847" comment="libXvMC1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1991</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1991" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1991" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XDGAQueryModes and (2) XDGASetMode functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1991.html">CVE-2013-1991</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1991">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1991">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1991">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139750" comment="libXxf86dga-devel-1.1.4-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151848" comment="libXxf86dga-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139751" comment="libXxf86dga1-1.1.4-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151849" comment="libXxf86dga1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1992</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1992" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1992" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) DMXGetScreenAttributes, (2) DMXGetWindowAttributes, and (3) DMXGetInputAttributes functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1992.html">CVE-2013-1992</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1992">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1992">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1992">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139836" comment="libdmx-devel-1.1.3-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151850" comment="libdmx-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139837" comment="libdmx1-1.1.3-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151851" comment="libdmx1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1995</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1995" source="CVE"/>
    <description>
    X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1995.html">CVE-2013-1995</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1995">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1995">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1995">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139723" comment="libXi-devel-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151829" comment="libXi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139724" comment="libXi6-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151830" comment="libXi6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139725" comment="libXi6-32bit-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151831" comment="libXi6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1996</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1996" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1996" source="CVE"/>
    <description>
    X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1996.html">CVE-2013-1996</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1996">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1996">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1996">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139662" comment="libFS6-1.0.7-2.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151852" comment="libFS6 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1997</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1997" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1997" source="CVE"/>
    <description>
    Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XAllocColorCells, (2) _XkbReadGetDeviceInfoReply, (3) _XkbReadGeomShapes, (4) _XkbReadGetGeometryReply, (5) _XkbReadKeySyms, (6) _XkbReadKeyActions, (7) _XkbReadKeyBehaviors, (8) _XkbReadModifierMap, (9) _XkbReadExplicitComponents, (10) _XkbReadVirtualModMap, (11) _XkbReadGetNamesReply, (12) _XkbReadGetMapReply, (13) _XimXGetReadData, (14) XListFonts, (15) XListExtensions, and (16) XGetFontPath functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1997.html">CVE-2013-1997</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1997">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1997">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1997">SUSE bug 821664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1997">SUSE bug 824294</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139704" comment="libX11-6-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139705" comment="libX11-6-32bit-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151818" comment="libX11-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139706" comment="libX11-data-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139707" comment="libX11-devel-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151820" comment="libX11-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139708" comment="libX11-xcb1-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139709" comment="libX11-xcb1-32bit-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151822" comment="libX11-xcb1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131998" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1998</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1998" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1998" source="CVE"/>
    <description>
    Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1998.html">CVE-2013-1998</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1998">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1998">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1998">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139723" comment="libXi-devel-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151829" comment="libXi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139724" comment="libXi6-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151830" comment="libXi6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139725" comment="libXi6-32bit-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151831" comment="libXi6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20131999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-1999</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-1999" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1999" source="CVE"/>
    <description>
    Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvMCGetDRInfo function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-1999.html">CVE-2013-1999</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1999">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1999">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-1999">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139745" comment="libXvMC-devel-1.0.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151846" comment="libXvMC-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139746" comment="libXvMC1-1.0.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151847" comment="libXvMC1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2000</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2000" source="CVE"/>
    <description>
    Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2000.html">CVE-2013-2000</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2000">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2000">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2000">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139750" comment="libXxf86dga-devel-1.1.4-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151848" comment="libXxf86dga-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139751" comment="libXxf86dga1-1.1.4-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151849" comment="libXxf86dga1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2001</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2001" source="CVE"/>
    <description>
    Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2001.html">CVE-2013-2001</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2001">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2001">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2001">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139752" comment="libXxf86vm-devel-1.1.4-2.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151853" comment="libXxf86vm-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139753" comment="libXxf86vm1-1.1.4-2.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151854" comment="libXxf86vm1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139754" comment="libXxf86vm1-32bit-1.1.4-2.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151855" comment="libXxf86vm1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2002</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2002" source="CVE"/>
    <description>
    Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the _XtResourceConfigurationEH function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2002.html">CVE-2013-2002</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2002">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2002">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2002">SUSE bug 821670</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139737" comment="libXt-devel-1.1.5-2.19 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151856" comment="libXt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139738" comment="libXt6-1.1.5-2.19 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151857" comment="libXt6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139739" comment="libXt6-32bit-1.1.5-2.19 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151858" comment="libXt6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2003</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2003" source="CVE"/>
    <description>
    Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the _XcursorFileHeaderCreate function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2003.html">CVE-2013-2003</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2003">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2003">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2003">SUSE bug 821663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2003">SUSE bug 1065386</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139712" comment="libXcursor-devel-1.1.14-7.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151859" comment="libXcursor-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139713" comment="libXcursor1-1.1.14-7.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151860" comment="libXcursor1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139714" comment="libXcursor1-32bit-1.1.14-7.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151861" comment="libXcursor1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2004</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2004" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2004" source="CVE"/>
    <description>
    The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2004.html">CVE-2013-2004</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2004">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2004">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2004">SUSE bug 821664</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139704" comment="libX11-6-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139705" comment="libX11-6-32bit-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151818" comment="libX11-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139706" comment="libX11-data-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139707" comment="libX11-devel-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151820" comment="libX11-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139708" comment="libX11-xcb1-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139709" comment="libX11-xcb1-32bit-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151822" comment="libX11-xcb1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2005</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2005" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2005" source="CVE"/>
    <description>
    X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2005.html">CVE-2013-2005</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2005">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2005">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2005">SUSE bug 821670</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139737" comment="libXt-devel-1.1.5-2.19 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151856" comment="libXt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139738" comment="libXt6-1.1.5-2.19 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151857" comment="libXt6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139739" comment="libXt6-32bit-1.1.5-2.19 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151858" comment="libXt6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2007</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2007" source="CVE"/>
    <description>
    The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2007.html">CVE-2013-2007</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2007">SUSE bug 818183</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2062</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2062" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXp 1.0.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XpGetAttributes, (2) XpGetOneAttribute, (3) XpGetPrinterList, and (4) XpQueryScreens functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2062.html">CVE-2013-2062</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2062">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2062">SUSE bug 821668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2062">SUSE bug 821668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2062">SUSE bug 821668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2062">SUSE bug 821668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2062">SUSE bug 821668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2062">SUSE bug 821668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2062">SUSE bug 821668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2062">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2062">SUSE bug 821668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2062">SUSE bug 880221</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139729" comment="libXp-devel-1.0.3-2.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151862" comment="libXp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139730" comment="libXp6-1.0.3-2.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151863" comment="libXp6 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2063</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2063" source="CVE"/>
    <description>
    Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XRecordGetContext function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2063.html">CVE-2013-2063</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2063">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2063">SUSE bug 821663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139740" comment="libXtst-devel-1.2.2-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151864" comment="libXtst-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139741" comment="libXtst6-1.2.2-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151865" comment="libXtst6 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2064</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2064" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2064" source="CVE"/>
    <description>
    Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2064.html">CVE-2013-2064</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 821584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 821584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 821584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 821584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 821584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 821584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 821584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 821584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 821584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2064">SUSE bug 821584</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140194" comment="libxcb-composite0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151866" comment="libxcb-composite0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140195" comment="libxcb-damage0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151867" comment="libxcb-damage0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140196" comment="libxcb-devel-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151868" comment="libxcb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140197" comment="libxcb-dpms0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151869" comment="libxcb-dpms0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140198" comment="libxcb-dri2-0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151870" comment="libxcb-dri2-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140199" comment="libxcb-dri2-0-32bit-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151871" comment="libxcb-dri2-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140200" comment="libxcb-dri3-0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151872" comment="libxcb-dri3-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140201" comment="libxcb-dri3-0-32bit-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151873" comment="libxcb-dri3-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140202" comment="libxcb-glx0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151874" comment="libxcb-glx0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140203" comment="libxcb-glx0-32bit-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151875" comment="libxcb-glx0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140204" comment="libxcb-present0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151876" comment="libxcb-present0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140205" comment="libxcb-present0-32bit-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151877" comment="libxcb-present0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140206" comment="libxcb-randr0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151878" comment="libxcb-randr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140207" comment="libxcb-record0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151879" comment="libxcb-record0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140208" comment="libxcb-render0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151880" comment="libxcb-render0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140209" comment="libxcb-render0-32bit-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151881" comment="libxcb-render0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140210" comment="libxcb-res0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151882" comment="libxcb-res0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140211" comment="libxcb-screensaver0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151883" comment="libxcb-screensaver0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140212" comment="libxcb-shape0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151884" comment="libxcb-shape0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140213" comment="libxcb-shm0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151885" comment="libxcb-shm0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140214" comment="libxcb-shm0-32bit-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151886" comment="libxcb-shm0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140215" comment="libxcb-sync1-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151887" comment="libxcb-sync1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140216" comment="libxcb-sync1-32bit-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151888" comment="libxcb-sync1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140217" comment="libxcb-xevie0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151889" comment="libxcb-xevie0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140218" comment="libxcb-xf86dri0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151890" comment="libxcb-xf86dri0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140219" comment="libxcb-xfixes0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151891" comment="libxcb-xfixes0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140220" comment="libxcb-xfixes0-32bit-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151892" comment="libxcb-xfixes0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140221" comment="libxcb-xinerama0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151893" comment="libxcb-xinerama0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140222" comment="libxcb-xkb1-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151894" comment="libxcb-xkb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140223" comment="libxcb-xprint0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151895" comment="libxcb-xprint0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140224" comment="libxcb-xtest0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151896" comment="libxcb-xtest0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140225" comment="libxcb-xv0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151897" comment="libxcb-xv0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140226" comment="libxcb-xvmc0-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151898" comment="libxcb-xvmc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140227" comment="libxcb1-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151899" comment="libxcb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140228" comment="libxcb1-32bit-1.11.1-2.25 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151900" comment="libxcb1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2066</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2066" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2066" source="CVE"/>
    <description>
    Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2066.html">CVE-2013-2066</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2066">SUSE bug 815451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2066">SUSE bug 821671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2066">SUSE bug 880221</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139742" comment="libXv-devel-1.0.10-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151843" comment="libXv-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139743" comment="libXv1-1.0.10-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151844" comment="libXv1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139744" comment="libXv1-32bit-1.0.10-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151845" comment="libXv1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2088</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2088" source="CVE"/>
    <description>
    contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2088.html">CVE-2013-2088</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2088">SUSE bug 821505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2088">SUSE bug 821505</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2112</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2112" source="CVE"/>
    <description>
    The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service (exit) by aborting a connection.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2112.html">CVE-2013-2112</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2112">SUSE bug 821505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2112">SUSE bug 821505</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2126</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2126" source="CVE"/>
    <description>
    Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2126.html">CVE-2013-2126</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 823113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 823114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 823114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 823114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 823114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 823113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 823114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 823113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 823113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 823113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2126">SUSE bug 822665</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140032" comment="libraw-devel-0.17.1-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151901" comment="libraw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140033" comment="libraw15-0.17.1-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154115" comment="libraw15 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2127</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2127" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2127" source="CVE"/>
    <description>
    Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2127.html">CVE-2013-2127</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2127">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2127">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2127">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2127">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2127">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2127">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2127">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2127">SUSE bug 822665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2127">SUSE bug 822665</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140032" comment="libraw-devel-0.17.1-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151901" comment="libraw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140033" comment="libraw15-0.17.1-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154115" comment="libraw15 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2139</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2139" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2139" source="CVE"/>
    <description>
    Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2139.html">CVE-2013-2139</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2139">SUSE bug 828009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2139">SUSE bug 828009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2139">SUSE bug 828009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2139">SUSE bug 828009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2139">SUSE bug 828009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2139">SUSE bug 828009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2139">SUSE bug 828009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2139">SUSE bug 828009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2139">SUSE bug 828009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140103" comment="libsrtp1-1.5.4-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153037" comment="libsrtp1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2142" source="CVE"/>
    <description>
    userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2142.html">CVE-2013-2142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2142">SUSE bug 823250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2142">SUSE bug 823250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2142">SUSE bug 823250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2142">SUSE bug 823250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2142">SUSE bug 823250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2142">SUSE bug 823250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2142">SUSE bug 823250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2142">SUSE bug 823250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2142">SUSE bug 823250</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139879" comment="libimobiledevice-devel-1.2.0-6.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151903" comment="libimobiledevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139880" comment="libimobiledevice6-1.2.0-6.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151904" comment="libimobiledevice6 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2168</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2168" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2168" source="CVE"/>
    <description>
    The _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service (service crash) via a crafted message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2168.html">CVE-2013-2168</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2168">SUSE bug 824607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2168">SUSE bug 824607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2168">SUSE bug 824607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2168">SUSE bug 824607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2168">SUSE bug 824607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2168">SUSE bug 824607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2168">SUSE bug 824607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2168">SUSE bug 824607</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2174</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2174" source="CVE"/>
    <description>
    Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2174.html">CVE-2013-2174</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 824517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 824517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 824517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 824517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 824517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 824517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 824517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 824517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 824517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 824517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 917692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2174">SUSE bug 824517</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2186</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2186" source="CVE"/>
    <description>
    The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2186.html">CVE-2013-2186</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2186">SUSE bug 846174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2186">SUSE bug 846174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2186">SUSE bug 846174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2186">SUSE bug 846174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2186">SUSE bug 846174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2186">SUSE bug 846174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2186">SUSE bug 846174</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139610" comment="jakarta-commons-fileupload-1.1.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151905" comment="jakarta-commons-fileupload is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2207</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2207" source="CVE"/>
    <description>
    pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2207.html">CVE-2013-2207</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2207">SUSE bug 830257</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2214</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2214" source="CVE"/>
    <description>
    status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup (1) overview, (2) summary, or (3) grid style in status.cgi.  NOTE: this behavior is by design in most 3.x versions, but the upstream vendor "decided to change it for Nagios 4" and 3.5.1.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2214.html">CVE-2013-2214</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2214">SUSE bug 827020</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140250" comment="nagios-3.5.1-2.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151576" comment="nagios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140251" comment="nagios-www-3.5.1-2.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151577" comment="nagios-www is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2218</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2218" source="CVE"/>
    <description>
    Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service (libvirtd crash) via a filtering flag that causes an interface to be skipped, as demonstrated by the "virsh iface-list --inactive" command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2218.html">CVE-2013-2218</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2218">SUSE bug 827741</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132230" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2230</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2230" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2230" source="CVE"/>
    <description>
    The qemu driver (qemu/qemu_driver.c) in libvirt before 1.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via unspecified vectors involving "multiple events registration."
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2230.html">CVE-2013-2230</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2230">SUSE bug 827801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2230">SUSE bug 827801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2230">SUSE bug 827801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2230">SUSE bug 827801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2230">SUSE bug 827801</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2236</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2236" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2236" source="CVE"/>
    <description>
    Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2236.html">CVE-2013-2236</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2236">SUSE bug 828117</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140348" comment="quagga-0.99.24.1-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151418" comment="quagga is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2249</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2249" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2249" source="CVE"/>
    <description>
    mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2249.html">CVE-2013-2249</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2249">SUSE bug 831113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2249">SUSE bug 831113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2249">SUSE bug 831113</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2266</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2266" source="CVE"/>
    <description>
    libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2266.html">CVE-2013-2266</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2266">SUSE bug 811934</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2475</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2475" source="CVE"/>
    <description>
    The TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2475.html">CVE-2013-2475</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2475">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2476</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2476" source="CVE"/>
    <description>
    The dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a packet with a header that is too short.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2476.html">CVE-2013-2476</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2476">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2477</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2477" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2477" source="CVE"/>
    <description>
    The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2477.html">CVE-2013-2477</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2477">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2478</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2478" source="CVE"/>
    <description>
    The dissect_server_info function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service (application crash) via a malformed packet that (1) triggers an integer overflow or (2) has embedded '\0' characters in a string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2478.html">CVE-2013-2478</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2478">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2479</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2479" source="CVE"/>
    <description>
    The dissect_mpls_echo_tlv_dd_map function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via invalid Sub-tlv data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2479.html">CVE-2013-2479</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2479">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2480</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2480" source="CVE"/>
    <description>
    The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2480.html">CVE-2013-2480</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2480">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2481</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2481" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2481" source="CVE"/>
    <description>
    Integer signedness error in the dissect_mount_dirpath_call function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfs_file_name_snooping is enabled, allows remote attackers to cause a denial of service (application crash) via a negative length value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2481.html">CVE-2013-2481</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2481">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2482</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2482" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2482" source="CVE"/>
    <description>
    The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2482.html">CVE-2013-2482</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2482">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2483" source="CVE"/>
    <description>
    The acn_add_dmp_data function in epan/dissectors/packet-acn.c in the ACN dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via an invalid count value in ACN_DMP_ADT_D_RE DMP data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2483.html">CVE-2013-2483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2483">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2484</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2484" source="CVE"/>
    <description>
    The CIMD dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2484.html">CVE-2013-2484</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2484">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2485</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2485" source="CVE"/>
    <description>
    The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2485.html">CVE-2013-2485</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2485">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2486</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2486" source="CVE"/>
    <description>
    The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2486.html">CVE-2013-2486</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2486">SUSE bug 807942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2486">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2486">SUSE bug 820973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2486">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2486">SUSE bug 820973</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2487</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2487" source="CVE"/>
    <description>
    epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet, related to the (1) dissect_icecandidates, (2) dissect_kinddata, (3) dissect_nodeid_list, (4) dissect_storeans, (5) dissect_storereq, (6) dissect_storeddataspecifier, (7) dissect_fetchreq, (8) dissect_findans, (9) dissect_diagnosticinfo, (10) dissect_diagnosticresponse, (11) dissect_reload_messagecontents, and (12) dissect_reload_message functions, a different vulnerability than CVE-2013-2486.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2487.html">CVE-2013-2487</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2487">SUSE bug 807942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2487">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2487">SUSE bug 820973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2487">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2487">SUSE bug 820973</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2488</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2488" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2488" source="CVE"/>
    <description>
    The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service (application crash) via a large offset value that triggers write access to an invalid memory location.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2488.html">CVE-2013-2488</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2488">SUSE bug 807942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2492</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2492" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2492" source="CVE"/>
    <description>
    Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related to a missing size check during extraction of a group number from CNCT information.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2492.html">CVE-2013-2492</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2492">SUSE bug 808268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2492">SUSE bug 808268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2492">SUSE bug 808268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2492">SUSE bug 808268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2492">SUSE bug 808268</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139849" comment="libfbembed2_5-2.5.6.27020-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151907" comment="libfbembed2_5 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20132850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-2850</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-2850" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2850" source="CVE"/>
    <description>
    Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service (memory corruption and OOPS) or possibly execute arbitrary code via a long key that is not properly handled during construction of an error-response packet.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-2850.html">CVE-2013-2850</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-2850">SUSE bug 821560</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3495</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-3495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3495" source="CVE"/>
    <description>
    The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-3495.html">CVE-2013-3495</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3495">SUSE bug 826717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3495">SUSE bug 826717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3495">SUSE bug 826717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3495">SUSE bug 826717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3495">SUSE bug 826717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3495">SUSE bug 826717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3495">SUSE bug 903970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3495">SUSE bug 826717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3495">SUSE bug 826717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3495">SUSE bug 826717</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3555</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3555" source="CVE"/>
    <description>
    epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls incorrect functions in certain contexts related to ciphers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-3555.html">CVE-2013-3555</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3555">SUSE bug 820973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3555">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3555">SUSE bug 820973</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3556</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3556" source="CVE"/>
    <description>
    The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-3556.html">CVE-2013-3556</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3556">SUSE bug 820973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3556">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3556">SUSE bug 820973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3556">SUSE bug 820973</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133557" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3557</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-3557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3557" source="CVE"/>
    <description>
    The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x before 1.8.7 does not properly initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-3557.html">CVE-2013-3557</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3557">SUSE bug 820973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3557">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3557">SUSE bug 820973</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3558</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-3558" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3558" source="CVE"/>
    <description>
    The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-3558.html">CVE-2013-3558</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3558">SUSE bug 820973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3558">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3558">SUSE bug 820973</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3559</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-3559" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3559" source="CVE"/>
    <description>
    epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer dereference, and application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-3559.html">CVE-2013-3559</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3559">SUSE bug 820973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3559">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3559">SUSE bug 820973</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3560</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3560" source="CVE"/>
    <description>
    The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-3560.html">CVE-2013-3560</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3560">SUSE bug 820973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3560">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3560">SUSE bug 820973</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3561</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-3561" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3561" source="CVE"/>
    <description>
    Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-3561.html">CVE-2013-3561</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3561">SUSE bug 820973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3561">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3561">SUSE bug 820973</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20133562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-3562</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-3562" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3562" source="CVE"/>
    <description>
    Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-3562.html">CVE-2013-3562</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3562">SUSE bug 820973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3562">SUSE bug 820566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-3562">SUSE bug 820973</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4083</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4083" source="CVE"/>
    <description>
    The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4083.html">CVE-2013-4083</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4083">SUSE bug 824900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4083">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4113</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4113" source="CVE"/>
    <description>
    ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted document that is processed by the xml_parse_into_struct function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4113.html">CVE-2013-4113</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4113">SUSE bug 829207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4113">SUSE bug 829207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4113">SUSE bug 829207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4113">SUSE bug 829207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4113">SUSE bug 829207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4113">SUSE bug 829207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4113">SUSE bug 829207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4113">SUSE bug 829207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4113">SUSE bug 829207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4113">SUSE bug 829207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4113">SUSE bug 829207</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4124</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4124" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4124" source="CVE"/>
    <description>
    Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4124.html">CVE-2013-4124</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4124">SUSE bug 829969</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4131</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4131" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4131" source="CVE"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4131.html">CVE-2013-4131</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4131">SUSE bug 830031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4131">SUSE bug 830031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4131">SUSE bug 830031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4131">SUSE bug 830031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4131">SUSE bug 830031</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4143" source="CVE"/>
    <description>
    The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to invalid salts.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4143.html">CVE-2013-4143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4143">SUSE bug 829859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4143">SUSE bug 829859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4143">SUSE bug 829859</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140413" comment="xlockmore-5.43-8.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151912" comment="xlockmore is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4148</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4148" source="CVE"/>
    <description>
    Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4148.html">CVE-2013-4148</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4148">SUSE bug 864812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4148">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4148">SUSE bug 864812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4148">SUSE bug 864812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4148">SUSE bug 864812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4148">SUSE bug 864812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4148">SUSE bug 864812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4148">SUSE bug 864812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4148">SUSE bug 864812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4148">SUSE bug 964630</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4148">SUSE bug 964630</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134149" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4149</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4149" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4149" source="CVE"/>
    <description>
    Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow remote attackers to execute arbitrary code via a large MAC table.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4149.html">CVE-2013-4149</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 964443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 864649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4149">SUSE bug 964443</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4150</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4150" source="CVE"/>
    <description>
    The virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors in which the value of curr_queues is greater than max_queues, which triggers an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4150.html">CVE-2013-4150</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4150">SUSE bug 864650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4150">SUSE bug 864650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4150">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4150">SUSE bug 864650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4150">SUSE bug 864650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4150">SUSE bug 864650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4150">SUSE bug 864650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4150">SUSE bug 864650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4150">SUSE bug 864650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4150">SUSE bug 864650</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134151" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4151</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4151" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4151" source="CVE"/>
    <description>
    The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4151.html">CVE-2013-4151</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 864653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 864653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 864653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 864653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 864653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 864653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 864653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 864653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 864653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 864653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 864653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 964636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4151">SUSE bug 964636</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4153</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4153" source="CVE"/>
    <description>
    Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6 through 1.1.0 allows remote attackers to cause a denial of service (daemon crash) via a cpu count request, as demonstrated by the "virsh vcpucount dom --guest" command.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4153.html">CVE-2013-4153</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4153">SUSE bug 830497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4153">SUSE bug 830498</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4153">SUSE bug 830497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4153">SUSE bug 830497</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4154</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4154" source="CVE"/>
    <description>
    The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to "agent based cpu (un)plug," as demonstrated by the "virsh vcpucount foobar --guest" command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4154.html">CVE-2013-4154</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4154">SUSE bug 830498</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4154">SUSE bug 830498</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4154">SUSE bug 830498</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4231</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4231" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4231" source="CVE"/>
    <description>
    Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c.  NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4231.html">CVE-2013-4231</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4231">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4231">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4231">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4231">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4231">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4231">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4231">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4231">SUSE bug 854393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4231">SUSE bug 834477</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4232</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4232" source="CVE"/>
    <description>
    Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4232.html">CVE-2013-4232</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4232">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4232">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4232">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4232">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4232">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4232">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4232">SUSE bug 834477</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4232">SUSE bug 854393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4232">SUSE bug 834477</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4233</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4233" source="CVE"/>
    <description>
    Integer overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4233.html">CVE-2013-4233</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 1022032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4233">SUSE bug 834483</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139937" comment="libmodplug1-0.8.8.5-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151586" comment="libmodplug1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4234</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4234" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4234" source="CVE"/>
    <description>
    Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted ABC.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4234.html">CVE-2013-4234</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 834483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 1022032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4234">SUSE bug 834483</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139937" comment="libmodplug1-0.8.8.5-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151586" comment="libmodplug1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4237</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237" source="CVE"/>
    <description>
    sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted (1) NTFS or (2) CIFS image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4237.html">CVE-2013-4237</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 834594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4237">SUSE bug 920055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4238</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="CVE"/>
    <description>
    The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4238.html">CVE-2013-4238</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4238">SUSE bug 834601</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140306" comment="python-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140307" comment="python-curses-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151914" comment="python-curses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140308" comment="python-gdbm-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151915" comment="python-gdbm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140317" comment="python3-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140318" comment="python3-curses-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140319" comment="python3-dbm-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140320" comment="python3-tk-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151919" comment="python3-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4239</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4239" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4239" source="CVE"/>
    <description>
    The xenDaemonListDefinedDomains function in xen/xend_internal.c in libvirt 1.1.1 allows remote authenticated users to cause a denial of service (memory corruption and crash) via vectors involving the virConnectListDefinedDomains API function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4239.html">CVE-2013-4239</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4239">SUSE bug 834598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4239">SUSE bug 834598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4239">SUSE bug 834598</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4242</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4242" source="CVE"/>
    <description>
    GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4242.html">CVE-2013-4242</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4242">SUSE bug 831359</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139859" comment="libgcrypt-devel-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151920" comment="libgcrypt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139860" comment="libgcrypt20-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139861" comment="libgcrypt20-32bit-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4243</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4243" source="CVE"/>
    <description>
    Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4243.html">CVE-2013-4243</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4243">SUSE bug 834779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4243">SUSE bug 834779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4243">SUSE bug 834779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4243">SUSE bug 834779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4243">SUSE bug 834779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4243">SUSE bug 834779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4243">SUSE bug 834779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4243">SUSE bug 834779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4243">SUSE bug 834779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4243">SUSE bug 854393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4244</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4244" source="CVE"/>
    <description>
    The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4244.html">CVE-2013-4244</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4244">SUSE bug 834788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4244">SUSE bug 834788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4244">SUSE bug 834788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4244">SUSE bug 834788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4244">SUSE bug 834788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4244">SUSE bug 834788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4244">SUSE bug 854393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4244">SUSE bug 834788</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4246</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4246" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4246" source="CVE"/>
    <description>
    libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4246.html">CVE-2013-4246</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4246">SUSE bug 836245</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4248</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="CVE"/>
    <description>
    The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4248.html">CVE-2013-4248</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4248">SUSE bug 837746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4262</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4262" source="CVE"/>
    <description>
    svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink attack on the pid file.  NOTE: this issue was SPLIT due to different affected versions (ADT3). The irkerbridge.py issue is covered by CVE-2013-7393.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4262.html">CVE-2013-4262</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4262">SUSE bug 844201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4262">SUSE bug 844201</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134276" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4276</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4276" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4276" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4276.html">CVE-2013-4276</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4276">SUSE bug 843716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4276">SUSE bug 843716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4276">SUSE bug 843716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4276">SUSE bug 843716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4276">SUSE bug 843716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4276">SUSE bug 843716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4276">SUSE bug 843716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4276">SUSE bug 843716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4276">SUSE bug 843716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4276">SUSE bug 843716</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139910" comment="liblcms-devel-1.19-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151219" comment="liblcms-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139911" comment="liblcms1-1.19-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151220" comment="liblcms1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139912" comment="liblcms1-32bit-1.19-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151221" comment="liblcms1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139913" comment="python-lcms-1.19-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151222" comment="python-lcms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4277</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4277" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4277" source="CVE"/>
    <description>
    Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a symlink attack on the file specified by the --pid-file option.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4277.html">CVE-2013-4277</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4277">SUSE bug 836245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4277">SUSE bug 836245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4277">SUSE bug 836245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4277">SUSE bug 836245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4277">SUSE bug 836245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4277">SUSE bug 836245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4277">SUSE bug 836245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4277">SUSE bug 836245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4277">SUSE bug 836245</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4282</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4282" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4282" source="CVE"/>
    <description>
    Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4282.html">CVE-2013-4282</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4282">SUSE bug 848279</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140097" comment="libspice-server1-0.12.7-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4288</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4288" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4288" source="CVE"/>
    <description>
    Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4288.html">CVE-2013-4288</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 835827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 836932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 835827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 835827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 844967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 835827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 836932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 836939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 854144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 864716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4288">SUSE bug 864716</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139970" comment="libpolkit0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140121" comment="libsystemd0-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140122" comment="libsystemd0-32bit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140123" comment="libudev-devel-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151690" comment="libudev-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140124" comment="libudev1-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140125" comment="libudev1-32bit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139971" comment="polkit-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139972" comment="polkit-devel-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151395" comment="polkit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140126" comment="systemd-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140127" comment="systemd-32bit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140128" comment="systemd-bash-completion-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151695" comment="systemd-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140129" comment="systemd-logger-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151696" comment="systemd-logger is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140130" comment="systemd-sysvinit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139973" comment="typelib-1_0-Polkit-1_0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140131" comment="udev-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4289</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4289" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4289" source="CVE"/>
    <description>
    Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4289.html">CVE-2013-4289</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4289">SUSE bug 839879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4289">SUSE bug 839879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4289">SUSE bug 839879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4289">SUSE bug 839879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4289">SUSE bug 839879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4289">SUSE bug 839879</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4290</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4290" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4290" source="CVE"/>
    <description>
    Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4290.html">CVE-2013-4290</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4290">SUSE bug 839879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4290">SUSE bug 839879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4290">SUSE bug 839879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4290">SUSE bug 839879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4290">SUSE bug 839879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4290">SUSE bug 839879</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4296</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4296" source="CVE"/>
    <description>
    The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via a crafted RPC call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4296.html">CVE-2013-4296</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4296">SUSE bug 838638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4296">SUSE bug 838638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4296">SUSE bug 838638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4296">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4296">SUSE bug 838638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4296">SUSE bug 838638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4296">SUSE bug 838638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4296">SUSE bug 838638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4296">SUSE bug 838638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4296">SUSE bug 838638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4296">SUSE bug 838638</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4297</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4297" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4297" source="CVE"/>
    <description>
    The virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4297.html">CVE-2013-4297</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4297">SUSE bug 838642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4297">SUSE bug 838642</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4311</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4311" source="CVE"/>
    <description>
    libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition in pkcheck via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4311.html">CVE-2013-4311</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4311">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4311">SUSE bug 838638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4311">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4311">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4311">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4311">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4311">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4311">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4311">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4311">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4311">SUSE bug 864716</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4312</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4312" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4312" source="CVE"/>
    <description>
    The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af_unix.c and net/unix/garbage.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4312.html">CVE-2013-4312</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 968014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 968014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 922947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4312">SUSE bug 839104</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4314</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4314" source="CVE"/>
    <description>
    The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4314.html">CVE-2013-4314</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4314">SUSE bug 839107</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140313" comment="python-pyOpenSSL-16.0.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151924" comment="python-pyOpenSSL is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4325</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4325" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4325" source="CVE"/>
    <description>
    The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4325.html">CVE-2013-4325</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 808355</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4325">SUSE bug 864716</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139597" comment="hplip-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151009" comment="hplip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139598" comment="hplip-hpijs-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151010" comment="hplip-hpijs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139599" comment="hplip-sane-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151011" comment="hplip-sane is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134326" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4326</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4326" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4326" source="CVE"/>
    <description>
    RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4326.html">CVE-2013-4326</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4326">SUSE bug 836939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4326">SUSE bug 836939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4326">SUSE bug 836931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4326">SUSE bug 836932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4326">SUSE bug 836937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4326">SUSE bug 836939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4326">SUSE bug 864716</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140352" comment="rtkit-0.11_git201205151338-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151925" comment="rtkit is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4332</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4332" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332" source="CVE"/>
    <description>
    Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvalloc, (2) valloc, (3) posix_memalign, (4) memalign, or (5) aligned_alloc functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4332.html">CVE-2013-4332</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4332">SUSE bug 839870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4332">SUSE bug 839870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4332">SUSE bug 839870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4332">SUSE bug 839870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4332">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4332">SUSE bug 882910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4332">SUSE bug 839870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4332">SUSE bug 839870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4332">SUSE bug 839870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4332">SUSE bug 839870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4332">SUSE bug 839870</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4342</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4342" source="CVE"/>
    <description>
    xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4342.html">CVE-2013-4342</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 855685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 882917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 882917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 882917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 882917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 882917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 882917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4342">SUSE bug 844230</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140412" comment="xinetd-2.3.15-9.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151685" comment="xinetd is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4349</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4349" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4349" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-4540.  Reason: This candidate was MERGED into CVE-2012-4540, since it was later discovered that it affected an additional version, but it does not constitute a regression error.  Notes: All CVE users should reference CVE-2012-4540 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4349.html">CVE-2013-4349</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4349">SUSE bug 840572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4349">SUSE bug 840572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4349">SUSE bug 840572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4349">SUSE bug 840572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4349">SUSE bug 840572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4349">SUSE bug 840572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4349">SUSE bug 840572</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139604" comment="icedtea-web-javadoc-1.6.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139605" comment="java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151625" comment="java-1_8_0-openjdk-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4351</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4351" source="CVE"/>
    <description>
    GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4351.html">CVE-2013-4351</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4351">SUSE bug 840510</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139564" comment="gpg2-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139565" comment="gpg2-lang-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4353</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4353" source="CVE"/>
    <description>
    The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4353.html">CVE-2013-4353</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4353">SUSE bug 857640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4353">SUSE bug 857640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4353">SUSE bug 857640</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4355</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4355" source="CVE"/>
    <description>
    Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4355.html">CVE-2013-4355</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4355">SUSE bug 840592</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4356</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4356" source="CVE"/>
    <description>
    Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4356.html">CVE-2013-4356</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4356">SUSE bug 840593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4356">SUSE bug 840593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4356">SUSE bug 840593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4356">SUSE bug 840593</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134361" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4361</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4361" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4361" source="CVE"/>
    <description>
    The fbld instruction emulation in Xen 3.3.x through 4.3.x does not use the correct variable for the source effective address, which allows local HVM guests to obtain hypervisor stack information by reading the values used by the instruction.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4361.html">CVE-2013-4361</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 841766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 841766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 841766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 841766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 841766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 841766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 841766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 841766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 841766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 841766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4361">SUSE bug 841766</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4375</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4375" source="CVE"/>
    <description>
    The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service (domain grant reference consumption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4375.html">CVE-2013-4375</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4375">SUSE bug 842515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4375">SUSE bug 842515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4375">SUSE bug 842515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4375">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4375">SUSE bug 842515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4375">SUSE bug 842515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4375">SUSE bug 842515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4375">SUSE bug 842515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4375">SUSE bug 842515</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4396</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4396" source="CVE"/>
    <description>
    Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4396.html">CVE-2013-4396</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4396">SUSE bug 843652</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140418" comment="xorg-x11-server-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140419" comment="xorg-x11-server-extra-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140420" comment="xorg-x11-server-sdk-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4399</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4399" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4399" source="CVE"/>
    <description>
    The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service (use-after-free and crash) by registering an event handler and then closing the connection.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4399.html">CVE-2013-4399</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4399">SUSE bug 844052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4399">SUSE bug 844052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4399">SUSE bug 842300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4399">SUSE bug 844052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4399">SUSE bug 844052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4399">SUSE bug 844052</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4400</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4400" source="CVE"/>
    <description>
    virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4400.html">CVE-2013-4400</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4400">SUSE bug 837609</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4401</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4401" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4401" source="CVE"/>
    <description>
    The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers to gain domain:write privileges and execute Qemu binaries via crafted XML.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4401.html">CVE-2013-4401</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4401">SUSE bug 845704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4401">SUSE bug 845704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4401">SUSE bug 845704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4401">SUSE bug 845704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4401">SUSE bug 845704</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4402</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4402" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4402" source="CVE"/>
    <description>
    The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4402.html">CVE-2013-4402</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 844175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 941439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 941439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 941439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 941439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 941439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4402">SUSE bug 941439</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139564" comment="gpg2-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139565" comment="gpg2-lang-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4408</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4408" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4408" source="CVE"/>
    <description>
    Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4408.html">CVE-2013-4408</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 882906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4408">SUSE bug 844720</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4416</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4416" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4416" source="CVE"/>
    <description>
    The Ocaml xenstored implementation (oxenstored) in Xen 4.1.x, 4.2.x, and 4.3.x allows local guest domains to cause a denial of service (domain shutdown) via a large message reply.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4416.html">CVE-2013-4416</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 840592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4416">SUSE bug 845520</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4440</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4440" source="CVE"/>
    <description>
    Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4440.html">CVE-2013-4440</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4440">SUSE bug 846397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4440">SUSE bug 846397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4440">SUSE bug 846397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4440">SUSE bug 846397</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140305" comment="pwgen-2.07-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151926" comment="pwgen is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4442</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4442" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4442" source="CVE"/>
    <description>
    Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4442.html">CVE-2013-4442</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4442">SUSE bug 846397</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140305" comment="pwgen-2.07-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151926" comment="pwgen is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4458</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4458" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4458" source="CVE"/>
    <description>
    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4458.html">CVE-2013-4458</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 883217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 955181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 955181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 955181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 955181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 955181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 955181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 955181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 980483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 941444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 955181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4458">SUSE bug 847227</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4473</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4473" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4473" source="CVE"/>
    <description>
    Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4473.html">CVE-2013-4473</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4473">SUSE bug 847907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4473">SUSE bug 847907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4473">SUSE bug 847907</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4474</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4474" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4474" source="CVE"/>
    <description>
    Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4474.html">CVE-2013-4474</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4474">SUSE bug 847907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4474">SUSE bug 847907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4474">SUSE bug 847907</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139974" comment="libpoppler-cpp0-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139975" comment="libpoppler-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139976" comment="libpoppler-glib8-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139977" comment="libpoppler-qt4-4-0.43.0-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139978" comment="libpoppler-qt5-1-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139979" comment="libpoppler-qt5-devel-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139980" comment="libpoppler60-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139981" comment="poppler-tools-0.43.0-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4475</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4475" source="CVE"/>
    <description>
    Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4475.html">CVE-2013-4475</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 880220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4475">SUSE bug 848101</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4476</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4476" source="CVE"/>
    <description>
    Samba 4.0.x before 4.0.11 and 4.1.x before 4.1.1, when LDAP or HTTP is provided over SSL, uses world-readable permissions for a private key, which allows local users to obtain sensitive information by reading the key file, as demonstrated by access to the local filesystem on an AD domain controller.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4476.html">CVE-2013-4476</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4476">SUSE bug 848103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4494</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4494" source="CVE"/>
    <description>
    Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service (host deadlock) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4494.html">CVE-2013-4494</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4494">SUSE bug 848657</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4496</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4496" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4496" source="CVE"/>
    <description>
    Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4496.html">CVE-2013-4496</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 866844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 866844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 866844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 866844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 866844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 866844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4496">SUSE bug 849224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4505</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4505" source="CVE"/>
    <description>
    The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows remote attackers to bypass intended access restrictions and possibly cause a denial of service (resource consumption) via a relative URL in a REPORT request.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4505.html">CVE-2013-4505</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4505">SUSE bug 862459</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4509</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4509" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4509" source="CVE"/>
    <description>
    The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allows physically proximate attackers to obtain a user password by reading the lockscreen.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4509.html">CVE-2013-4509</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4509">SUSE bug 847718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139602" comment="ibus-chewing-1.4.14-2.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151927" comment="ibus-chewing is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139603" comment="ibus-pinyin-1.5.0-12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151928" comment="ibus-pinyin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4526</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4526" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4526" source="CVE"/>
    <description>
    Buffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via vectors related to migrating ports.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4526.html">CVE-2013-4526</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4526">SUSE bug 864671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4526">SUSE bug 864671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4526">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4526">SUSE bug 864671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4526">SUSE bug 864671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4526">SUSE bug 864671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4526">SUSE bug 864671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4526">SUSE bug 864671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4526">SUSE bug 864671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4526">SUSE bug 864671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4527</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4527" source="CVE"/>
    <description>
    Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vectors related to the number of timers.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4527.html">CVE-2013-4527</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 864673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 864673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 864673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 864673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 864673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 864673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 864673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 864673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 864673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 864673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 864673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 964746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 964746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 964746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 964746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4527">SUSE bug 964746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4529</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4529" source="CVE"/>
    <description>
    Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4529.html">CVE-2013-4529</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 864678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 864678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 864678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 864678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 864678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 864678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 864678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 864678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 864678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 964929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 964929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 964929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 964929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4529">SUSE bug 964929</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4530</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4530" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4530" source="CVE"/>
    <description>
    Buffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4530.html">CVE-2013-4530</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 864682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 864682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 864682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 864682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 864682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 864682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 864682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 864682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 864682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 964950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 964950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 964950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4530">SUSE bug 964950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4531</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4531" source="CVE"/>
    <description>
    Buffer overflow in target-arm/machine.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative value in cpreg_vmstate_array_len in a savevm image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4531.html">CVE-2013-4531</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4531">SUSE bug 864796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4531">SUSE bug 864796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4531">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4531">SUSE bug 864796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4531">SUSE bug 864796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4531">SUSE bug 864796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4531">SUSE bug 864796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4531">SUSE bug 864796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4531">SUSE bug 864796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4531">SUSE bug 864796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4531">SUSE bug 864796</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4533</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4533" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4533" source="CVE"/>
    <description>
    Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-&gt;rx_level value in a savevm image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4533.html">CVE-2013-4533</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 864655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 864655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 864655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 864655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 864655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 864655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 864655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 864655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 864655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 864655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 964644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 964644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 964644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4533">SUSE bug 964644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4534</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4534" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4534" source="CVE"/>
    <description>
    Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4534.html">CVE-2013-4534</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 864811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 864811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 864811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 864811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 864811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 864811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 864811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 864811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 964452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 864811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 964452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 964452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 964452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4534">SUSE bug 964452</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4535</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4535" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4535.html">CVE-2013-4535</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4535">SUSE bug 864665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4535">SUSE bug 964676</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4536</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4536" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4536.html">CVE-2013-4536</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 864665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 864665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 864665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 864665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 864665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 864665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 864665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 864665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 864665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 964676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4536">SUSE bug 964676</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4537</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4537" source="CVE"/>
    <description>
    The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4537.html">CVE-2013-4537</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 864391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 864391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 864391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 864391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 864391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 864391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 864391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 864391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 864391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 864391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 962642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 864391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 962642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 962642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 962642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4537">SUSE bug 962642</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4538" source="CVE"/>
    <description>
    Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4538.html">CVE-2013-4538</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 864769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 864769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 864769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 864769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 864769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 864769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 864769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 864769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 864769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 864769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 962335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 864769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 962335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 962335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4538">SUSE bug 962335</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4539</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4539" source="CVE"/>
    <description>
    Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4539.html">CVE-2013-4539</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 864805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 864805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 864805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 864805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 864805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 864805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 864805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 864805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 962758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 864805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 962758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 962758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 962758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4539">SUSE bug 962758</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4540</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4540" source="CVE"/>
    <description>
    Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4540.html">CVE-2013-4540</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 864801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 864801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 864801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 864801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 864801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 864801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 864801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 880751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 880751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 864801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 864801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 864801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4540">SUSE bug 864801</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4541</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4541" source="CVE"/>
    <description>
    The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_index value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4541.html">CVE-2013-4541</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4541">SUSE bug 864802</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4542</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4542" source="CVE"/>
    <description>
    The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds array access.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4542.html">CVE-2013-4542</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 864804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 864804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 864804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 864804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 864804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 864804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 864804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 864804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 864804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 864804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4542">SUSE bug 864804</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4544</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4544" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4544" source="CVE"/>
    <description>
    hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or (3) interrupt indices.  NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4544.html">CVE-2013-4544</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4544">SUSE bug 873613</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4544">SUSE bug 873613</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4544">SUSE bug 873613</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4544">SUSE bug 873613</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4545</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4545" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4545" source="CVE"/>
    <description>
    cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4545.html">CVE-2013-4545</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 849596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 849596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 849596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 849596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 849596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 849596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 849596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 849596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 849596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 870444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 849596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 882520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 880252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 924250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 924250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4545">SUSE bug 924250</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4549</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4549" source="CVE"/>
    <description>
    QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4549.html">CVE-2013-4549</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 856832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 1039291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 1039291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4549">SUSE bug 1039291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4551</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4551" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4551" source="CVE"/>
    <description>
    Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4551.html">CVE-2013-4551</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 849665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 849665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 849665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 849665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 849665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 849665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 849665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 849665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 849665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 849665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4551">SUSE bug 849665</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4553</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4553" source="CVE"/>
    <description>
    The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same order, which allows local guest administrators to cause a denial of service (host deadlock).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4553.html">CVE-2013-4553</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4553">SUSE bug 849667</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4554</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4554" source="CVE"/>
    <description>
    Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4554.html">CVE-2013-4554</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 848657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4554">SUSE bug 849668</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4558</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4558" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4558" source="CVE"/>
    <description>
    The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built with assertions enabled and SVNAutoversioning is enabled, allows remote attackers to cause a denial of service (assertion failure and Apache process abort) via a non-canonical URL in a request, as demonstrated using a trailing /.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4558.html">CVE-2013-4558</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4558">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4558">SUSE bug 850667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4558">SUSE bug 850747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4558">SUSE bug 862459</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134854" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4854</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4854" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4854" source="CVE"/>
    <description>
    The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4854.html">CVE-2013-4854</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4854">SUSE bug 831899</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134920" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4920</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4920" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4920" source="CVE"/>
    <description>
    The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4920.html">CVE-2013-4920</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4920">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134921" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4921</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4921" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4921" source="CVE"/>
    <description>
    Off-by-one error in the dissect_radiotap function in epan/dissectors/packet-ieee80211-radiotap.c in the Radiotap dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4921.html">CVE-2013-4921</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4921">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4922</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4922" source="CVE"/>
    <description>
    Double free vulnerability in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4922.html">CVE-2013-4922</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4922">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4923</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4923" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4923" source="CVE"/>
    <description>
    Memory leak in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (memory consumption) via crafted packets.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4923.html">CVE-2013-4923</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4923">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134924" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4924</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4924" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4924" source="CVE"/>
    <description>
    epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly validate certain index values, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4924.html">CVE-2013-4924</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4924">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134925" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4925</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4925" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4925" source="CVE"/>
    <description>
    Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4925.html">CVE-2013-4925</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4925">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4926</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4926" source="CVE"/>
    <description>
    epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly determine whether there is remaining packet data to process, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4926.html">CVE-2013-4926</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4926">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134927" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4927</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4927" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4927" source="CVE"/>
    <description>
    Integer signedness error in the get_type_length function in epan/dissectors/packet-btsdp.c in the Bluetooth SDP dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4927.html">CVE-2013-4927</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4927">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4928</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4928" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4928" source="CVE"/>
    <description>
    Integer signedness error in the dissect_headers function in epan/dissectors/packet-btobex.c in the Bluetooth OBEX dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4928.html">CVE-2013-4928</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4928">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134929" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4929</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4929" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4929" source="CVE"/>
    <description>
    The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not terminate packet-data processing after finding zero remaining bytes, which allows remote attackers to cause a denial of service (loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4929.html">CVE-2013-4929</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4929">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134930" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4930</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4930" source="CVE"/>
    <description>
    The dissect_dvbci_tpdu_hdr function in epan/dissectors/packet-dvbci.c in the DVB-CI dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not validate a certain length value before decrementing it, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4930.html">CVE-2013-4930</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4930">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4931</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4931" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4931" source="CVE"/>
    <description>
    epan/proto.c in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (loop) via a crafted packet that is not properly handled by the GSM RR dissector.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4931.html">CVE-2013-4931</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4931">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4932</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4932" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4932" source="CVE"/>
    <description>
    Multiple array index errors in epan/dissectors/packet-gsm_a_common.c in the GSM A Common dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allow remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4932.html">CVE-2013-4932</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4932">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4933</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4933" source="CVE"/>
    <description>
    The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet-trace file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4933.html">CVE-2013-4933</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4933">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4934</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4934" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4934" source="CVE"/>
    <description>
    The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not initialize certain structure members, which allows remote attackers to cause a denial of service (application crash) via a crafted packet-trace file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4934.html">CVE-2013-4934</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4934">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4935</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4935" source="CVE"/>
    <description>
    The dissect_per_length_determinant function in epan/dissectors/packet-per.c in the ASN.1 PER dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not initialize a length field in certain abnormal situations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4935.html">CVE-2013-4935</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4935">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20134936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-4936</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-4936" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4936" source="CVE"/>
    <description>
    The IsDFP_Frame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-4936.html">CVE-2013-4936</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-4936">SUSE bug 831718</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5123</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5123" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5123" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5123.html">CVE-2013-5123</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5123">SUSE bug 864406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5123">SUSE bug 864406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5123">SUSE bug 864406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5123">SUSE bug 864406</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140329" comment="python3-pip-7.1.2-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151932" comment="python3-pip is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5211</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211" source="CVE"/>
    <description>
    The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5211.html">CVE-2013-5211</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 889447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 889447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 857195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5211">SUSE bug 959243</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5590</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5590" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5590.html">CVE-2013-5590</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5590">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5591</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5591" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5591.html">CVE-2013-5591</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5591">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5592</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5592" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5592.html">CVE-2013-5592</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5592">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5593</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5593" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5593" source="CVE"/>
    <description>
    The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote attackers to spoof the address bar or conduct clickjacking attacks via vectors that trigger navigation off of a page containing this element.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5593.html">CVE-2013-5593</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5593">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5595</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5595" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5595" source="CVE"/>
    <description>
    The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly allocate memory for unspecified functions, which allows remote attackers to conduct buffer overflow attacks via a crafted web page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5595.html">CVE-2013-5595</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5595">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5596</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5596" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5596" source="CVE"/>
    <description>
    The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly determine the thread for release of an image object, which allows remote attackers to execute arbitrary code or cause a denial of service (race condition and application crash) via a large HTML document containing IMG elements, as demonstrated by the Never-Ending Reddit on reddit.com.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5596.html">CVE-2013-5596</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5596">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5597</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5597" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving a state-change event during an update of the offline cache.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5597.html">CVE-2013-5597</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5597">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5598</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5598" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5598" source="CVE"/>
    <description>
    PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges by using this element within an embedded PDF object.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5598.html">CVE-2013-5598</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5598">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5599</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5599" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5599" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a CANVAS element, a mozTextStyle attribute, and an onresize event.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5599.html">CVE-2013-5599</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5599">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5600" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors involving a blob: URL.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5600.html">CVE-2013-5600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5600">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5601</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5601" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5601" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors related to a memory allocation through the garbage collection (GC) API.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5601.html">CVE-2013-5601</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5601">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5602</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5602" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5602" source="CVE"/>
    <description>
    The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to direct proxies.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5602.html">CVE-2013-5602</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5602">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135603" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5603</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5603" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5603" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving HTML document templates.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5603.html">CVE-2013-5603</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5603">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135604" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5604</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5604" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5604" source="CVE"/>
    <description>
    The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5604.html">CVE-2013-5604</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5604">SUSE bug 847708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5605</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5605" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5605" source="CVE"/>
    <description>
    Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5605.html">CVE-2013-5605</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5605">SUSE bug 850148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5605">SUSE bug 850148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5605">SUSE bug 850148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5605">SUSE bug 850148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5605">SUSE bug 850148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5605">SUSE bug 850148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5605">SUSE bug 850148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5605">SUSE bug 850148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5605">SUSE bug 850148</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5609</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5609" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5609" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5609.html">CVE-2013-5609</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5609">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5610</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5610" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5610" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5610.html">CVE-2013-5610</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5610">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5611</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5611" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5611" source="CVE"/>
    <description>
    Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5611.html">CVE-2013-5611</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5611">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5612</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5612" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5612" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5612.html">CVE-2013-5612</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5612">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5613</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5613" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5613" source="CVE"/>
    <description>
    Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving synthetic mouse movement, related to the RestyleManager::GetHoverGeneration function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5613.html">CVE-2013-5613</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5613">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135614" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5614</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5614" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5614" source="CVE"/>
    <description>
    Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5614.html">CVE-2013-5614</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5614">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5615</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5615" source="CVE"/>
    <description>
    The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5615.html">CVE-2013-5615</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5615">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5616</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5616" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5616" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5616.html">CVE-2013-5616</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5616">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5618</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5618" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5618" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5618.html">CVE-2013-5618</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5618">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5619</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5619" source="CVE"/>
    <description>
    Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5619.html">CVE-2013-5619</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5619">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5653</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5653" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5653" source="CVE"/>
    <description>
    The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5653.html">CVE-2013-5653</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5653">SUSE bug 1001951</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139482" comment="ghostscript-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139483" comment="ghostscript-devel-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151934" comment="ghostscript-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139484" comment="ghostscript-x11-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5704</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5704" source="CVE"/>
    <description>
    The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding.  NOTE: the vendor states "this is not a security issue in httpd as such."
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5704.html">CVE-2013-5704</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 914535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 930944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 930944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 930944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 930944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 915666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 871310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 938728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 938728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 938728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 930944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 930944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 930944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 930944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 930944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5704">SUSE bug 930944</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5717</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5717" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5717" source="CVE"/>
    <description>
    The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5717.html">CVE-2013-5717</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5717">SUSE bug 839607</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5718</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5718" source="CVE"/>
    <description>
    The dissect_nbap_T_dCH_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dch_id value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5718.html">CVE-2013-5718</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5718">SUSE bug 839607</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135719" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5719</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5719" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5719" source="CVE"/>
    <description>
    epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5719.html">CVE-2013-5719</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5719">SUSE bug 839607</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5720</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5720" source="CVE"/>
    <description>
    Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5720.html">CVE-2013-5720</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5720">SUSE bug 839607</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5721</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5721" source="CVE"/>
    <description>
    The dissect_mq_rr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not properly determine when to enter a certain loop, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5721.html">CVE-2013-5721</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5721">SUSE bug 839607</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20135722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-5722</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-5722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5722" source="CVE"/>
    <description>
    Unspecified vulnerability in the LDAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-5722.html">CVE-2013-5722</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-5722">SUSE bug 839607</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6045</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6045" source="CVE"/>
    <description>
    Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6045.html">CVE-2013-6045</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6045">SUSE bug 853644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6045">SUSE bug 853838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6045">SUSE bug 853838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6045">SUSE bug 853838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6045">SUSE bug 853838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6045">SUSE bug 853838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6045">SUSE bug 853838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6045">SUSE bug 853838</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6052</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6052" source="CVE"/>
    <description>
    OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6052.html">CVE-2013-6052</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6052">SUSE bug 853644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6052">SUSE bug 853644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6053</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6053" source="CVE"/>
    <description>
    OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6053.html">CVE-2013-6053</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6053">SUSE bug 853644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6053">SUSE bug 853644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6054</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6054" source="CVE"/>
    <description>
    Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6054.html">CVE-2013-6054</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6054">SUSE bug 853644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6054">SUSE bug 853644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6336</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6336" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6336" source="CVE"/>
    <description>
    The ieee802154_map_rec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6336.html">CVE-2013-6336</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6337</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6337" source="CVE"/>
    <description>
    Unspecified vulnerability in the NBAP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6337.html">CVE-2013-6337</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6337">SUSE bug 848738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6337">SUSE bug 848738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6337">SUSE bug 848738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6337">SUSE bug 848738</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6338</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6338" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6338" source="CVE"/>
    <description>
    The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6338.html">CVE-2013-6338</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6339</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6339" source="CVE"/>
    <description>
    The dissect_openwire_type function in epan/dissectors/packet-openwire.c in the OpenWire dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6339.html">CVE-2013-6339</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6340</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6340" source="CVE"/>
    <description>
    epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly determine the amount of remaining data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6340.html">CVE-2013-6340</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6369</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6369" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6369" source="CVE"/>
    <description>
    Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6369.html">CVE-2013-6369</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6369">SUSE bug 870855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6369">SUSE bug 870855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6369">SUSE bug 870855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6369">SUSE bug 870855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6369">SUSE bug 870855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6369">SUSE bug 870855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6369">SUSE bug 870855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6369">SUSE bug 870855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6369">SUSE bug 870855</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139899" comment="libjbig2-2.0-4.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151938" comment="libjbig2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139900" comment="libjbig2-32bit-2.0-4.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151939" comment="libjbig2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6370</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6370" source="CVE"/>
    <description>
    Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6370.html">CVE-2013-6370</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6370">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6370">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6370">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6370">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6370">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6370">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6370">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6370">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6370">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6370">SUSE bug 870147</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139907" comment="libjson-c2-0.12-5.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151940" comment="libjson-c2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139908" comment="libjson-c2-32bit-0.12-5.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151941" comment="libjson-c2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6371</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6371" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6371" source="CVE"/>
    <description>
    The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6371.html">CVE-2013-6371</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6371">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6371">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6371">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6371">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6371">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6371">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6371">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6371">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6371">SUSE bug 870147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6371">SUSE bug 870147</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139907" comment="libjson-c2-0.12-5.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151940" comment="libjson-c2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139908" comment="libjson-c2-32bit-0.12-5.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151941" comment="libjson-c2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6393</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6393" source="CVE"/>
    <description>
    The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6393.html">CVE-2013-6393</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 911782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6393">SUSE bug 860617</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140234" comment="libyaml-0-2-0.1.6-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151942" comment="libyaml-0-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140295" comment="perl-YAML-LibYAML-0.38-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151687" comment="perl-YAML-LibYAML is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6399</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6399" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6399" source="CVE"/>
    <description>
    Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6399.html">CVE-2013-6399</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 864814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 864814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 864814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 864814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 864814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 864814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 864814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 864814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 864814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 864814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 964643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6399">SUSE bug 964643</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6402</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6402" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6402" source="CVE"/>
    <description>
    base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6402.html">CVE-2013-6402</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6402">SUSE bug 852368</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139597" comment="hplip-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151009" comment="hplip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139598" comment="hplip-hpijs-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151010" comment="hplip-hpijs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139599" comment="hplip-sane-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151011" comment="hplip-sane is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6420</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="CVE"/>
    <description>
    The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6420.html">CVE-2013-6420</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6420">SUSE bug 854880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6420">SUSE bug 854880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6420">SUSE bug 854880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6420">SUSE bug 854880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6420">SUSE bug 854880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6420">SUSE bug 854880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6420">SUSE bug 854880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6420">SUSE bug 854880</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6424</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6424" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6424" source="CVE"/>
    <description>
    Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6424.html">CVE-2013-6424</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6424">SUSE bug 853846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6424">SUSE bug 853846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6424">SUSE bug 853846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6424">SUSE bug 853846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6424">SUSE bug 853846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6424">SUSE bug 853846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6424">SUSE bug 853846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6424">SUSE bug 853846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6424">SUSE bug 853846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6424">SUSE bug 853846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6424">SUSE bug 853846</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140418" comment="xorg-x11-server-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140419" comment="xorg-x11-server-extra-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140420" comment="xorg-x11-server-sdk-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6427</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6427" source="CVE"/>
    <description>
    upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6427.html">CVE-2013-6427</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 853405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 853405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 853405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 852368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 853405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 853405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 853405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 853405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 853405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 900460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 853405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6427">SUSE bug 933191</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139597" comment="hplip-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151009" comment="hplip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139598" comment="hplip-hpijs-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151010" comment="hplip-hpijs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139599" comment="hplip-sane-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151011" comment="hplip-sane is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6435</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6435" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6435" source="CVE"/>
    <description>
    Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6435.html">CVE-2013-6435</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6435">SUSE bug 906803</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009105405" comment="rpm-4.11.2-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151943" comment="rpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009105404" comment="rpm-32bit-4.11.2-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151944" comment="rpm-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009105406" comment="rpm-build-4.11.2-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151945" comment="rpm-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009105407" comment="rpm-devel-4.11.2-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151946" comment="rpm-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6436</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6436" source="CVE"/>
    <description>
    The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests when reading memory tunables, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) via a guest in the shutdown status, as demonstrated by the "virsh memtune" command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6436.html">CVE-2013-6436</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6436">SUSE bug 854486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6436">SUSE bug 854486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6436">SUSE bug 854486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6436">SUSE bug 854486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6436">SUSE bug 854486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6436">SUSE bug 854486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6436">SUSE bug 854486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6436">SUSE bug 854486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6436">SUSE bug 854486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6436">SUSE bug 854486</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6438</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6438" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6438" source="CVE"/>
    <description>
    The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6438.html">CVE-2013-6438</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6438">SUSE bug 869105</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6442</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6442" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6442" source="CVE"/>
    <description>
    The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6442.html">CVE-2013-6442</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6442">SUSE bug 855866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6442">SUSE bug 855866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6442">SUSE bug 855866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6442">SUSE bug 855866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6442">SUSE bug 855866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6442">SUSE bug 855866</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6449</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6449" source="CVE"/>
    <description>
    The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6449.html">CVE-2013-6449</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6449">SUSE bug 856687</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6449">SUSE bug 856687</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6450</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6450" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6450" source="CVE"/>
    <description>
    The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service (application crash) by interfering with packet delivery, related to ssl/d1_both.c and ssl/t1_enc.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6450.html">CVE-2013-6450</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6450">SUSE bug 857203</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6450">SUSE bug 857203</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6450">SUSE bug 857203</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6450">SUSE bug 861384</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6450">SUSE bug 857203</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6450">SUSE bug 857203</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6450">SUSE bug 986238</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136457" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6457</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6457" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6457" source="CVE"/>
    <description>
    The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6457.html">CVE-2013-6457</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6457">SUSE bug 858824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6457">SUSE bug 858824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6457">SUSE bug 858824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6457">SUSE bug 858824</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6458</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6458" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6458" source="CVE"/>
    <description>
    Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6458.html">CVE-2013-6458</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6458">SUSE bug 857492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6458">SUSE bug 857492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6458">SUSE bug 857492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6458">SUSE bug 857492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6458">SUSE bug 857492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6458">SUSE bug 857492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6458">SUSE bug 857492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6458">SUSE bug 857492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6458">SUSE bug 857492</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6462</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6462" source="CVE"/>
    <description>
    Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6462.html">CVE-2013-6462</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6462">SUSE bug 854915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6462">SUSE bug 854915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6462">SUSE bug 854915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6462">SUSE bug 854915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6462">SUSE bug 854915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6462">SUSE bug 854915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6462">SUSE bug 882908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6462">SUSE bug 882908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6462">SUSE bug 854915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6462">SUSE bug 854915</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139721" comment="libXfont-devel-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151631" comment="libXfont-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139722" comment="libXfont1-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6473</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6473" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6473" source="CVE"/>
    <description>
    Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large (1) page or (2) line in a URF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6473.html">CVE-2013-6473</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6473">SUSE bug 866302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6473">SUSE bug 866302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6473">SUSE bug 866302</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6474</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6474" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6474" source="CVE"/>
    <description>
    Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6474.html">CVE-2013-6474</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6474">SUSE bug 866302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6474">SUSE bug 866302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6474">SUSE bug 866302</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6475</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6475" source="CVE"/>
    <description>
    Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6475.html">CVE-2013-6475</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6475">SUSE bug 866302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6475">SUSE bug 866302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6475">SUSE bug 866302</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6476</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6476" source="CVE"/>
    <description>
    The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6476.html">CVE-2013-6476</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6476">SUSE bug 866302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6476">SUSE bug 866302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6476">SUSE bug 866302</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6477</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6477" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6477" source="CVE"/>
    <description>
    Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service (application crash) via a crafted timestamp value in an XMPP message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6477.html">CVE-2013-6477</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6477">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6477">SUSE bug 861019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6478</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6478" source="CVE"/>
    <description>
    gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, which allows user-assisted remote attackers to cause a denial of service (application crash) via a long URL that is examined with a tooltip.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6478.html">CVE-2013-6478</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6478">SUSE bug 861019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6479</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6479" source="CVE"/>
    <description>
    util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent with the Content-Length header, which allows remote HTTP servers to cause a denial of service (application crash) via a crafted response.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6479.html">CVE-2013-6479</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6479">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6479">SUSE bug 861019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6481</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6481" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6481" source="CVE"/>
    <description>
    libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo! P2P message with a crafted length field, which triggers a buffer over-read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6481.html">CVE-2013-6481</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6481">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6481">SUSE bug 861019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6482</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6482" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6482" source="CVE"/>
    <description>
    Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer dereference and crash) via a crafted (1) SOAP response, (2) OIM XML response, or (3) Content-Length header.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6482.html">CVE-2013-6482</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6482">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6482">SUSE bug 861019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6483" source="CVE"/>
    <description>
    The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service (NULL pointer dereference and application crash) via a crafted reply.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6483.html">CVE-2013-6483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6483">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6483">SUSE bug 861019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6484</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6484" source="CVE"/>
    <description>
    The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers to cause a denial of service (out-of-bounds write operation and application crash) by triggering a socket read error.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6484.html">CVE-2013-6484</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6484">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6484">SUSE bug 861019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6485</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6485" source="CVE"/>
    <description>
    Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid chunk-size field in chunked transfer-coding data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6485.html">CVE-2013-6485</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6485">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6485">SUSE bug 861019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6486</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6486" source="CVE"/>
    <description>
    gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute arbitrary programs via a message containing a file: URL that is improperly handled during construction of an explorer.exe command.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3185.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6486.html">CVE-2013-6486</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6486">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6486">SUSE bug 861019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6487</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6487" source="CVE"/>
    <description>
    Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6487.html">CVE-2013-6487</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6487">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6487">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6487">SUSE bug 878540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6487">SUSE bug 878540</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139856" comment="libgadu-devel-1.12.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151951" comment="libgadu-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139857" comment="libgadu3-1.12.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151952" comment="libgadu3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6497</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6497" source="CVE"/>
    <description>
    clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6497.html">CVE-2013-6497</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6497">SUSE bug 906077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6497">SUSE bug 906077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6497">SUSE bug 906077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6497">SUSE bug 906077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6497">SUSE bug 906077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6497">SUSE bug 906077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6497">SUSE bug 1040662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6497">SUSE bug 906077</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6629</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6629" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6629" source="CVE"/>
    <description>
    The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6629.html">CVE-2013-6629</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6629">SUSE bug 850430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6629">SUSE bug 873872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6629">SUSE bug 873873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6629">SUSE bug 877429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6629">SUSE bug 877430</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6630</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6630" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6630" source="CVE"/>
    <description>
    The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6630.html">CVE-2013-6630</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6630">SUSE bug 850430</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6671</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6671" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6671" source="CVE"/>
    <description>
    The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6671.html">CVE-2013-6671</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6671">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6672</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6672" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6672" source="CVE"/>
    <description>
    Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6672.html">CVE-2013-6672</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6672">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6673</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6673" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6673" source="CVE"/>
    <description>
    Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6673.html">CVE-2013-6673</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6673">SUSE bug 854370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6712</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="CVE"/>
    <description>
    The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6712.html">CVE-2013-6712</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6712">SUSE bug 853045</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6712">SUSE bug 853045</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6712">SUSE bug 853045</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6712">SUSE bug 853045</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6712">SUSE bug 853045</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6712">SUSE bug 853045</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6712">SUSE bug 853045</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6712">SUSE bug 853045</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6887</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6887" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6887" source="CVE"/>
    <description>
    OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6887.html">CVE-2013-6887</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6887">SUSE bug 853644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6887">SUSE bug 853644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20136954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-6954</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-6954" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6954" source="CVE"/>
    <description>
    The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-6954.html">CVE-2013-6954</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6954">SUSE bug 856522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6954">SUSE bug 856522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6954">SUSE bug 856522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6954">SUSE bug 856522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6954">SUSE bug 856522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6954">SUSE bug 873872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6954">SUSE bug 873873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6954">SUSE bug 877429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-6954">SUSE bug 877430</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117932" comment="libpng16-16-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117933" comment="libpng16-16-32bit-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117936" comment="libpng16-compat-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117937" comment="libpng16-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7038</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7038" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7038" source="CVE"/>
    <description>
    The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7038.html">CVE-2013-7038</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7038">SUSE bug 854443</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157444" comment="libmicrohttpd-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157572" comment="libmicrohttpd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157445" comment="libmicrohttpd-devel-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157573" comment="libmicrohttpd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157446" comment="libmicrohttpd10-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157574" comment="libmicrohttpd10 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157447" comment="libmicrospdy-devel-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157575" comment="libmicrospdy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157448" comment="libmicrospdy0-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157576" comment="libmicrospdy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157449" comment="microspdy2http-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157577" comment="microspdy2http is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7039</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7039" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7039" source="CVE"/>
    <description>
    Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7039.html">CVE-2013-7039</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7039">SUSE bug 854443</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157444" comment="libmicrohttpd-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157572" comment="libmicrohttpd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157445" comment="libmicrohttpd-devel-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157573" comment="libmicrohttpd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157446" comment="libmicrohttpd10-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157574" comment="libmicrohttpd10 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157447" comment="libmicrospdy-devel-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157575" comment="libmicrospdy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157448" comment="libmicrospdy0-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157576" comment="libmicrospdy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157449" comment="microspdy2http-0.9.30-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157577" comment="microspdy2http is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7098</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7098" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2013-7098.html">CVE-2013-7098</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140263" comment="openconnect-7.06-3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151736" comment="openconnect is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140264" comment="openconnect-devel-7.06-3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151737" comment="openconnect-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7107</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7107" source="CVE"/>
    <description>
    Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7107.html">CVE-2013-7107</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7107">SUSE bug 859424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7107">SUSE bug 859424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7107">SUSE bug 859424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7107">SUSE bug 859424</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140244" comment="monitoring-tools-1.13.3-2.41 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151784" comment="monitoring-tools is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7108</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7108" source="CVE"/>
    <description>
    Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list to the process_cgivars function in (1) avail.c, (2) cmd.c, (3) config.c, (4) extinfo.c, (5) histogram.c, (6) notifications.c, (7) outages.c, (8) status.c, (9) statusmap.c, (10) summary.c, and (11) trends.c in cgi/, which triggers a heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7108.html">CVE-2013-7108</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7108">SUSE bug 856837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7108">SUSE bug 856837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7108">SUSE bug 856837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7108">SUSE bug 856837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7108">SUSE bug 856837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7108">SUSE bug 856837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7108">SUSE bug 856837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7108">SUSE bug 856837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7108">SUSE bug 856837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7108">SUSE bug 856837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7108">SUSE bug 856837</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140244" comment="monitoring-tools-1.13.3-2.41 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151784" comment="monitoring-tools is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7112</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7112" source="CVE"/>
    <description>
    The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7112.html">CVE-2013-7112</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7112">SUSE bug 856498</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7112">SUSE bug 856498</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7112">SUSE bug 856498</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7113</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7113" source="CVE"/>
    <description>
    epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7113.html">CVE-2013-7113</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7113">SUSE bug 856495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7113">SUSE bug 856495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7113">SUSE bug 856495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7113">SUSE bug 856495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7113">SUSE bug 856495</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7114</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7114" source="CVE"/>
    <description>
    Multiple buffer overflows in the create_ntlmssp_v2_key function in epan/dissectors/packet-ntlmssp.c in the NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to cause a denial of service (application crash) via a long domain name in a packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7114.html">CVE-2013-7114</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7114">SUSE bug 856496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7114">SUSE bug 856496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7114">SUSE bug 856496</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7327</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7327" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7327" source="CVE"/>
    <description>
    The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL pointer as a return value, a different vulnerability than CVE-2013-7226.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7327.html">CVE-2013-7327</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7327">SUSE bug 864879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7327">SUSE bug 864879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7327">SUSE bug 864879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7327">SUSE bug 864879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7327">SUSE bug 864879</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7345</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7345" source="CVE"/>
    <description>
    The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7345.html">CVE-2013-7345</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7345">SUSE bug 869906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7345">SUSE bug 869906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7345">SUSE bug 869906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7345">SUSE bug 869906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7345">SUSE bug 869906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7345">SUSE bug 869906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7345">SUSE bug 883306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7345">SUSE bug 883306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7345">SUSE bug 987530</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7353</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7353" source="CVE"/>
    <description>
    Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a crafted image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7353.html">CVE-2013-7353</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7353">SUSE bug 873124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7353">SUSE bug 873124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7353">SUSE bug 873124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7353">SUSE bug 873124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7353">SUSE bug 873124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7353">SUSE bug 873124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7353">SUSE bug 873124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7353">SUSE bug 873124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7353">SUSE bug 873124</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139967" comment="libpng12-0-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139968" comment="libpng12-0-32bit-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139969" comment="libpng12-devel-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7354</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7354" source="CVE"/>
    <description>
    Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png_set_sPLT or (2) png_set_text_2 function, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7354.html">CVE-2013-7354</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7354">SUSE bug 873123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7354">SUSE bug 873123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7354">SUSE bug 873123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7354">SUSE bug 873123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7354">SUSE bug 873123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7354">SUSE bug 873123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7354">SUSE bug 873123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7354">SUSE bug 873123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7354">SUSE bug 873123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7354">SUSE bug 873123</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139967" comment="libpng12-0-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139968" comment="libpng12-0-32bit-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139969" comment="libpng12-devel-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7423</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7423" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7423" source="CVE"/>
    <description>
    The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7423.html">CVE-2013-7423</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7423">SUSE bug 915526</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7447</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7447" source="CVE"/>
    <description>
    Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7447.html">CVE-2013-7447</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7447">SUSE bug 966682</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139413" comment="eog-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151978" comment="eog is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139414" comment="eog-lang-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151980" comment="eog-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139538" comment="gnome-photos-3.20.2-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154116" comment="gnome-photos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139539" comment="gnome-shell-search-provider-gnome-photos-3.20.2-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154117" comment="gnome-shell-search-provider-gnome-photos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139540" comment="gtk2-data-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151985" comment="gtk2-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139541" comment="gtk2-devel-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151986" comment="gtk2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139542" comment="gtk2-immodule-amharic-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152005" comment="gtk2-immodule-amharic is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139543" comment="gtk2-immodule-inuktitut-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152007" comment="gtk2-immodule-inuktitut is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139544" comment="gtk2-immodule-thai-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152011" comment="gtk2-immodule-thai is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139545" comment="gtk2-immodule-vietnamese-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152013" comment="gtk2-immodule-vietnamese is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139546" comment="gtk2-immodule-xim-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152015" comment="gtk2-immodule-xim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139547" comment="gtk2-lang-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152019" comment="gtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139548" comment="gtk2-tools-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152026" comment="gtk2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139549" comment="gtk2-tools-32bit-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152027" comment="gtk2-tools-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139550" comment="libgtk-2_0-0-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152028" comment="libgtk-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139551" comment="libgtk-2_0-0-32bit-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152029" comment="libgtk-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139552" comment="typelib-1_0-Gtk-2_0-2.24.31-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152030" comment="typelib-1_0-Gtk-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7456</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7456" source="CVE"/>
    <description>
    gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted image that is mishandled by the imagescale function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7456.html">CVE-2013-7456</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7456">SUSE bug 982009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7456">SUSE bug 982009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7456">SUSE bug 982009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7456">SUSE bug 982009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7456">SUSE bug 982009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20137459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2013-7459</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2013-7459" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7459" source="CVE"/>
    <description>
    Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2013-7459.html">CVE-2013-7459</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1047666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1047666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1047666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1047666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1047666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1047666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1047666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1047666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1087140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1087140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1087140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1087140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1087140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1087140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1087140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1087140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2013-7459">SUSE bug 1017420</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147035" comment="python-pycrypto-2.6.1-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151719" comment="python-pycrypto is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0004</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0004" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0004" source="CVE"/>
    <description>
    Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0004.html">CVE-2014-0004</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0004">SUSE bug 865854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0004">SUSE bug 865854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0004">SUSE bug 865854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0004">SUSE bug 865854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0004">SUSE bug 865854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0004">SUSE bug 865854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0004">SUSE bug 865854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0004">SUSE bug 865854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0004">SUSE bug 865854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140154" comment="libudisks2-0-2.1.6-4.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152050" comment="libudisks2-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140155" comment="udisks2-2.1.6-4.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152051" comment="udisks2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140156" comment="udisks2-lang-2.1.6-4.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152052" comment="udisks2-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0011</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0011" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0011.html">CVE-2014-0011</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0011">SUSE bug 869307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0011">SUSE bug 869307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0011">SUSE bug 869307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0011">SUSE bug 869307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0011">SUSE bug 900896</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139747" comment="libXvnc1-1.6.0-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139748" comment="tigervnc-1.6.0-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139749" comment="xorg-x11-Xvnc-1.6.0-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0015</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0015" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0015" source="CVE"/>
    <description>
    cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0015.html">CVE-2014-0015</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 880252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 882520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 880252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 880252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 880252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 880252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 880252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 962983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0015">SUSE bug 858673</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0017</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0017" source="CVE"/>
    <description>
    The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0017.html">CVE-2014-0017</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0017">SUSE bug 866286</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140104" comment="libssh-devel-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151771" comment="libssh-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140105" comment="libssh4-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0020</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0020" source="CVE"/>
    <description>
    The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0020.html">CVE-2014-0020</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0020">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0020">SUSE bug 861019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0020">SUSE bug 861019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0028</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0028" source="CVE"/>
    <description>
    libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object information via a request to the (1) virConnectDomainEventRegister and (2) virConnectDomainEventRegisterAny functions in the event registration API.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0028.html">CVE-2014-0028</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0028">SUSE bug 859051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0028">SUSE bug 859051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0028">SUSE bug 859051</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0032</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0032" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0032" source="CVE"/>
    <description>
    The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET, as demonstrated by the "svn ls http://svn.example.com" command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0032.html">CVE-2014-0032</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0032">SUSE bug 862459</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0038</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0038" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0038" source="CVE"/>
    <description>
    The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0038.html">CVE-2014-0038</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0038">SUSE bug 860993</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0050</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0050" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0050" source="CVE"/>
    <description>
    MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0050.html">CVE-2014-0050</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0050">SUSE bug 862781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0050">SUSE bug 862781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0050">SUSE bug 862781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0050">SUSE bug 862781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0050">SUSE bug 862781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0050">SUSE bug 862781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0050">SUSE bug 862781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0050">SUSE bug 862781</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0050">SUSE bug 862781</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139610" comment="jakarta-commons-fileupload-1.1.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151905" comment="jakarta-commons-fileupload is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140375" comment="tomcat-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140376" comment="tomcat-admin-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140377" comment="tomcat-el-3_0-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140378" comment="tomcat-jsp-2_3-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140379" comment="tomcat-lib-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140380" comment="tomcat-servlet-3_1-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140381" comment="tomcat-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0060</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0060" source="CVE"/>
    <description>
    PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly enforce the ADMIN OPTION restriction, which allows remote authenticated members of a role to add or remove arbitrary users to that role by calling the SET ROLE command before the associated GRANT command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0060.html">CVE-2014-0060</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0060">SUSE bug 864845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0060">SUSE bug 864856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0060">SUSE bug 864845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0060">SUSE bug 864845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0060">SUSE bug 864845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0060">SUSE bug 864856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0060">SUSE bug 864845</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0061</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0061" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0061" source="CVE"/>
    <description>
    The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to gain privileges via a function that is (1) defined in another language or (2) not allowed to be directly called by the user due to permissions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0061.html">CVE-2014-0061</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0061">SUSE bug 864846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0061">SUSE bug 864856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0061">SUSE bug 864846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0061">SUSE bug 864846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0061">SUSE bug 864846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0061">SUSE bug 864846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0061">SUSE bug 864856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0061">SUSE bug 864846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0061">SUSE bug 864846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0061">SUSE bug 864846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0061">SUSE bug 864856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0062</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0062" source="CVE"/>
    <description>
    Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allows remote authenticated users to create an unauthorized index or read portions of unauthorized tables by creating or deleting a table with the same name during the timing window.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0062.html">CVE-2014-0062</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0062">SUSE bug 864847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0062">SUSE bug 864856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0062">SUSE bug 864847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0062">SUSE bug 864847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0062">SUSE bug 864847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0062">SUSE bug 864847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0062">SUSE bug 864856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0062">SUSE bug 864847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0062">SUSE bug 864847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0062">SUSE bug 864847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0062">SUSE bug 864856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0063</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0063" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0063.html">CVE-2014-0063</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0063">SUSE bug 864850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0063">SUSE bug 864856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0063">SUSE bug 864850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0063">SUSE bug 864850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0063">SUSE bug 864850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0063">SUSE bug 864850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0063">SUSE bug 864850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0063">SUSE bug 864850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0063">SUSE bug 864850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0063">SUSE bug 864856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0064</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0064" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0064" source="CVE"/>
    <description>
    Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors, which trigger a buffer overflow.  NOTE: this identifier has been SPLIT due to different affected versions; use CVE-2014-2669 for the hstore vector.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0064.html">CVE-2014-0064</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0064">SUSE bug 864851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0064">SUSE bug 864856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0064">SUSE bug 864851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0064">SUSE bug 864851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0064">SUSE bug 871307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0064">SUSE bug 864851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0064">SUSE bug 864851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0064">SUSE bug 864851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0064">SUSE bug 864851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0064">SUSE bug 864851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0064">SUSE bug 864856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0065</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0065" source="CVE"/>
    <description>
    Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors, a different vulnerability than CVE-2014-0063.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0065.html">CVE-2014-0065</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0065">SUSE bug 864852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0065">SUSE bug 864856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0065">SUSE bug 864852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0065">SUSE bug 864852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0065">SUSE bug 864852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0065">SUSE bug 864852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0065">SUSE bug 864852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0065">SUSE bug 864852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0065">SUSE bug 864852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0065">SUSE bug 864856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0066</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0066" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0066" source="CVE"/>
    <description>
    The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0066.html">CVE-2014-0066</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0066">SUSE bug 864856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0067</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0067" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0067" source="CVE"/>
    <description>
    The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0067.html">CVE-2014-0067</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0067">SUSE bug 864856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0067">SUSE bug 872783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0067">SUSE bug 872783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0067">SUSE bug 872783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0067">SUSE bug 872783</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201400691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-00691</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-00691" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-00691" source="CVE"/>
    <description>
    Unknown.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2014-00691.html">CVE-2014-00691</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0076</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0076" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0076" source="CVE"/>
    <description>
    The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0076.html">CVE-2014-0076</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 869945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 883126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0076">SUSE bug 905106</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0092</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0092" source="CVE"/>
    <description>
    lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0092.html">CVE-2014-0092</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 865804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 865804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 865804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 865804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 865804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 865804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 865804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 865804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 865804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 915878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 915878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 865804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 915878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0092">SUSE bug 915878</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0098</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0098" source="CVE"/>
    <description>
    The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0098.html">CVE-2014-0098</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0098">SUSE bug 869106</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0107</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0107" source="CVE"/>
    <description>
    The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access external resources via a crafted (1) xalan:content-header, (2) xalan:entities, (3) xslt:content-header, or (4) xslt:entities property, or a Java property that is bound to the XSLT 1.0 system-property function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0107.html">CVE-2014-0107</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0107">SUSE bug 870082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0107">SUSE bug 870082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0107">SUSE bug 870082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0107">SUSE bug 870082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0107">SUSE bug 870082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0107">SUSE bug 870082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0107">SUSE bug 870082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0107">SUSE bug 870082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0107">SUSE bug 870082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0107">SUSE bug 870082</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140404" comment="xalan-j2-2.7.0-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152055" comment="xalan-j2 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0117</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0117" source="CVE"/>
    <description>
    The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-process crash) via a crafted HTTP Connection header.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0117.html">CVE-2014-0117</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0117">SUSE bug 887767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0117">SUSE bug 887767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0117">SUSE bug 887767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0117">SUSE bug 887767</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0118</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0118" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0118" source="CVE"/>
    <description>
    The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0118.html">CVE-2014-0118</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0118">SUSE bug 887769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0118">SUSE bug 887769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0118">SUSE bug 887769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0118">SUSE bug 887769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0118">SUSE bug 1078450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0138</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0138" source="CVE"/>
    <description>
    The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0138.html">CVE-2014-0138</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 882520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 880252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0138">SUSE bug 868627</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0139</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0139" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0139" source="CVE"/>
    <description>
    cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0139.html">CVE-2014-0139</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 882520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 880252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0139">SUSE bug 868629</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139661" comment="lftp-4.7.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152056" comment="lftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0142" source="CVE"/>
    <description>
    QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallels.c or (2) extent_size field in the bochs function in block/bochs.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0142.html">CVE-2014-0142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0142">SUSE bug 870439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0142">SUSE bug 871442</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0143" source="CVE"/>
    <description>
    Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog size in (1) the parallels_open function in block/parallels.c or (2) bochs_open function in bochs.c, a large L1 table in the (3) qcow2_snapshot_load_tmp in qcow2-snapshot.c or (4) qcow2_grow_l1_table function in qcow2-cluster.c, (5) a large request in the bdrv_check_byte_request function in block.c and other block drivers, (6) crafted cluster indexes in the get_refcount function in qcow2-refcount.c, or (7) a large number of blocks in the cloop_open function in cloop.c, which trigger buffer overflows, memory corruption, large memory allocations and out-of-bounds read and writes.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0143.html">CVE-2014-0143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0143">SUSE bug 870439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0143">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0143">SUSE bug 870439</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0144</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0144" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0144.html">CVE-2014-0144</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0144">SUSE bug 870439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0144">SUSE bug 871442</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0145</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0145" source="CVE"/>
    <description>
    Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code via a large (1) L1 table in the qcow2_snapshot_load_tmp in the QCOW 2 block driver (block/qcow2-snapshot.c) or (2) uncompressed chunk, (3) chunk length, or (4) number of sectors in the DMG block driver (block/dmg.c).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0145.html">CVE-2014-0145</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0145">SUSE bug 870439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0145">SUSE bug 871442</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0146</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0146" source="CVE"/>
    <description>
    The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted image which causes an error, related to the initialization of the snapshot_offset and nb_snapshots fields.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0146.html">CVE-2014-0146</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0146">SUSE bug 870439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0146">SUSE bug 871442</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0147</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0147" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0147.html">CVE-2014-0147</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0147">SUSE bug 870439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0147">SUSE bug 871442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0147">SUSE bug 870439</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0150</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0150" source="CVE"/>
    <description>
    Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0150.html">CVE-2014-0150</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0150">SUSE bug 873235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0150">SUSE bug 873235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0150">SUSE bug 873235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0150">SUSE bug 873235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0150">SUSE bug 873235</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0160</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160" source="CVE"/>
    <description>
    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0160.html">CVE-2014-0160</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0160">SUSE bug 872299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0160">SUSE bug 872299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0160">SUSE bug 872299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0160">SUSE bug 872299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0160">SUSE bug 872299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0160">SUSE bug 872299</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0172</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0172" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0172" source="CVE"/>
    <description>
    Integer overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed compressed debug section in an ELF file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0172.html">CVE-2014-0172</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0172">SUSE bug 872785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0172">SUSE bug 872785</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139400" comment="elfutils-0.158-10.50 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139401" comment="libasm1-0.158-10.50 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139402" comment="libdw1-0.158-10.50 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139403" comment="libelf1-0.158-10.50 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139404" comment="libelf1-32bit-0.158-10.50 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0178</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="CVE"/>
    <description>
    Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0178.html">CVE-2014-0178</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0178">SUSE bug 872396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0178">SUSE bug 872396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0178">SUSE bug 872396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0178">SUSE bug 872396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0178">SUSE bug 872396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0178">SUSE bug 872396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0178">SUSE bug 872396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0178">SUSE bug 872396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0178">SUSE bug 872396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0178">SUSE bug 872396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0178">SUSE bug 872396</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0179</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="CVE"/>
    <description>
    libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virConnectCompareCPU or (2) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue.  NOTE: this issue was SPLIT per ADT3 due to different affected versions of some vectors. CVE-2014-5177 is used for other API methods.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0179.html">CVE-2014-0179</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0179">SUSE bug 873705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0179">SUSE bug 873705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0179">SUSE bug 873705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0179">SUSE bug 873705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0179">SUSE bug 873705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0179">SUSE bug 873705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0179">SUSE bug 873705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0179">SUSE bug 873705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0179">SUSE bug 873705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0179">SUSE bug 873705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0179">SUSE bug 873705</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0182</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0182" source="CVE"/>
    <description>
    Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted config length in a savevm image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0182.html">CVE-2014-0182</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 874788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 874788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 874788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 874788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 874788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 874788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 874788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 874788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 964693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 964693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 874788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0182">SUSE bug 874788</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0185</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0185" source="CVE"/>
    <description>
    sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0185.html">CVE-2014-0185</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 875826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 875826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 875826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 875826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 875826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 875826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 875826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 875826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 875826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 875826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 875826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0185">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0190</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0190" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0190" source="CVE"/>
    <description>
    The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via invalid width and height values in a GIF image.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0190.html">CVE-2014-0190</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0190">SUSE bug 875470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0190">SUSE bug 875470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0190">SUSE bug 875470</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0191" source="CVE"/>
    <description>
    The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0191.html">CVE-2014-0191</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 877506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 877506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 877506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 877506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 996079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 996079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 996079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 996079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 996079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 996079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0191">SUSE bug 876652</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0195</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195" source="CVE"/>
    <description>
    The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0195.html">CVE-2014-0195</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0195">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0195">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0195">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0195">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0196</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0196" source="CVE"/>
    <description>
    The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO &amp; !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0196.html">CVE-2014-0196</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 871252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 877345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 877345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 876463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 876463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 879878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 875690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0196">SUSE bug 933423</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0198</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0198" source="CVE"/>
    <description>
    The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0198.html">CVE-2014-0198</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 876282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 876282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 876282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 876282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 876282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 876282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 876282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 876282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 915913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 876282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0198">SUSE bug 876282</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0209</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0209" source="CVE"/>
    <description>
    Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0209.html">CVE-2014-0209</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0209">SUSE bug 857544</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139721" comment="libXfont-devel-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151631" comment="libXfont-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139722" comment="libXfont1-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0210" source="CVE"/>
    <description>
    Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_setup, (2) fs_read_open_font, (3) fs_read_query_info, (4) fs_read_extent_info, (5) fs_read_glyphs, (6) fs_read_list, or (7) fs_read_list_info function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0210.html">CVE-2014-0210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0210">SUSE bug 857544</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139721" comment="libXfont-devel-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151631" comment="libXfont-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139722" comment="libXfont1-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0211</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0211" source="CVE"/>
    <description>
    Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0211.html">CVE-2014-0211</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0211">SUSE bug 857544</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139721" comment="libXfont-devel-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151631" comment="libXfont-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139722" comment="libXfont1-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0221</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0221" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221" source="CVE"/>
    <description>
    The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0221.html">CVE-2014-0221</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0221">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0221">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0221">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0221">SUSE bug 883126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0221">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0221">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0222</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0222" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0222" source="CVE"/>
    <description>
    Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0222.html">CVE-2014-0222</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 877642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 964925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 964925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 964925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0222">SUSE bug 964925</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0223</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0223" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0223" source="CVE"/>
    <description>
    Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a large image size, which triggers a buffer overflow or out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0223.html">CVE-2014-0223</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0223">SUSE bug 877645</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0224</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0224" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224" source="CVE"/>
    <description>
    OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0224.html">CVE-2014-0224</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 883126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 892403</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 905018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 914447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 915913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0224">SUSE bug 916239</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0226</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226" source="CVE"/>
    <description>
    Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0226.html">CVE-2014-0226</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0226">SUSE bug 887765</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0231</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0231" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231" source="CVE"/>
    <description>
    The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0231.html">CVE-2014-0231</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0231">SUSE bug 887768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0231">SUSE bug 887768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0231">SUSE bug 887768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0231">SUSE bug 887768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0231">SUSE bug 887768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0231">SUSE bug 887768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0231">SUSE bug 887768</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0237</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="CVE"/>
    <description>
    The cdf_unpack_summary_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (performance degradation) by triggering many file_printf calls.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0237.html">CVE-2014-0237</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0237">SUSE bug 880905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0237">SUSE bug 880905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0237">SUSE bug 880905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0237">SUSE bug 880905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0237">SUSE bug 880905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0237">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0238</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="CVE"/>
    <description>
    The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite loop or out-of-bounds memory access) via a vector that (1) has zero length or (2) is too long.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0238.html">CVE-2014-0238</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0238">SUSE bug 880904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0238">SUSE bug 880904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0238">SUSE bug 880904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0238">SUSE bug 880904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0238">SUSE bug 880904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0238">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0239</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0239" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0239" source="CVE"/>
    <description>
    The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0239.html">CVE-2014-0239</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0239">SUSE bug 878642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0239">SUSE bug 878642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0239">SUSE bug 878642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0239">SUSE bug 878642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0239">SUSE bug 878642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0239">SUSE bug 878642</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0244</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="CVE"/>
    <description>
    The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0244.html">CVE-2014-0244</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0244">SUSE bug 880962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0244">SUSE bug 880962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0244">SUSE bug 880962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0244">SUSE bug 880962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0244">SUSE bug 883758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0244">SUSE bug 880962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0244">SUSE bug 880962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0244">SUSE bug 880962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0244">SUSE bug 880962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0244">SUSE bug 880962</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0247</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0247" source="CVE"/>
    <description>
    LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0247.html">CVE-2014-0247</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0247">SUSE bug 879996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0247">SUSE bug 879996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0247">SUSE bug 879996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0247">SUSE bug 879996</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0250</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0250" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0250" source="CVE"/>
    <description>
    Multiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have an unspecified impact via the width and height to the (1) xf_Pointer_New or (2) xf_Bitmap_Decompress function, which causes an incorrect amount of memory to be allocated.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0250.html">CVE-2014-0250</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0250">SUSE bug 880317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0250">SUSE bug 880317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0250">SUSE bug 880317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0250">SUSE bug 880317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0250">SUSE bug 880317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0250">SUSE bug 880317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0250">SUSE bug 880317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0250">SUSE bug 975218</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0250">SUSE bug 880317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0250">SUSE bug 880317</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139453" comment="freerdp-2.0.0~git.1463131968.4e66df7-2.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139454" comment="libfreerdp2-2.0.0~git.1463131968.4e66df7-2.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140333" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0333</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0333" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0333" source="CVE"/>
    <description>
    The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0333.html">CVE-2014-0333</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0333">SUSE bug 866298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0333">SUSE bug 866298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0333">SUSE bug 866298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0333">SUSE bug 866298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0333">SUSE bug 866298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0333">SUSE bug 866298</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117932" comment="libpng16-16-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117933" comment="libpng16-16-32bit-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117936" comment="libpng16-compat-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117937" comment="libpng16-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0466</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0466" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0466" source="CVE"/>
    <description>
    The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0466.html">CVE-2014-0466</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0466">SUSE bug 871097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0466">SUSE bug 871097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0466">SUSE bug 871097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0466">SUSE bug 871097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0466">SUSE bug 871097</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139188" comment="a2ps-4.14-2.32 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151012" comment="a2ps is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0467</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0467" source="CVE"/>
    <description>
    Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header line, related to address expansion.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0467.html">CVE-2014-0467</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0467">SUSE bug 868115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0467">SUSE bug 868115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0467">SUSE bug 868115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0467">SUSE bug 868115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0467">SUSE bug 868115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0467">SUSE bug 868115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0467">SUSE bug 868115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0467">SUSE bug 868115</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140248" comment="mutt-1.5.24-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152082" comment="mutt is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0475</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="CVE"/>
    <description>
    Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. (dot dot) in a (1) LC_*, (2) LANG, or other locale environment variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0475.html">CVE-2014-0475</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0475">SUSE bug 887022</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0591</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591" source="CVE"/>
    <description>
    The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0591.html">CVE-2014-0591</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0591">SUSE bug 858639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0591">SUSE bug 858639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0591">SUSE bug 858639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0591">SUSE bug 858639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0591">SUSE bug 858639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0591">SUSE bug 858639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0591">SUSE bug 858639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0591">SUSE bug 858639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0591">SUSE bug 858639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0591">SUSE bug 858639</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0593</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0593" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0593" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0593.html">CVE-2014-0593</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0593">SUSE bug 866966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0593">SUSE bug 866966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0593">SUSE bug 866966</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140259" comment="obs-service-set_version-0.5.3-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152083" comment="obs-service-set_version is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20140791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-0791</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0791" source="CVE"/>
    <description>
    Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-0791.html">CVE-2014-0791</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0791">SUSE bug 857491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0791">SUSE bug 857491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0791">SUSE bug 857491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0791">SUSE bug 857491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0791">SUSE bug 857491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0791">SUSE bug 857491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0791">SUSE bug 857491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0791">SUSE bug 857491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0791">SUSE bug 975218</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0791">SUSE bug 857491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-0791">SUSE bug 857491</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139453" comment="freerdp-2.0.0~git.1463131968.4e66df7-2.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139454" comment="libfreerdp2-2.0.0~git.1463131968.4e66df7-2.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141344" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1344</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1344" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1344.html">CVE-2014-1344</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1344">SUSE bug 879607</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1384</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1384" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1384.html">CVE-2014-1384</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1384">SUSE bug 892084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1385</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1385" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1385.html">CVE-2014-1385</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1385">SUSE bug 892084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1386</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1386" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1386.html">CVE-2014-1386</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1386">SUSE bug 892084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1387</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1387" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1387" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1387.html">CVE-2014-1387</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1387">SUSE bug 892084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1388</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1388" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1388.html">CVE-2014-1388</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1388">SUSE bug 892084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1389</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1389" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1389.html">CVE-2014-1389</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1389">SUSE bug 892084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1390</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1390" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1390" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1390.html">CVE-2014-1390</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1390">SUSE bug 892084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1447</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1447" source="CVE"/>
    <description>
    Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1447.html">CVE-2014-1447</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1447">SUSE bug 858817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1447">SUSE bug 858817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1447">SUSE bug 858817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1447">SUSE bug 858817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1447">SUSE bug 858817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1447">SUSE bug 858817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1447">SUSE bug 858817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1447">SUSE bug 858817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1447">SUSE bug 858817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1447">SUSE bug 858817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1447">SUSE bug 858817</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1477</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1477" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1477" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1477.html">CVE-2014-1477</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1477">SUSE bug 862345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1477">SUSE bug 861847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1477">SUSE bug 862345</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1478</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1478" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the MPostWriteBarrier class in js/src/jit/MIR.h and stack alignment in js/src/jit/AsmJS.cpp in OdinMonkey, and unknown other vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1478.html">CVE-2014-1478</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1478">SUSE bug 861847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1479</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1479" source="CVE"/>
    <description>
    The System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent certain cloning operations, which allows remote attackers to bypass intended restrictions on XUL content via vectors involving XBL content scopes.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1479.html">CVE-2014-1479</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1479">SUSE bug 862348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1479">SUSE bug 861847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1479">SUSE bug 862348</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1480</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1480" source="CVE"/>
    <description>
    The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers to conduct clickjacking attacks, and trigger unintended launching of a downloaded file, via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1480.html">CVE-2014-1480</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1480">SUSE bug 861847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1481</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1481" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1481" source="CVE"/>
    <description>
    Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to bypass intended restrictions on window objects by leveraging inconsistency in native getter methods across different JavaScript engines.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1481.html">CVE-2014-1481</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1481">SUSE bug 861847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1481">SUSE bug 862309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1481">SUSE bug 861847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1481">SUSE bug 862309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1481">SUSE bug 862309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1482</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1482" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1482" source="CVE"/>
    <description>
    RasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent access to discarded data, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect write operations) via crafted image data, as demonstrated by Goo Create.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1482.html">CVE-2014-1482</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1482">SUSE bug 862356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1482">SUSE bug 861847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1482">SUSE bug 862356</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1483" source="CVE"/>
    <description>
    Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1483.html">CVE-2014-1483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1483">SUSE bug 862360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1483">SUSE bug 861847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1483">SUSE bug 862360</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1484</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1484" source="CVE"/>
    <description>
    Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1484.html">CVE-2014-1484</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1484">SUSE bug 861847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1485</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1485" source="CVE"/>
    <description>
    The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute arbitrary XSLT code by leveraging insufficient style-src restrictions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1485.html">CVE-2014-1485</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1485">SUSE bug 861847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1486</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1486" source="CVE"/>
    <description>
    Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving unspecified Content-Type values for image data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1486.html">CVE-2014-1486</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1486">SUSE bug 861847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1487</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1487" source="CVE"/>
    <description>
    The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication information via vectors involving error messages.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1487.html">CVE-2014-1487</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1487">SUSE bug 861847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1488</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1488" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1488" source="CVE"/>
    <description>
    The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a worker process that has performed a cross-thread object-passing operation in conjunction with use of asm.js.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1488.html">CVE-2014-1488</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1488">SUSE bug 861847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1489</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1489" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1489" source="CVE"/>
    <description>
    Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1489.html">CVE-2014-1489</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1489">SUSE bug 861847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1490</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1490" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1490" source="CVE"/>
    <description>
    Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement of a session ticket.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1490.html">CVE-2014-1490</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1490">SUSE bug 861847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1490">SUSE bug 862300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1490">SUSE bug 861847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1490">SUSE bug 862300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1490">SUSE bug 862300</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1491</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1491" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1491" source="CVE"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1491.html">CVE-2014-1491</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1491">SUSE bug 861847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1491">SUSE bug 862289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1491">SUSE bug 861847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1491">SUSE bug 862289</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1492</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1492" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1492" source="CVE"/>
    <description>
    The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1492.html">CVE-2014-1492</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1492">SUSE bug 869827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1492">SUSE bug 869827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1492">SUSE bug 869827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1492">SUSE bug 869827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1492">SUSE bug 869827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1492">SUSE bug 869827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1492">SUSE bug 869827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1492">SUSE bug 869827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1492">SUSE bug 869827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1492">SUSE bug 869827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1492">SUSE bug 926974</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1493</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1493" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1493.html">CVE-2014-1493</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1493">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1494</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1494" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1494.html">CVE-2014-1494</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1494">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1497</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1497" source="CVE"/>
    <description>
    The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service (out-of-bounds read and application crash), or possibly have unspecified other impact via a crafted WAV file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1497.html">CVE-2014-1497</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1497">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1498</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1498" source="CVE"/>
    <description>
    The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to cause a denial of service (application crash) via vectors that trigger generation of a key that supports the Elliptic Curve ec-dual-use algorithm.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1498.html">CVE-2014-1498</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1498">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1499</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1499" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1499" source="CVE"/>
    <description>
    Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1499.html">CVE-2014-1499</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1499">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1500</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1500" source="CVE"/>
    <description>
    Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events that trigger background JavaScript execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1500.html">CVE-2014-1500</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1500">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1502</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1502" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1502" source="CVE"/>
    <description>
    The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the Same Origin Policy and render content in a different domain via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1502.html">CVE-2014-1502</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1502">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1504</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1504" source="CVE"/>
    <description>
    The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document that is accessed after a browser restart.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1504.html">CVE-2014-1504</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1504">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1505</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1505" source="CVE"/>
    <description>
    The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-correlation information, and possibly bypass the Same Origin Policy and read text from a different domain, via a timing attack involving feDisplacementMap elements, a related issue to CVE-2013-1693.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1505.html">CVE-2014-1505</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1505">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1508</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1508" source="CVE"/>
    <description>
    The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of service (out-of-bounds read and application crash), or possibly bypass the Same Origin Policy via vectors involving MathML polygon rendering.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1508.html">CVE-2014-1508</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1508">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1509</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1509" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1509" source="CVE"/>
    <description>
    Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1509.html">CVE-2014-1509</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1509">SUSE bug 868603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1509">SUSE bug 869339</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1510</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1510" source="CVE"/>
    <description>
    The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1510.html">CVE-2014-1510</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1510">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1511</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1511" source="CVE"/>
    <description>
    Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1511.html">CVE-2014-1511</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1511">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1512</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1512" source="CVE"/>
    <description>
    Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1512.html">CVE-2014-1512</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1512">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1513</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1513" source="CVE"/>
    <description>
    TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based out-of-bounds write or read) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1513.html">CVE-2014-1513</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1513">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1514</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1514" source="CVE"/>
    <description>
    vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by triggering incorrect use of the TypedArrayObject class.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1514.html">CVE-2014-1514</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1514">SUSE bug 868603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1518</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1518" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1518" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1518.html">CVE-2014-1518</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1518">SUSE bug 875803</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1519</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1519" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1519" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1519.html">CVE-2014-1519</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1522</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1522" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1522" source="CVE"/>
    <description>
    The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via crafted content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1522.html">CVE-2014-1522</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1523</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1523" source="CVE"/>
    <description>
    Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1523.html">CVE-2014-1523</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1523">SUSE bug 875803</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1524</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1524" source="CVE"/>
    <description>
    The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1524.html">CVE-2014-1524</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1524">SUSE bug 875803</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1525</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1525" source="CVE"/>
    <description>
    The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) via a crafted VIDEO element in an HTML document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1525.html">CVE-2014-1525</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1526</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1526" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1526" source="CVE"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operations and calls to DOM methods on the unwrapped objects.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1526.html">CVE-2014-1526</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1528</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1528" source="CVE"/>
    <description>
    The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1528.html">CVE-2014-1528</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1529</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1529" source="CVE"/>
    <description>
    The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page for which Notification.permission is granted.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1529.html">CVE-2014-1529</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1529">SUSE bug 875803</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1530</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1530" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1530" source="CVE"/>
    <description>
    The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting (XSS) attacks, via a crafted web site that performs history navigation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1530.html">CVE-2014-1530</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1530">SUSE bug 875803</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1531</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1531" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving an imgLoader object that is not properly handled during an image-resize operation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1531.html">CVE-2014-1531</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1531">SUSE bug 875803</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1532</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1532" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1532" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1532.html">CVE-2014-1532</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1532">SUSE bug 875803</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1533</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1533" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1533" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1533.html">CVE-2014-1533</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1533">SUSE bug 881874</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1534</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1534" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1534" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1534.html">CVE-2014-1534</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1536</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1536" source="CVE"/>
    <description>
    The PropertyProvider::FindJustificationRange function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1536.html">CVE-2014-1536</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1537</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1537" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::workers::WorkerPrivateParent function in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1537.html">CVE-2014-1537</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1538" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1538.html">CVE-2014-1538</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1539</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1539" source="CVE"/>
    <description>
    Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1539.html">CVE-2014-1539</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1540</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1540" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsEventListenerManager::CompileEventHandlerInternal function in the Event Listener Manager in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1540.html">CVE-2014-1540</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1541</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1541" source="CVE"/>
    <description>
    Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1541.html">CVE-2014-1541</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1542</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1542" source="CVE"/>
    <description>
    Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1542.html">CVE-2014-1542</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1543</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1543" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1543" source="CVE"/>
    <description>
    Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers to execute arbitrary code by using non-contiguous axes with a (1) physical or (2) virtual Gamepad device.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1543.html">CVE-2014-1543</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1544</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1544" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1544" source="CVE"/>
    <description>
    Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, allows remote attackers to execute arbitrary code via vectors that trigger certain improper removal of an NSSCertificate structure from a trust domain.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1544.html">CVE-2014-1544</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1544">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1545</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1545" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1545" source="CVE"/>
    <description>
    Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via vectors involving the sprintf and console functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1545.html">CVE-2014-1545</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140246" comment="mozilla-nspr-4.12-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152084" comment="mozilla-nspr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140247" comment="mozilla-nspr-devel-4.12-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152085" comment="mozilla-nspr-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1547</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1547" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1547.html">CVE-2014-1547</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1548</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1548" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1548" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1548.html">CVE-2014-1548</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1548">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1549</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1549" source="CVE"/>
    <description>
    The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted audio content that is improperly handled during playback buffering.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1549.html">CVE-2014-1549</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1549">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1550</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1550" source="CVE"/>
    <description>
    Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1550.html">CVE-2014-1550</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1550">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1552</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1552" source="CVE"/>
    <description>
    Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1552.html">CVE-2014-1552</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1552">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1553</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1553" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1553.html">CVE-2014-1553</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1553">SUSE bug 894370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1554</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1554" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1554.html">CVE-2014-1554</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1554">SUSE bug 894370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1555</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1555" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors that trigger a FireOnStateChange event.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1555.html">CVE-2014-1555</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1555">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1556</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1556" source="CVE"/>
    <description>
    Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1556.html">CVE-2014-1556</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1556">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141557" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1557</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1557" source="CVE"/>
    <description>
    The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does not properly handle the discarding of image data during function execution, which allows remote attackers to execute arbitrary code by triggering prolonged image scaling, as demonstrated by scaling of a high-quality image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1557.html">CVE-2014-1557</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1557">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1558</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1558" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1558" source="CVE"/>
    <description>
    Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1559.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1558.html">CVE-2014-1558</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1558">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1559</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1559" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1559" source="CVE"/>
    <description>
    Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use UTF-8 character encoding in a required context, a different vulnerability than CVE-2014-1558.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1559.html">CVE-2014-1559</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1559">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1560</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1560" source="CVE"/>
    <description>
    Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (X.509 certificate parsing outage) via a crafted certificate that does not use ASCII character encoding in a required context.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1560.html">CVE-2014-1560</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1560">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1561</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1561" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1561" source="CVE"/>
    <description>
    Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during (1) page, (2) panel, or (3) toolbar customization.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1561.html">CVE-2014-1561</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1561">SUSE bug 887746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1562</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1562" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1562" source="CVE"/>
    <description>
    Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1562.html">CVE-2014-1562</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1562">SUSE bug 894370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1563</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1563" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1563.html">CVE-2014-1563</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1563">SUSE bug 894370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1564</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1564" source="CVE"/>
    <description>
    Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize memory for GIF rendering, which allows remote attackers to obtain sensitive information from process memory via crafted web script that interacts with a CANVAS element associated with a malformed GIF image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1564.html">CVE-2014-1564</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1564">SUSE bug 894370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1565</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1565" source="CVE"/>
    <description>
    The mozilla::dom::AudioEventTimeline function in the Web Audio API implementation in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 does not properly create audio timelines, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted API calls.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1565.html">CVE-2014-1565</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1565">SUSE bug 894370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1567</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1567" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1567" source="CVE"/>
    <description>
    Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 32.0, Firefox ESR 24.x before 24.8 and 31.x before 31.1, and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1567.html">CVE-2014-1567</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1567">SUSE bug 894370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1568</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1568" source="CVE"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1568.html">CVE-2014-1568</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1568">SUSE bug 897890</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1569</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1569" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1569" source="CVE"/>
    <description>
    The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as demonstrated by the SEC_QuickDERDecodeItem function's improper handling of an arbitrary-length encoding of 0x00.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1569.html">CVE-2014-1569</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 913096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 910647</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1569">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1574</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1574" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1574" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1574.html">CVE-2014-1574</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1574">SUSE bug 900941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1574">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1575</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1575" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1575" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to improper interaction between threading and garbage collection in the GCRuntime::triggerGC function in js/src/jsgc.cpp, and unknown other vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1575.html">CVE-2014-1575</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1575">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1576</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1576" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1576" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsTransformedTextRun function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via Cascading Style Sheets (CSS) token sequences that trigger changes to capitalization style.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1576.html">CVE-2014-1576</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1576">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1577</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1577" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1577" source="CVE"/>
    <description>
    The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via an invalid custom waveform that triggers a calculation of a negative frequency value.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1577.html">CVE-2014-1577</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1577">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1578</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1578" source="CVE"/>
    <description>
    The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly execute arbitrary code via WebM frames with invalid tile sizes that are improperly handled in buffering operations during video playback.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1578.html">CVE-2014-1578</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1578">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141580" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1580</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1580" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1580" source="CVE"/>
    <description>
    Mozilla Firefox before 33.0 does not properly initialize memory for GIF images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers a sequence of rendering operations for truncated GIF data within a CANVAS element.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1580.html">CVE-2014-1580</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1580">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1581</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1581" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1581" source="CVE"/>
    <description>
    Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1581.html">CVE-2014-1581</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1581">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141582" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1582</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1582" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1582" source="CVE"/>
    <description>
    The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 does not properly consider the connection-coalescing behavior of SPDY and HTTP/2 in the case of a shared IP address, which allows man-in-the-middle attackers to bypass an intended pinning configuration and spoof a web site by providing a valid certificate from an arbitrary recognized Certification Authority.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1582.html">CVE-2014-1582</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1582">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1583</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1583" source="CVE"/>
    <description>
    The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers to bypass the Same Origin Policy via crafted API calls that access sensitive information within the JSON data of an alarm.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1583.html">CVE-2014-1583</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1583">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1584</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1584" source="CVE"/>
    <description>
    The Public Key Pinning (PKP) implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to presentation of the Untrusted Connection dialog to the user.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1584.html">CVE-2014-1584</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1584">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1585</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1585" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1585" source="CVE"/>
    <description>
    The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not properly recognize Stop Sharing actions for videos in IFRAME elements, which allows remote attackers to obtain sensitive information from the local camera by maintaining a session after the user tries to discontinue streaming.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1585.html">CVE-2014-1585</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1585">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1586</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1586" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1586" source="CVE"/>
    <description>
    content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consider whether WebRTC video sharing is occurring, which allows remote attackers to obtain sensitive information from the local camera in certain IFRAME situations by maintaining a session after the user temporarily navigates away.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1586.html">CVE-2014-1586</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1586">SUSE bug 900941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1587</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1587" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1587.html">CVE-2014-1587</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1587">SUSE bug 908009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1588</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1588" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1588" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1588.html">CVE-2014-1588</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1588">SUSE bug 908009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1589</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1589" source="CVE"/>
    <description>
    Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide stylesheets with an incorrect primary namespace, which allows remote attackers to bypass intended access restrictions via an XBL binding.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1589.html">CVE-2014-1589</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1589">SUSE bug 908009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1590</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1590" source="CVE"/>
    <description>
    The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1590.html">CVE-2014-1590</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1590">SUSE bug 908009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1591</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1591" source="CVE"/>
    <description>
    Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1591.html">CVE-2014-1591</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1591">SUSE bug 908009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1592</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1592" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code by adding a second root element to an HTML5 document during parsing.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1592.html">CVE-2014-1592</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1592">SUSE bug 908009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1593</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1593" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1593" source="CVE"/>
    <description>
    Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to execute arbitrary code via crafted media content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1593.html">CVE-2014-1593</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1593">SUSE bug 908009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1594</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1594" source="CVE"/>
    <description>
    Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers to execute arbitrary code by leveraging an incorrect cast from the BasicThebesLayer data type to the BasicContainerLayer data type.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1594.html">CVE-2014-1594</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1594">SUSE bug 908009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1748</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1748" source="CVE"/>
    <description>
    The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1748.html">CVE-2014-1748</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1748">SUSE bug 909707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1748">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1829</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1829" source="CVE"/>
    <description>
    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1829.html">CVE-2014-1829</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1829">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1829">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1829">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1829">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1829">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1829">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1829">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1829">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1829">SUSE bug 897658</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140316" comment="python-requests-2.11.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154120" comment="python-requests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140330" comment="python3-requests-2.7.0-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152097" comment="python3-requests is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1830" source="CVE"/>
    <description>
    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1830.html">CVE-2014-1830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1830">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1830">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1830">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1830">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1830">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1830">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1830">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1830">SUSE bug 897658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1830">SUSE bug 897658</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140316" comment="python-requests-2.11.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154120" comment="python-requests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140330" comment="python3-requests-2.7.0-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152097" comment="python3-requests is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1875</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1875" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1875" source="CVE"/>
    <description>
    The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1875.html">CVE-2014-1875</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1875">SUSE bug 862743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1875">SUSE bug 862743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1875">SUSE bug 862743</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140290" comment="perl-Capture-Tiny-0.23-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152098" comment="perl-Capture-Tiny is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1909</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1909" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1909" source="CVE"/>
    <description>
    Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1909.html">CVE-2014-1909</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1909">SUSE bug 863074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1909">SUSE bug 863074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1909">SUSE bug 863074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1909">SUSE bug 863074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1909">SUSE bug 863074</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139199" comment="android-tools-5.1.1_r8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152099" comment="android-tools is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1912</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1912" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1912" source="CVE"/>
    <description>
    Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1912.html">CVE-2014-1912</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 882915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 863741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 1049392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 1049392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1912">SUSE bug 1049422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141943" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1943</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1943" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1943" source="CVE"/>
    <description>
    Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1943.html">CVE-2014-1943</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1943">SUSE bug 864343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1943">SUSE bug 864343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1943">SUSE bug 864589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1943">SUSE bug 864589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1943">SUSE bug 864589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1943">SUSE bug 864589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1943">SUSE bug 883306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1943">SUSE bug 883306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1943">SUSE bug 864589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1943">SUSE bug 864589</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20141959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-1959</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-1959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1959" source="CVE"/>
    <description>
    lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-1959.html">CVE-2014-1959</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1959">SUSE bug 863989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1959">SUSE bug 863989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1959">SUSE bug 863989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-1959">SUSE bug 865993</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2240</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2240" source="CVE"/>
    <description>
    Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2240.html">CVE-2014-2240</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2240">SUSE bug 867620</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2240">SUSE bug 867620</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2240">SUSE bug 867620</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2240">SUSE bug 867620</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2240">SUSE bug 867620</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2240">SUSE bug 867620</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2240">SUSE bug 916867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2240">SUSE bug 916867</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2241</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2241" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2241" source="CVE"/>
    <description>
    The (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 do not properly check if a subroutine exists, which allows remote attackers to cause a denial of service (assertion failure), as demonstrated by a crafted ttf file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2241.html">CVE-2014-2241</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2241">SUSE bug 867620</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2241">SUSE bug 867620</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2241">SUSE bug 867620</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2241">SUSE bug 867620</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2241">SUSE bug 867620</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2241">SUSE bug 867620</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2270</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2270" source="CVE"/>
    <description>
    softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE executable.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2270.html">CVE-2014-2270</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 883306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 883306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2270">SUSE bug 866750</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142281" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2281</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2281" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2281" source="CVE"/>
    <description>
    The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted NFS packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2281.html">CVE-2014-2281</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2281">SUSE bug 867485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2282</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2282" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2282" source="CVE"/>
    <description>
    The dissect_protocol_data_parameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted SS7 MTP3 packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2282.html">CVE-2014-2282</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2282">SUSE bug 867485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2283</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2283" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2283" source="CVE"/>
    <description>
    epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a denial of service (use-after-free error and application crash) via a crafted UMTS Radio Link Control packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2283.html">CVE-2014-2283</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2283">SUSE bug 867485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2284</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2284" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2284" source="CVE"/>
    <description>
    The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2284.html">CVE-2014-2284</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 875217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 875217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 875217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 875217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 875217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2284">SUSE bug 866942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140079" comment="libsnmp30-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151706" comment="libsnmp30 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140080" comment="libsnmp30-32bit-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151707" comment="libsnmp30-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140081" comment="net-snmp-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151708" comment="net-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140082" comment="net-snmp-devel-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151709" comment="net-snmp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140083" comment="perl-SNMP-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151710" comment="perl-SNMP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140084" comment="snmp-mibs-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151711" comment="snmp-mibs is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2285</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2285" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2285" source="CVE"/>
    <description>
    The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2285.html">CVE-2014-2285</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2285">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2285">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2285">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2285">SUSE bug 875217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2285">SUSE bug 875217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2285">SUSE bug 875217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2285">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2285">SUSE bug 875217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2285">SUSE bug 866942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2285">SUSE bug 875217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2285">SUSE bug 866942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140079" comment="libsnmp30-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151706" comment="libsnmp30 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140080" comment="libsnmp30-32bit-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151707" comment="libsnmp30-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140081" comment="net-snmp-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151708" comment="net-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140082" comment="net-snmp-devel-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151709" comment="net-snmp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140083" comment="perl-SNMP-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151710" comment="perl-SNMP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140084" comment="snmp-mibs-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151711" comment="snmp-mibs is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2299</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2299" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2299" source="CVE"/>
    <description>
    Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2299.html">CVE-2014-2299</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2299">SUSE bug 867485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2386</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2386" source="CVE"/>
    <description>
    Multiple off-by-one errors in Icinga, possibly 1.10.2 and earlier, allow remote attackers to cause a denial of service (crash) via unspecified vectors to the (1) display_nav_table, (2) print_export_link, (3) page_num_selector, or (4) page_limit_selector function in cgi/cgiutils.c or (5) status_page_num_selector function in cgi/status.c, which triggers a stack-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2386.html">CVE-2014-2386</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2386">SUSE bug 868426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2386">SUSE bug 868426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2386">SUSE bug 868426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2386">SUSE bug 868426</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140244" comment="monitoring-tools-1.13.3-2.41 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151784" comment="monitoring-tools is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2494</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="CVE"/>
    <description>
    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2494.html">CVE-2014-2494</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2494">SUSE bug 887580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2494">SUSE bug 915914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2494">SUSE bug 915914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2494">SUSE bug 915914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2494">SUSE bug 915914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2494">SUSE bug 915914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2494">SUSE bug 915914</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2497</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="CVE"/>
    <description>
    The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2497.html">CVE-2014-2497</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2497">SUSE bug 868624</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2524</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2524" source="CVE"/>
    <description>
    The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2524.html">CVE-2014-2524</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2524">SUSE bug 868822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2524">SUSE bug 868822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2524">SUSE bug 868822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2524">SUSE bug 868822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2524">SUSE bug 868822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2524">SUSE bug 868822</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139289" comment="bash-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152102" comment="bash is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139290" comment="bash-doc-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152103" comment="bash-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139291" comment="bash-lang-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152104" comment="bash-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139292" comment="libreadline6-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152107" comment="libreadline6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139293" comment="readline-devel-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152108" comment="readline-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139294" comment="readline-doc-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152109" comment="readline-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2525</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2525" source="CVE"/>
    <description>
    Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2525.html">CVE-2014-2525</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 911782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2525">SUSE bug 868944</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140234" comment="libyaml-0-2-0.1.6-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151942" comment="libyaml-0-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140295" comment="perl-YAML-LibYAML-0.38-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151687" comment="perl-YAML-LibYAML is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2583</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2583" source="CVE"/>
    <description>
    Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users to create arbitrary files or possibly bypass authentication via a .. (dot dot) in the (1) PAM_RUSER value to the get_ruser function or (2) PAM_TTY value to the check_tty function, which is used by the format_timestamp_name function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2583.html">CVE-2014-2583</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2583">SUSE bug 870433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2583">SUSE bug 870433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2583">SUSE bug 870433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2583">SUSE bug 870433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2583">SUSE bug 870433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2583">SUSE bug 870433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2583">SUSE bug 870433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2583">SUSE bug 870433</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140276" comment="pam-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151504" comment="pam is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140277" comment="pam-32bit-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151505" comment="pam-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140278" comment="pam-devel-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151506" comment="pam-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2653</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2653" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2653" source="CVE"/>
    <description>
    The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2653.html">CVE-2014-2653</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 870532</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 870532</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 870532</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 870532</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 870532</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 870532</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 870532</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 870532</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 870532</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 870532</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2653">SUSE bug 1074631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2667</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2667" source="CVE"/>
    <description>
    Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when exist_ok is set to true and multiple threads are used, might allow local users to bypass intended file permissions by leveraging a separate application vulnerability before the umask has been set to the expected value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2667.html">CVE-2014-2667</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2667">SUSE bug 871152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2667">SUSE bug 871152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2667">SUSE bug 871152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2667">SUSE bug 871152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2667">SUSE bug 871152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2667">SUSE bug 871152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2667">SUSE bug 871152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2667">SUSE bug 871152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2667">SUSE bug 871152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2667">SUSE bug 871152</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2707</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2707" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2707" source="CVE"/>
    <description>
    cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System V interface scripts generated for queues."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2707.html">CVE-2014-2707</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 883543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 883543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 883543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 883543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 937018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2707">SUSE bug 921753</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2855</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2855" source="CVE"/>
    <description>
    The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a user name which does not exist in the secrets file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2855.html">CVE-2014-2855</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2855">SUSE bug 873740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2855">SUSE bug 873740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2855">SUSE bug 873740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2855">SUSE bug 873740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2855">SUSE bug 873740</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140351" comment="rsync-3.1.0-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151567" comment="rsync is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2856</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2856" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2856" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2856.html">CVE-2014-2856</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2856">SUSE bug 873899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2856">SUSE bug 873899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2856">SUSE bug 873899</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142892" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2892</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2892" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2892" source="CVE"/>
    <description>
    Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH) server response.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2892.html">CVE-2014-2892</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2892">SUSE bug 874723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2892">SUSE bug 874723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2892">SUSE bug 874723</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139935" comment="libmms-devel-0.6.4-4.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152112" comment="libmms-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139936" comment="libmms0-0.6.4-4.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152113" comment="libmms0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2907</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2907" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2907" source="CVE"/>
    <description>
    The srtp_add_address function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2907.html">CVE-2014-2907</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2907">SUSE bug 874693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2907">SUSE bug 874760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2907">SUSE bug 874760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2907">SUSE bug 874760</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2977</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2977" source="CVE"/>
    <description>
    Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2977.html">CVE-2014-2977</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2977">SUSE bug 878345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2977">SUSE bug 878345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2977">SUSE bug 878345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2977">SUSE bug 878345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2977">SUSE bug 878345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2977">SUSE bug 878345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2977">SUSE bug 878345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2977">SUSE bug 878345</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139835" comment="libdirectfb-1_7-1-1.7.1-5.31 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152114" comment="libdirectfb-1_7-1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20142978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-2978</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-2978" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2978" source="CVE"/>
    <description>
    The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-2978.html">CVE-2014-2978</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2978">SUSE bug 878349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2978">SUSE bug 878349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2978">SUSE bug 878349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2978">SUSE bug 878349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2978">SUSE bug 878349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2978">SUSE bug 878349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2978">SUSE bug 878349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-2978">SUSE bug 878349</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139835" comment="libdirectfb-1_7-1-1.7.1-5.31 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152114" comment="libdirectfb-1_7-1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3121</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3121" source="CVE"/>
    <description>
    rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3121.html">CVE-2014-3121</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3121">SUSE bug 876101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3121">SUSE bug 876101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3121">SUSE bug 876101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3121">SUSE bug 876101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3121">SUSE bug 876101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3121">SUSE bug 876101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3121">SUSE bug 876101</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140355" comment="rxvt-unicode-9.21-5.26 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151120" comment="rxvt-unicode is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3124</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3124" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3124" source="CVE"/>
    <description>
    The HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary code by leveraging a separate qemu-dm vulnerability to trigger invalid page table translations for unspecified memory page types.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3124.html">CVE-2014-3124</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3124">SUSE bug 875668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3124">SUSE bug 875668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3124">SUSE bug 875668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3124">SUSE bug 880751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3124">SUSE bug 903970</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3158</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3158" source="CVE"/>
    <description>
    Integer overflow in the getword function in options.c in pppd in Paul's PPP Package (ppp) before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "[corrupts] security-relevant variables."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3158.html">CVE-2014-3158</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3158">SUSE bug 891489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3158">SUSE bug 891489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3158">SUSE bug 891489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3158">SUSE bug 891489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3158">SUSE bug 891489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3158">SUSE bug 891489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3158">SUSE bug 891489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3158">SUSE bug 891489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3158">SUSE bug 969773</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140302" comment="ppp-2.4.7-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152115" comment="ppp is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143230" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3230</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3230" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3230" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3230.html">CVE-2014-3230</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3230">SUSE bug 876862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3230">SUSE bug 876862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3230">SUSE bug 876862</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140293" comment="perl-LWP-Protocol-https-6.04-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152116" comment="perl-LWP-Protocol-https is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3421</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3421" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3421" source="CVE"/>
    <description>
    lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3421.html">CVE-2014-3421</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3421">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3421">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3421">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3421">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3421">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3421">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3421">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3421">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3421">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3421">SUSE bug 876847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139405" comment="emacs-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139406" comment="emacs-info-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139407" comment="emacs-nox-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139408" comment="emacs-x11-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151671" comment="emacs-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139409" comment="etags-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3422</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3422" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3422" source="CVE"/>
    <description>
    lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3422.html">CVE-2014-3422</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3422">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3422">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3422">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3422">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3422">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3422">SUSE bug 876847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139405" comment="emacs-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139406" comment="emacs-info-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139407" comment="emacs-nox-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139408" comment="emacs-x11-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151671" comment="emacs-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139409" comment="etags-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3423</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3423" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3423" source="CVE"/>
    <description>
    lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3423.html">CVE-2014-3423</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3423">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3423">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3423">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3423">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3423">SUSE bug 876847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139405" comment="emacs-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139406" comment="emacs-info-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139407" comment="emacs-nox-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139408" comment="emacs-x11-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151671" comment="emacs-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139409" comment="etags-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3424</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3424" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3424" source="CVE"/>
    <description>
    lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3424.html">CVE-2014-3424</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3424">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3424">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3424">SUSE bug 876847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3424">SUSE bug 876847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139405" comment="emacs-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139406" comment="emacs-info-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139407" comment="emacs-nox-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139408" comment="emacs-x11-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151671" comment="emacs-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139409" comment="etags-24.3-20.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3461</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3461" source="CVE"/>
    <description>
    hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3461.html">CVE-2014-3461</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3461">SUSE bug 878541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3461">SUSE bug 878541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3461">SUSE bug 878541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3461">SUSE bug 878541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3461">SUSE bug 878541</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3462</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3462" source="CVE"/>
    <description>
    The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes".
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3462.html">CVE-2014-3462</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3462">SUSE bug 878257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3462">SUSE bug 878257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3462">SUSE bug 878257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3462">SUSE bug 878257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3462">SUSE bug 878257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3462">SUSE bug 878257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3462">SUSE bug 878257</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146987" comment="encfs-1.8.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152117" comment="encfs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146988" comment="encfs-lang-1.8.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152118" comment="encfs-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3466</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3466" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3466" source="CVE"/>
    <description>
    Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3466.html">CVE-2014-3466</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3466">SUSE bug 880730</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3467</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3467.html">CVE-2014-3467</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3467">SUSE bug 880737</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140136" comment="libtasn1-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152119" comment="libtasn1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140137" comment="libtasn1-6-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152120" comment="libtasn1-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140138" comment="libtasn1-6-32bit-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152121" comment="libtasn1-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140139" comment="libtasn1-devel-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152122" comment="libtasn1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3468</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468" source="CVE"/>
    <description>
    The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3468.html">CVE-2014-3468</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3468">SUSE bug 880735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3468">SUSE bug 880735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3468">SUSE bug 880910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3468">SUSE bug 880735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3468">SUSE bug 880735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3468">SUSE bug 880735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3468">SUSE bug 880735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3468">SUSE bug 880735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3468">SUSE bug 880735</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140136" comment="libtasn1-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152119" comment="libtasn1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140137" comment="libtasn1-6-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152120" comment="libtasn1-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140138" comment="libtasn1-6-32bit-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152121" comment="libtasn1-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140139" comment="libtasn1-devel-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152122" comment="libtasn1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3469</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469" source="CVE"/>
    <description>
    The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a NULL value in an ivalue argument.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3469.html">CVE-2014-3469</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3469">SUSE bug 880738</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140136" comment="libtasn1-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152119" comment="libtasn1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140137" comment="libtasn1-6-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152120" comment="libtasn1-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140138" comment="libtasn1-6-32bit-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152121" comment="libtasn1-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140139" comment="libtasn1-devel-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152122" comment="libtasn1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3470</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3470" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470" source="CVE"/>
    <description>
    The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3470.html">CVE-2014-3470</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 880891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 883126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 915913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 885777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3470">SUSE bug 885777</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3477</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3477" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3477" source="CVE"/>
    <description>
    The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing the service, which allows local users to cause a denial of service (initialization failure and exit) or possibly conduct a side-channel attack via a D-Bus message to an inactive service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3477.html">CVE-2014-3477</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3477">SUSE bug 881137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3477">SUSE bug 881137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3477">SUSE bug 881137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3477">SUSE bug 881137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3477">SUSE bug 881137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3477">SUSE bug 1010769</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3493</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="CVE"/>
    <description>
    The push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) via an attempt to read a Unicode pathname without specifying use of Unicode, leading to a character-set conversion failure that triggers an invalid pointer dereference.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3493.html">CVE-2014-3493</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3493">SUSE bug 880962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3493">SUSE bug 883758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3493">SUSE bug 883758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3493">SUSE bug 883758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3493">SUSE bug 883758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3493">SUSE bug 883758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3493">SUSE bug 883758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3493">SUSE bug 883758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3493">SUSE bug 878642</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3494</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3494" source="CVE"/>
    <description>
    kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3494.html">CVE-2014-3494</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3494">SUSE bug 883374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3494">SUSE bug 883374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3494">SUSE bug 883374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3494">SUSE bug 883374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3494">SUSE bug 883374</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139623" comment="kdelibs4-4.14.25-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152123" comment="kdelibs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139624" comment="kdelibs4-core-4.14.25-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152124" comment="kdelibs4-core is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139625" comment="kdelibs4-doc-4.14.25-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152125" comment="kdelibs4-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139626" comment="libkde4-4.14.25-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152126" comment="libkde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139627" comment="libkde4-devel-4.14.25-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152127" comment="libkde4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139628" comment="libkdecore4-4.14.25-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152128" comment="libkdecore4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139629" comment="libkdecore4-devel-4.14.25-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152129" comment="libkdecore4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139630" comment="libksuseinstall1-4.14.25-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152130" comment="libksuseinstall1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3504</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3504" source="CVE"/>
    <description>
    The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7 does not properly handle a NUL byte in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3504.html">CVE-2014-3504</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3504">SUSE bug 890510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3504">SUSE bug 890511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3504">SUSE bug 890510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3504">SUSE bug 890510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3504">SUSE bug 890510</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3504">SUSE bug 890510</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140075" comment="libserf-1-1-1.3.8-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152131" comment="libserf-1-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140076" comment="libserf-devel-1.3.8-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154121" comment="libserf-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3505</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="CVE"/>
    <description>
    Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application crash) via crafted DTLS packets that trigger an error condition.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3505.html">CVE-2014-3505</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3505">SUSE bug 890767</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3506</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="CVE"/>
    <description>
    d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via crafted DTLS handshake messages that trigger memory allocations corresponding to large length values.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3506.html">CVE-2014-3506</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3506">SUSE bug 890768</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3507</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="CVE"/>
    <description>
    Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return value of a certain insert function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3507.html">CVE-2014-3507</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3507">SUSE bug 890769</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3508</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="CVE"/>
    <description>
    The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of '\0' characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3508.html">CVE-2014-3508</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3508">SUSE bug 950708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3509</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3509" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" source="CVE"/>
    <description>
    Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are used, allows remote SSL servers to cause a denial of service (memory overwrite and client application crash) or possibly have unspecified other impact by sending Elliptic Curve (EC) Supported Point Formats Extension data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3509.html">CVE-2014-3509</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3509">SUSE bug 890766</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3510</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="CVE"/>
    <description>
    The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake message in conjunction with a (1) anonymous DH or (2) anonymous ECDH ciphersuite.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3510.html">CVE-2014-3510</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3510">SUSE bug 890770</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3511</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" source="CVE"/>
    <description>
    The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a "protocol downgrade" issue.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3511.html">CVE-2014-3511</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3511">SUSE bug 890771</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3512</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" source="CVE"/>
    <description>
    Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3512.html">CVE-2014-3512</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3512">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3512">SUSE bug 890772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3512">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3512">SUSE bug 890772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3512">SUSE bug 890772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3512">SUSE bug 890772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3512">SUSE bug 890772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3512">SUSE bug 890772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3512">SUSE bug 890772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3512">SUSE bug 890772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3512">SUSE bug 890772</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3513</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513" source="CVE"/>
    <description>
    Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3513.html">CVE-2014-3513</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 902912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 902912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3513">SUSE bug 901277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3522</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3522" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3522" source="CVE"/>
    <description>
    The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3522.html">CVE-2014-3522</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3522">SUSE bug 890511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3522">SUSE bug 890511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3522">SUSE bug 890511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3522">SUSE bug 890511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3522">SUSE bug 890511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3522">SUSE bug 890511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3522">SUSE bug 890511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3522">SUSE bug 890511</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3523</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3523" source="CVE"/>
    <description>
    Memory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the Apache HTTP Server 2.4.x before 2.4.10 on Windows, when the default AcceptFilter is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted requests.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3523.html">CVE-2014-3523</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3524</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3524" source="CVE"/>
    <description>
    Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly have other unspecified impact via a crafted Calc spreadsheet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3524.html">CVE-2014-3524</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3524">SUSE bug 893133</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3524">SUSE bug 893133</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3524">SUSE bug 893133</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3524">SUSE bug 893133</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3524">SUSE bug 893133</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3528</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3528" source="CVE"/>
    <description>
    Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3528.html">CVE-2014-3528</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 889849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 889849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 890511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 889849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 889849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 889849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 889849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 889849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 889849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 889849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 889849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3528">SUSE bug 889849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3532</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3532" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3532" source="CVE"/>
    <description>
    dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other services or applications) by sending a message containing a file descriptor, then exceeding the maximum recursion depth before the initial message is forwarded.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3532.html">CVE-2014-3532</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3532">SUSE bug 885241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3532">SUSE bug 885241</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3533</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3533" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3533" source="CVE"/>
    <description>
    dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3533.html">CVE-2014-3533</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3533">SUSE bug 885241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3533">SUSE bug 885241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3533">SUSE bug 885241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3533">SUSE bug 885241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3533">SUSE bug 885241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3533">SUSE bug 885241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3533">SUSE bug 885241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3533">SUSE bug 885241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3533">SUSE bug 885241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3533">SUSE bug 885241</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3537</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3537" source="CVE"/>
    <description>
    The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3537.html">CVE-2014-3537</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3537">SUSE bug 887240</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3540</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3540" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-0114.  Reason: This candidate is a duplicate of CVE-2014-0114.  CVE abstraction content decisions did not require a second ID.  Notes: All CVE users should reference CVE-2014-0114 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3540.html">CVE-2014-3540</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3540">SUSE bug 885963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3540">SUSE bug 885963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3540">SUSE bug 885963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3540">SUSE bug 885963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3540">SUSE bug 885963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3540">SUSE bug 885963</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139205" comment="apache-commons-beanutils-1.9.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152132" comment="apache-commons-beanutils is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3560</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3560" source="CVE"/>
    <description>
    NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3560.html">CVE-2014-3560</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3560">SUSE bug 889429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3560">SUSE bug 889429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3560">SUSE bug 889429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3560">SUSE bug 889429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3560">SUSE bug 889429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3560">SUSE bug 889429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3560">SUSE bug 889429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3560">SUSE bug 889429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3560">SUSE bug 889429</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3564</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3564" source="CVE"/>
    <description>
    Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3564.html">CVE-2014-3564</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3564">SUSE bug 890123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3564">SUSE bug 890123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3564">SUSE bug 890123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3564">SUSE bug 890123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3564">SUSE bug 890123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3564">SUSE bug 890123</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139566" comment="gpgme-1.6.0-10.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152133" comment="gpgme is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139567" comment="libgpgme-devel-1.6.0-10.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152134" comment="libgpgme-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139568" comment="libgpgme11-1.6.0-10.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152135" comment="libgpgme11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143565" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3565</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="CVE"/>
    <description>
    snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service (snmptrapd crash) via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu trap message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3565.html">CVE-2014-3565</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3565">SUSE bug 894361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3565">SUSE bug 894361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3565">SUSE bug 894361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3565">SUSE bug 894361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3565">SUSE bug 894361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3565">SUSE bug 894361</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140079" comment="libsnmp30-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151706" comment="libsnmp30 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140080" comment="libsnmp30-32bit-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151707" comment="libsnmp30-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140081" comment="net-snmp-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151708" comment="net-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140082" comment="net-snmp-devel-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151709" comment="net-snmp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140083" comment="perl-SNMP-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151710" comment="perl-SNMP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140084" comment="snmp-mibs-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151711" comment="snmp-mibs is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3566</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3566" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566" source="CVE"/>
    <description>
    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3566.html">CVE-2014-3566</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 902476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 902912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 902912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 902229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 902229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 902229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 904889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 902229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 902229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 902229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 914041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 902229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 903405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 1031023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 1031023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 1031023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 1031023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 1031023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 1031023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3566">SUSE bug 901889</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139314" comment="claws-mail-3.13.2-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151767" comment="claws-mail is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139315" comment="claws-mail-lang-3.13.2-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151768" comment="claws-mail-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135893" comment="monit-5.20.0-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152136" comment="monit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135894" comment="monit-doc-5.20.0-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152137" comment="monit-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150925" comment="slrn-1.0.3-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152138" comment="slrn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150926" comment="slrn-lang-1.0.3-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152139" comment="slrn-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3567</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3567" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567" source="CVE"/>
    <description>
    Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3567.html">CVE-2014-3567</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 902912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 902912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 903692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 903690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3567">SUSE bug 877506</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3568</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568" source="CVE"/>
    <description>
    OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3568.html">CVE-2014-3568</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3568">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3568">SUSE bug 901277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3568">SUSE bug 902912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3568">SUSE bug 905106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3568">SUSE bug 911399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3568">SUSE bug 986238</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3570</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3570" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" source="CVE"/>
    <description>
    The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3570.html">CVE-2014-3570</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 920339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 944456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3570">SUSE bug 912296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3571</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" source="CVE"/>
    <description>
    OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3571.html">CVE-2014-3571</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 920339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3571">SUSE bug 912294</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3572</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" source="CVE"/>
    <description>
    The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3572.html">CVE-2014-3572</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 920339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3572">SUSE bug 912015</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3575</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3575" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3575" source="CVE"/>
    <description>
    The OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow remote attackers to embed arbitrary data into documents via crafted OLE objects.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3575.html">CVE-2014-3575</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3575">SUSE bug 893141</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143580" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3580</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3580" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3580" source="CVE"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3580.html">CVE-2014-3580</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 910376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 910376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 910376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 910376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3580">SUSE bug 909935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3581</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3581" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3581" source="CVE"/>
    <description>
    The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3581.html">CVE-2014-3581</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 914956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 914956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 914956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 899836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3581">SUSE bug 914956</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3583</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3583" source="CVE"/>
    <description>
    The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3583.html">CVE-2014-3583</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3587</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3587" source="CVE"/>
    <description>
    Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3587.html">CVE-2014-3587</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 998845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3587">SUSE bug 987530</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3589</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3589" source="CVE"/>
    <description>
    PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3589.html">CVE-2014-3589</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3589">SUSE bug 921566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3589">SUSE bug 921566</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140309" comment="python-Pillow-2.9.0-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152140" comment="python-Pillow is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140310" comment="python-Pillow-tk-2.9.0-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153279" comment="python-Pillow-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3591</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3591" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3591.html">CVE-2014-3591</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 949135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3591">SUSE bug 920057</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139859" comment="libgcrypt-devel-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151920" comment="libgcrypt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139860" comment="libgcrypt20-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139861" comment="libgcrypt20-32bit-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3597</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3597" source="CVE"/>
    <description>
    Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function.  NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3597.html">CVE-2014-3597</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3597">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3598</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3598" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3598" source="CVE"/>
    <description>
    The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3598.html">CVE-2014-3598</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3598">SUSE bug 921566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3598">SUSE bug 921566</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140309" comment="python-Pillow-2.9.0-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152140" comment="python-Pillow is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140310" comment="python-Pillow-tk-2.9.0-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153279" comment="python-Pillow-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3613</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3613" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3613" source="CVE"/>
    <description>
    cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3613.html">CVE-2014-3613</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3613">SUSE bug 894575</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3618</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3618" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3618" source="CVE"/>
    <description>
    Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3618.html">CVE-2014-3618</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 894999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 894999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 894999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 894999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 894999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 898303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 898303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 898303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 898303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 894999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 898303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 898303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 898303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3618">SUSE bug 1068648</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140304" comment="procmail-3.22-268.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152141" comment="procmail is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3620</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3620" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3620" source="CVE"/>
    <description>
    cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3620.html">CVE-2014-3620</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3620">SUSE bug 894575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3620">SUSE bug 895991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3620">SUSE bug 895991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3620">SUSE bug 895991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3620">SUSE bug 895991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3620">SUSE bug 895991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3620">SUSE bug 894575</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3633</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3633" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3633" source="CVE"/>
    <description>
    The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3633.html">CVE-2014-3633</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3633">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3633">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3633">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3633">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3633">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3633">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3633">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3633">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3633">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3633">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3633">SUSE bug 897783</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3634</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3634" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3634" source="CVE"/>
    <description>
    rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3634.html">CVE-2014-3634</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 899756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 899756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 899756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 899756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 899756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 899756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 899756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 899756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 899756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 897262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3634">SUSE bug 899756</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139651" comment="klogd-1.4.1-780.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152142" comment="klogd is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3635</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3635" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3635" source="CVE"/>
    <description>
    Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3635.html">CVE-2014-3635</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3635">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3635">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3635">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3635">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3635">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3635">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3635">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3635">SUSE bug 896453</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3636</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3636" source="CVE"/>
    <description>
    D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3636.html">CVE-2014-3636</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3636">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3636">SUSE bug 904017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3636">SUSE bug 904017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3636">SUSE bug 904017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3636">SUSE bug 904017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3636">SUSE bug 904017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3636">SUSE bug 904017</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3637</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3637" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3637" source="CVE"/>
    <description>
    D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3637.html">CVE-2014-3637</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3637">SUSE bug 896453</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3638</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3638" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3638" source="CVE"/>
    <description>
    The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3638.html">CVE-2014-3638</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3638">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3638">SUSE bug 902912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3638">SUSE bug 903057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3638">SUSE bug 903055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3638">SUSE bug 903055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3638">SUSE bug 903055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3638">SUSE bug 903055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3639</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3639" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3639" source="CVE"/>
    <description>
    The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3639.html">CVE-2014-3639</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 902912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 903057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 896453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 903055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 903055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 903055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3639">SUSE bug 903055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3640</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3640" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3640" source="CVE"/>
    <description>
    The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2014-3640.html">CVE-2014-3640</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 965112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3640">SUSE bug 897654</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3657</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3657" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3657" source="CVE"/>
    <description>
    The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3657.html">CVE-2014-3657</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3657">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3657">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3657">SUSE bug 897783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3657">SUSE bug 899484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3657">SUSE bug 899484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3657">SUSE bug 899484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3657">SUSE bug 899484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3657">SUSE bug 899484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3657">SUSE bug 899484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3657">SUSE bug 899484</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3660</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3660" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3660" source="CVE"/>
    <description>
    parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3660.html">CVE-2014-3660</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3660">SUSE bug 901546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3660">SUSE bug 901546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3660">SUSE bug 901546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3660">SUSE bug 901546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3660">SUSE bug 901546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3660">SUSE bug 901546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3660">SUSE bug 901546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3660">SUSE bug 901546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3660">SUSE bug 901546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3660">SUSE bug 901546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3660">SUSE bug 901546</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3668</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3668" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668" source="CVE"/>
    <description>
    Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) via (1) a crafted first argument to the xmlrpc_set_type function or (2) a crafted argument to the xmlrpc_decode function, related to an out-of-bounds read operation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3668.html">CVE-2014-3668</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3668">SUSE bug 902368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3668">SUSE bug 902368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3668">SUSE bug 902368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3668">SUSE bug 902368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3668">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3668">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3669</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669" source="CVE"/>
    <description>
    Integer overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an argument to the unserialize function that triggers calculation of a large length value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3669.html">CVE-2014-3669</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3669">SUSE bug 902360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3669">SUSE bug 902360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3669">SUSE bug 902360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3669">SUSE bug 902360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3669">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3669">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3670</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670" source="CVE"/>
    <description>
    The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the exif_thumbnail function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3670.html">CVE-2014-3670</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3670">SUSE bug 902357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3670">SUSE bug 902357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3670">SUSE bug 902357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3670">SUSE bug 902357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3670">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3670">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3672</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3672" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3672" source="CVE"/>
    <description>
    The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3672.html">CVE-2014-3672</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3672">SUSE bug 981264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3672">SUSE bug 981264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3672">SUSE bug 981264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3672">SUSE bug 981264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3675</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3675" source="CVE"/>
    <description>
    Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3675.html">CVE-2014-3675</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3675">SUSE bug 889332</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140359" comment="shim-0.9-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152144" comment="shim is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3676</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3676" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3676" source="CVE"/>
    <description>
    Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3676.html">CVE-2014-3676</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3676">SUSE bug 889332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3676">SUSE bug 889332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3676">SUSE bug 889332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3676">SUSE bug 889332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3676">SUSE bug 889332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3676">SUSE bug 889332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3676">SUSE bug 889332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3676">SUSE bug 889332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3676">SUSE bug 889332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3676">SUSE bug 889332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3676">SUSE bug 889332</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140359" comment="shim-0.9-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152144" comment="shim is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3677</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3677" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3677" source="CVE"/>
    <description>
    Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3677.html">CVE-2014-3677</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3677">SUSE bug 889332</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140359" comment="shim-0.9-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152144" comment="shim is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3686</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3686" source="CVE"/>
    <description>
    wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3686.html">CVE-2014-3686</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3686">SUSE bug 900611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3686">SUSE bug 900611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3686">SUSE bug 900611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3686">SUSE bug 900611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3686">SUSE bug 900611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3686">SUSE bug 900611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3686">SUSE bug 900611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3686">SUSE bug 900611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3686">SUSE bug 900611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3686">SUSE bug 900611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3686">SUSE bug 1063667</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140402" comment="wpa_supplicant-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140403" comment="wpa_supplicant-gui-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3693</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3693" source="CVE"/>
    <description>
    Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to TCP port 1599.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3693.html">CVE-2014-3693</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3693">SUSE bug 900214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3693">SUSE bug 900214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3693">SUSE bug 900214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3693">SUSE bug 900214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3693">SUSE bug 900214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3693">SUSE bug 900214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3693">SUSE bug 900214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3693">SUSE bug 900214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3693">SUSE bug 900214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3693">SUSE bug 900214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3693">SUSE bug 900214</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3694</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3694" source="CVE"/>
    <description>
    The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3694.html">CVE-2014-3694</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3694">SUSE bug 902495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3694">SUSE bug 902495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3694">SUSE bug 902495</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3695</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3695" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3695" source="CVE"/>
    <description>
    markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a large length value in an emoticon response.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3695.html">CVE-2014-3695</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3695">SUSE bug 902409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3695">SUSE bug 902409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3695">SUSE bug 902409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3695">SUSE bug 902409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3695">SUSE bug 902409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3695">SUSE bug 902409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3695">SUSE bug 902409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3695">SUSE bug 902409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3695">SUSE bug 902409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3695">SUSE bug 902409</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3696</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3696" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3696" source="CVE"/>
    <description>
    nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server message that triggers a large memory allocation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3696.html">CVE-2014-3696</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3696">SUSE bug 902410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3696">SUSE bug 902410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3696">SUSE bug 902410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3696">SUSE bug 902410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3696">SUSE bug 902410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3696">SUSE bug 902410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3696">SUSE bug 902410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3696">SUSE bug 902410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3696">SUSE bug 902410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3696">SUSE bug 902410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3696">SUSE bug 902410</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3697</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3697" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3697" source="CVE"/>
    <description>
    Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley theme.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3697.html">CVE-2014-3697</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3698</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3698" source="CVE"/>
    <description>
    The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive information from process memory via a crafted XMPP message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3698.html">CVE-2014-3698</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3698">SUSE bug 902408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3698">SUSE bug 902408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3698">SUSE bug 902408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3698">SUSE bug 902408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3698">SUSE bug 902408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3698">SUSE bug 902408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3698">SUSE bug 902408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3698">SUSE bug 902408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3698">SUSE bug 902408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140003" comment="libpurple-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140004" comment="libpurple-lang-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140005" comment="libpurple-meanwhile-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140006" comment="libpurple-tcl-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140007" comment="pidgin-2.10.11-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3707</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3707" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3707" source="CVE"/>
    <description>
    The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3707.html">CVE-2014-3707</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3707">SUSE bug 901924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3707">SUSE bug 901924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3707">SUSE bug 901924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3707">SUSE bug 901924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3707">SUSE bug 901924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3707">SUSE bug 901924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3707">SUSE bug 901924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3707">SUSE bug 901924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3707">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3710</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3710" source="CVE"/>
    <description>
    The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3710.html">CVE-2014-3710</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3710">SUSE bug 902367</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139440" comment="file-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139441" comment="file-devel-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151701" comment="file-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139442" comment="file-magic-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139443" comment="libmagic1-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139444" comment="libmagic1-32bit-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3775</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3775" source="CVE"/>
    <description>
    libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3775.html">CVE-2014-3775</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3775">SUSE bug 878540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3775">SUSE bug 878540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3775">SUSE bug 878540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3775">SUSE bug 878540</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139856" comment="libgadu-devel-1.12.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151951" comment="libgadu-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139857" comment="libgadu3-1.12.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151952" comment="libgadu3 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3970</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3970" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3970" source="CVE"/>
    <description>
    The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2014-3970.html">CVE-2014-3970</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3970">SUSE bug 881524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3970">SUSE bug 881524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3970">SUSE bug 881524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3970">SUSE bug 881524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3970">SUSE bug 881524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3970">SUSE bug 881524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3970">SUSE bug 881524</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139988" comment="libpulse-devel-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152152" comment="libpulse-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139989" comment="libpulse-mainloop-glib0-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152153" comment="libpulse-mainloop-glib0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139990" comment="libpulse0-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152154" comment="libpulse0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139991" comment="libpulse0-32bit-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152155" comment="libpulse0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139992" comment="pulseaudio-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152156" comment="pulseaudio is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139993" comment="pulseaudio-bash-completion-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152157" comment="pulseaudio-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139994" comment="pulseaudio-lang-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152158" comment="pulseaudio-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139995" comment="pulseaudio-module-bluetooth-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152159" comment="pulseaudio-module-bluetooth is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139996" comment="pulseaudio-module-gconf-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152160" comment="pulseaudio-module-gconf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139997" comment="pulseaudio-module-jack-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152161" comment="pulseaudio-module-jack is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139998" comment="pulseaudio-module-lirc-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152162" comment="pulseaudio-module-lirc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139999" comment="pulseaudio-module-x11-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152163" comment="pulseaudio-module-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140000" comment="pulseaudio-module-zeroconf-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152164" comment="pulseaudio-module-zeroconf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140001" comment="pulseaudio-utils-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152165" comment="pulseaudio-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140002" comment="pulseaudio-utils-32bit-9.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154122" comment="pulseaudio-utils-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20143985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-3985</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-3985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3985" source="CVE"/>
    <description>
    The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-3985.html">CVE-2014-3985</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3985">SUSE bug 881990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3985">SUSE bug 881990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3985">SUSE bug 881990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-3985">SUSE bug 881990</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139934" comment="libminiupnpc10-1.9-6.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152166" comment="libminiupnpc10 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4000</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4000" source="CVE"/>
    <description>
    Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object, related to calling unserialize(stripslashes()).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4000.html">CVE-2014-4000</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4000">SUSE bug 1022564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4000">SUSE bug 1022564</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149462" comment="cacti-1.0.4-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149463" comment="cacti-doc-1.0.4-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4020</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4020" source="CVE"/>
    <description>
    The dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in Wireshark 1.10.x before 1.10.8 interprets a negative integer as a length value even though it was intended to represent an error condition, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4020.html">CVE-2014-4020</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4020">SUSE bug 882602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4020">SUSE bug 882602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4020">SUSE bug 882602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4020">SUSE bug 882602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4020">SUSE bug 882602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4020">SUSE bug 882602</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4043</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="CVE"/>
    <description>
    The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4043.html">CVE-2014-4043</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 939797</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4043">SUSE bug 882600</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4049</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="CVE"/>
    <description>
    Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4049.html">CVE-2014-4049</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 882992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 882992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 882992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 882992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 882992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 882992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 882992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 882992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 882992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 893853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4049">SUSE bug 893853</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4207</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207" source="CVE"/>
    <description>
    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4207.html">CVE-2014-4207</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4207">SUSE bug 887580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4207">SUSE bug 915914</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4258</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="CVE"/>
    <description>
    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4258.html">CVE-2014-4258</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4258">SUSE bug 887580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4258">SUSE bug 915914</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4260</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="CVE"/>
    <description>
    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4260.html">CVE-2014-4260</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4260">SUSE bug 887580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4260">SUSE bug 915914</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4274</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4274" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4274.html">CVE-2014-4274</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 857678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 857678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 915913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 857678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 857678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 857678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 857678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 857678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 857678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4274">SUSE bug 896400</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4287</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4287" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4287" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4287.html">CVE-2014-4287</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4287">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4287">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4287">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4336</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4336" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4336" source="CVE"/>
    <description>
    The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host name.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4336.html">CVE-2014-4336</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4336">SUSE bug 883543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4336">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4336">SUSE bug 883543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4336">SUSE bug 883543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4336">SUSE bug 883543</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4337</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4337" source="CVE"/>
    <description>
    The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted packet data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4337.html">CVE-2014-4337</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4337">SUSE bug 883543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4337">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4337">SUSE bug 883543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4337">SUSE bug 883543</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4338</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4338" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4338" source="CVE"/>
    <description>
    cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4338.html">CVE-2014-4338</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4338">SUSE bug 883536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4338">SUSE bug 871327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4338">SUSE bug 883536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4338">SUSE bug 883536</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4341</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4341" source="CVE"/>
    <description>
    MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4341.html">CVE-2014-4341</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4341">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4341">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4341">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4341">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4341">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4341">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4341">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4341">SUSE bug 770172</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4342</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4342" source="CVE"/>
    <description>
    MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4342.html">CVE-2014-4342</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4342">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4342">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4342">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4342">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4342">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4342">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4342">SUSE bug 886016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4342">SUSE bug 770172</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4343</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4343" source="CVE"/>
    <description>
    Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via network traffic that appears to come from an intended acceptor, but specifies a security mechanism different from the one proposed by the initiator.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4343.html">CVE-2014-4343</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4343">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4343">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4343">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4343">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4343">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4343">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4343">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4343">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4343">SUSE bug 770172</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144344" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4344</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4344" source="CVE"/>
    <description>
    The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty continuation token at a certain point during a SPNEGO negotiation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4344.html">CVE-2014-4344</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4344">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4344">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4344">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4344">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4344">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4344">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4344">SUSE bug 888697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4344">SUSE bug 888697</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4345</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="CVE"/>
    <description>
    Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x through 1.11.x before 1.11.6 and 1.12.x before 1.12.2 allows remote authenticated users to cause a denial of service (buffer overflow) or possibly execute arbitrary code via a series of "cpw -keepold" commands.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4345.html">CVE-2014-4345</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4345">SUSE bug 891082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4345">SUSE bug 891082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4345">SUSE bug 891082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4345">SUSE bug 891082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4345">SUSE bug 770172</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4607</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4607" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4607" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4607.html">CVE-2014-4607</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4607">SUSE bug 883947</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139931" comment="liblzo2-2-2.08-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152169" comment="liblzo2-2 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4617</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4617" source="CVE"/>
    <description>
    The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4617.html">CVE-2014-4617</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4617">SUSE bug 884130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4617">SUSE bug 884130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4617">SUSE bug 884130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4617">SUSE bug 884130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4617">SUSE bug 884130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4617">SUSE bug 884130</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139564" comment="gpg2-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139565" comment="gpg2-lang-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4650</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4650" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4650" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4650.html">CVE-2014-4650</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4650">SUSE bug 885882</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140317" comment="python3-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140318" comment="python3-curses-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140319" comment="python3-dbm-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140328" comment="python3-doc-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152174" comment="python3-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140320" comment="python3-tk-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151919" comment="python3-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4670</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="CVE"/>
    <description>
    Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4670.html">CVE-2014-4670</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4670">SUSE bug 886059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4670">SUSE bug 886059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4670">SUSE bug 886059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4670">SUSE bug 886059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4670">SUSE bug 886059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4670">SUSE bug 886059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4670">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4670">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4698</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="CVE"/>
    <description>
    Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted ArrayIterator usage within applications in certain web-hosting environments.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4698.html">CVE-2014-4698</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4698">SUSE bug 886060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4698">SUSE bug 886060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4698">SUSE bug 886060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4698">SUSE bug 886060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4698">SUSE bug 886060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4698">SUSE bug 886060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4698">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144877" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4877</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4877" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4877" source="CVE"/>
    <description>
    Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary files, and consequently execute arbitrary code, via a LIST response that references the same filename within two entries, one of which indicates that the filename is for a symlink.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4877.html">CVE-2014-4877</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 910180</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 910180</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 911056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 911056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 910180</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 910180</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 910180</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 911056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 910180</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 915835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 915835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 915835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 915835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4877">SUSE bug 902709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140399" comment="wget-1.14-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4909</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4909" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4909" source="CVE"/>
    <description>
    Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4909.html">CVE-2014-4909</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4909">SUSE bug 887079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4909">SUSE bug 887079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4909">SUSE bug 887079</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140382" comment="transmission-common-2.84-6.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152179" comment="transmission-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140383" comment="transmission-gtk-2.84-6.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152180" comment="transmission-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140384" comment="transmission-gtk-lang-2.84-6.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152181" comment="transmission-gtk-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4910</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4910" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4910" source="CVE"/>
    <description>
    Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the interface name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4910.html">CVE-2014-4910</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140410" comment="xf86-video-intel-2.99.917.651_g34f63f2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152182" comment="xf86-video-intel is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20144975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-4975</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-4975" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4975" source="CVE"/>
    <description>
    Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-4975.html">CVE-2014-4975</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4975">SUSE bug 887877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4975">SUSE bug 887877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4975">SUSE bug 887877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4975">SUSE bug 887877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4975">SUSE bug 887877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4975">SUSE bug 887877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4975">SUSE bug 887877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4975">SUSE bug 887877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4975">SUSE bug 887877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-4975">SUSE bug 887877</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154826" comment="libruby2_1-2_1-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152217" comment="libruby2_1-2_1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154827" comment="ruby2.1-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152218" comment="ruby2.1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154828" comment="ruby2.1-devel-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152219" comment="ruby2.1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154829" comment="ruby2.1-devel-extra-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154837" comment="ruby2.1-devel-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154830" comment="ruby2.1-doc-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154839" comment="ruby2.1-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154831" comment="ruby2.1-doc-ri-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154841" comment="ruby2.1-doc-ri is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154832" comment="ruby2.1-stdlib-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152220" comment="ruby2.1-stdlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5029</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5029" source="CVE"/>
    <description>
    The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2014-5029.html">CVE-2014-5029</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5029">SUSE bug 887240</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5030</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5030" source="CVE"/>
    <description>
    CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc, or (6) index.py.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2014-5030.html">CVE-2014-5030</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5030">SUSE bug 887240</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5031</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5031" source="CVE"/>
    <description>
    The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2014-5031.html">CVE-2014-5031</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5031">SUSE bug 887240</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5044</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5044" source="CVE"/>
    <description>
    Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5044.html">CVE-2014-5044</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5044">SUSE bug 888791</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139326" comment="cpp48-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152183" comment="cpp48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139327" comment="gcc48-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152184" comment="gcc48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139328" comment="gcc48-c++-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152185" comment="gcc48-c++ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139329" comment="gcc48-fortran-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152186" comment="gcc48-fortran is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139330" comment="gcc48-gij-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152187" comment="gcc48-gij is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139331" comment="gcc48-info-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152188" comment="gcc48-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139332" comment="gcc48-java-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152189" comment="gcc48-java is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139333" comment="gcc48-locale-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152190" comment="gcc48-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139334" comment="gcc48-objc-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152191" comment="gcc48-objc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139335" comment="libasan0-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152192" comment="libasan0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139336" comment="libgcc_s1-gcc48-32bit-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152193" comment="libgcc_s1-gcc48-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139337" comment="libgcj48-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152194" comment="libgcj48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139338" comment="libgcj48-devel-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152195" comment="libgcj48-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139339" comment="libgcj48-jar-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152196" comment="libgcj48-jar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139340" comment="libgcj_bc1-gcc48-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152197" comment="libgcj_bc1-gcc48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139341" comment="libobjc4-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152198" comment="libobjc4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139342" comment="libstdc++48-devel-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152199" comment="libstdc++48-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139343" comment="libstdc++6-gcc48-locale-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152200" comment="libstdc++6-gcc48-locale is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5119</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5119" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119" source="CVE"/>
    <description>
    Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5119.html">CVE-2014-5119</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 892073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 903057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 903057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5119">SUSE bug 920055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5120</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5120" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5120" source="CVE"/>
    <description>
    gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5120.html">CVE-2014-5120</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5120">SUSE bug 893855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5120">SUSE bug 893855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5120">SUSE bug 893855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5120">SUSE bug 893855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5120">SUSE bug 893855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5120">SUSE bug 893855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5120">SUSE bug 1067090</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5139</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5139" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" source="CVE"/>
    <description>
    The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL pointer dereference and client application crash) via a ServerHello message that includes an SRP ciphersuite without the required negotiation of that ciphersuite with the client.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5139.html">CVE-2014-5139</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 886831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5139">SUSE bug 890765</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5146</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5146" source="CVE"/>
    <description>
    Certain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when using Hardware Assisted Paging (HAP), are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5149.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5146.html">CVE-2014-5146</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5146">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5146">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5146">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5146">SUSE bug 903970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5146">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5146">SUSE bug 918998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5146">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5146">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5146">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5146">SUSE bug 889526</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145149" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5149</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5149" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5149" source="CVE"/>
    <description>
    Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5149.html">CVE-2014-5149</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5149">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5149">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5149">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5149">SUSE bug 903970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5149">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5149">SUSE bug 918998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5149">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5149">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5149">SUSE bug 889526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5149">SUSE bug 889526</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5161</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5161" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5161" source="CVE"/>
    <description>
    The dissect_log function in plugins/irda/packet-irda.c in the IrDA dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5161.html">CVE-2014-5161</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5161">SUSE bug 889854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5161">SUSE bug 889901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5161">SUSE bug 889901</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5162</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5162" source="CVE"/>
    <description>
    The read_new_line function in wiretap/catapult_dct2000.c in the Catapult DCT2000 dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' and '\r' characters, which allows remote attackers to cause a denial of service (off-by-one buffer underflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5162.html">CVE-2014-5162</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5162">SUSE bug 889854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5162">SUSE bug 889901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5162">SUSE bug 889901</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5163</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5163" source="CVE"/>
    <description>
    The APN decode functionality in (1) epan/dissectors/packet-gtp.c and (2) epan/dissectors/packet-gsm_a_gm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not completely initialize a certain buffer, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5163.html">CVE-2014-5163</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5163">SUSE bug 889854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5163">SUSE bug 889906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5163">SUSE bug 889906</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5164</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5164" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5164" source="CVE"/>
    <description>
    The rlc_decode_li function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5164.html">CVE-2014-5164</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5164">SUSE bug 889854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5164">SUSE bug 889900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5164">SUSE bug 889900</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5165</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5165" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5165" source="CVE"/>
    <description>
    The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5165.html">CVE-2014-5165</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5165">SUSE bug 889854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5165">SUSE bug 889899</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5165">SUSE bug 889899</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5351</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5351" source="CVE"/>
    <description>
    The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a response to a -randkey -keepold request, which allows remote authenticated users to forge tickets by leveraging administrative access.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5351.html">CVE-2014-5351</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5351">SUSE bug 897874</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5352</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5352" source="CVE"/>
    <description>
    The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via crafted GSSAPI traffic, as demonstrated by traffic to kadmind.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5352.html">CVE-2014-5352</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 1005509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 1005509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 1005509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 770172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5352">SUSE bug 912002</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5353</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5353" source="CVE"/>
    <description>
    The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5353.html">CVE-2014-5353</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5353">SUSE bug 910457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5353">SUSE bug 910457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5353">SUSE bug 910457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5353">SUSE bug 910457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5353">SUSE bug 910457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5353">SUSE bug 910457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5353">SUSE bug 910457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5353">SUSE bug 910457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5353">SUSE bug 910457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5353">SUSE bug 910457</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5354</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5354" source="CVE"/>
    <description>
    plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by creating a database entry for a keyless principal, as demonstrated by a kadmin "add_principal -nokey" or "purgekeys -all" command.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5354.html">CVE-2014-5354</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5354">SUSE bug 910458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5354">SUSE bug 910458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5354">SUSE bug 910458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5354">SUSE bug 910458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5354">SUSE bug 910458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5354">SUSE bug 910458</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5355</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5355" source="CVE"/>
    <description>
    MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote attackers to (1) cause a denial of service (NULL pointer dereference) via a zero-byte version string or (2) cause a denial of service (out-of-bounds read) by omitting the '\0' character, related to appl/user_user/server.c and lib/krb5/krb/recvauth.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5355.html">CVE-2014-5355</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 770172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5355">SUSE bug 918595</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5459</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5459" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5459" source="CVE"/>
    <description>
    The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5459.html">CVE-2014-5459</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 893849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 893849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 893849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 893849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 893849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 893849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 893849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 893849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 893849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 893849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 893849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5459">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20145461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-5461</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5461" source="CVE"/>
    <description>
    Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-5461.html">CVE-2014-5461</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5461">SUSE bug 893824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5461">SUSE bug 893824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5461">SUSE bug 893824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5461">SUSE bug 893824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5461">SUSE bug 893824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-5461">SUSE bug 893824</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139928" comment="liblua5_2-5.2.2-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152201" comment="liblua5_2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139929" comment="lua-5.2.2-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152202" comment="lua is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139930" comment="lua-devel-5.2.2-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152203" comment="lua-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6040</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6040" source="CVE"/>
    <description>
    GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a multibyte character value of "0xffff" to the iconv function when converting (1) IBM933, (2) IBM935, (3) IBM937, (4) IBM939, or (5) IBM1364 encoded data to UTF-8.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6040.html">CVE-2014-6040</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 903057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 903057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 894553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6040">SUSE bug 916222</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6051</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6051" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6051" source="CVE"/>
    <description>
    Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6051.html">CVE-2014-6051</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6051">SUSE bug 897031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6051">SUSE bug 897031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6051">SUSE bug 897031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6051">SUSE bug 900896</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139171" comment="LibVNCServer-devel-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152205" comment="LibVNCServer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139172" comment="libvncclient0-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139173" comment="libvncserver0-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152207" comment="libvncserver0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6052</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6052" source="CVE"/>
    <description>
    The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to cause a denial of service (application crash) or possibly execute arbitrary code by specifying a large screen size in a (1) FramebufferUpdate, (2) ResizeFrameBuffer, or (3) PalmVNCReSizeFrameBuffer message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6052.html">CVE-2014-6052</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6052">SUSE bug 897031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6052">SUSE bug 897031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6052">SUSE bug 897031</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139171" comment="LibVNCServer-devel-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152205" comment="LibVNCServer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139172" comment="libvncclient0-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139173" comment="libvncserver0-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152207" comment="libvncserver0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6053</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6053" source="CVE"/>
    <description>
    The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6053.html">CVE-2014-6053</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6053">SUSE bug 897031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6053">SUSE bug 897031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6053">SUSE bug 897031</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139171" comment="LibVNCServer-devel-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152205" comment="LibVNCServer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139172" comment="libvncclient0-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139173" comment="libvncserver0-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152207" comment="libvncserver0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6054</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6054" source="CVE"/>
    <description>
    The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service (divide-by-zero error and server crash) via a zero value in the scaling factor in a (1) PalmVNCSetScaleFactor or (2) SetScale message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6054.html">CVE-2014-6054</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6054">SUSE bug 897031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6054">SUSE bug 897031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6054">SUSE bug 897031</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139171" comment="LibVNCServer-devel-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152205" comment="LibVNCServer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139172" comment="libvncclient0-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139173" comment="libvncserver0-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152207" comment="libvncserver0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6055</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6055" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6055.html">CVE-2014-6055</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6055">SUSE bug 897031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6055">SUSE bug 897031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6055">SUSE bug 897031</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139171" comment="LibVNCServer-devel-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152205" comment="LibVNCServer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139172" comment="libvncclient0-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152206" comment="libvncclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139173" comment="libvncserver0-0.9.9-13.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152207" comment="libvncserver0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6268</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6268" source="CVE"/>
    <description>
    The evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of service (host crash) via vectors involving an uninitialized FIFO-based event channel control block when (1) binding or (2) moving an event to a different VCPU.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6268.html">CVE-2014-6268</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6268">SUSE bug 895804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6268">SUSE bug 895804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6268">SUSE bug 895804</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6271</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6271" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271" source="CVE"/>
    <description>
    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock."  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6271.html">CVE-2014-6271</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 900127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 900127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 1024628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6271">SUSE bug 870618</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139289" comment="bash-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152102" comment="bash is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139290" comment="bash-doc-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152103" comment="bash-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139291" comment="bash-lang-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152104" comment="bash-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139292" comment="libreadline6-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152107" comment="libreadline6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139293" comment="readline-devel-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152108" comment="readline-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139294" comment="readline-doc-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152109" comment="readline-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6272</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6272" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6272" source="CVE"/>
    <description>
    Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop.  NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6272.html">CVE-2014-6272</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 943011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 947373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 947373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 947373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 947373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 947373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 947373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 943011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 1041410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 897243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6272">SUSE bug 943011</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139845" comment="libevent-2_0-5-2.0.21-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152209" comment="libevent-2_0-5 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6277</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6277" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6277" source="CVE"/>
    <description>
    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write operations) via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271 and CVE-2014-7169.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6277.html">CVE-2014-6277</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6277">SUSE bug 898812</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139289" comment="bash-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152102" comment="bash is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139290" comment="bash-doc-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152103" comment="bash-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139291" comment="bash-lang-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152104" comment="bash-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139292" comment="libreadline6-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152107" comment="libreadline6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139293" comment="readline-devel-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152108" comment="readline-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139294" comment="readline-doc-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152109" comment="readline-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6278</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6278" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6278" source="CVE"/>
    <description>
    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271, CVE-2014-7169, and CVE-2014-6277.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6278.html">CVE-2014-6278</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 900127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6278">SUSE bug 898884</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139289" comment="bash-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152102" comment="bash is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139290" comment="bash-doc-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152103" comment="bash-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139291" comment="bash-lang-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152104" comment="bash-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139292" comment="libreadline6-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152107" comment="libreadline6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139293" comment="readline-devel-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152108" comment="readline-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139294" comment="readline-doc-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152109" comment="readline-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6423</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6423" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6423" source="CVE"/>
    <description>
    The tvb_raw_text_add function in epan/dissectors/packet-megaco.c in the MEGACO dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (infinite loop) via an empty line.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6423.html">CVE-2014-6423</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6423">SUSE bug 897055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6424</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6424" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6424" source="CVE"/>
    <description>
    The dissect_v9_v10_pdu_data function in epan/dissectors/packet-netflow.c in the Netflow dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 refers to incorrect offset and start variables, which allows remote attackers to cause a denial of service (uninitialized memory read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6424.html">CVE-2014-6424</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6424">SUSE bug 897055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6425</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6425" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6425" source="CVE"/>
    <description>
    The (1) get_quoted_string and (2) get_unquoted_string functions in epan/dissectors/packet-cups.c in the CUPS dissector in Wireshark 1.12.x before 1.12.1 allow remote attackers to cause a denial of service (buffer over-read and application crash) via a CUPS packet that lacks a trailing '\0' character.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6425.html">CVE-2014-6425</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6426</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6426" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6426" source="CVE"/>
    <description>
    The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector in Wireshark 1.12.x before 1.12.1 does not properly handle a NULL tree, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6426.html">CVE-2014-6426</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6427</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6427" source="CVE"/>
    <description>
    Off-by-one error in the is_rtsp_request_or_reply function in epan/dissectors/packet-rtsp.c in the RTSP dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet that triggers parsing of a token located one position beyond the current position.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6427.html">CVE-2014-6427</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6427">SUSE bug 897055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6428</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6428" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6428" source="CVE"/>
    <description>
    The dissect_spdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6428.html">CVE-2014-6428</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6428">SUSE bug 897055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6429</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6429" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6429" source="CVE"/>
    <description>
    The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not properly handle empty input data, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6429.html">CVE-2014-6429</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6429">SUSE bug 897055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6430</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6430" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6430" source="CVE"/>
    <description>
    The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not validate bitmask data, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6430.html">CVE-2014-6430</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6430">SUSE bug 897055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6431</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6431" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6431" source="CVE"/>
    <description>
    Buffer overflow in the SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 allows remote attackers to cause a denial of service (application crash) via a crafted file that triggers writes of uncompressed bytes beyond the end of the output buffer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6431.html">CVE-2014-6431</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6431">SUSE bug 897055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6432</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6432" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6432" source="CVE"/>
    <description>
    The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not prevent data overwrites during copy operations, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6432.html">CVE-2014-6432</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6432">SUSE bug 897055</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6463</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6463" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6463.html">CVE-2014-6463</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6463">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6463">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6463">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6464</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6464" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6464.html">CVE-2014-6464</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6464">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6464">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6464">SUSE bug 915912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6464">SUSE bug 915912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6464">SUSE bug 915912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6464">SUSE bug 915912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6464">SUSE bug 915912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6464">SUSE bug 915912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6469</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6469" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6469.html">CVE-2014-6469</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6469">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6469">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6469">SUSE bug 915912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6474</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6474" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6474" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6474.html">CVE-2014-6474</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6474">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6474">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6474">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6478</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6478" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6478.html">CVE-2014-6478</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6478">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6478">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6478">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6484</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6484" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6484.html">CVE-2014-6484</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6484">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6484">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6484">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6489</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6489" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6489" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect integrity and availability via vectors related to SERVER:SP.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6489.html">CVE-2014-6489</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6489">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6489">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6489">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6491</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6491" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6491" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6491.html">CVE-2014-6491</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6491">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6491">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6491">SUSE bug 915912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6494</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6494" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6494.html">CVE-2014-6494</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6494">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6494">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6494">SUSE bug 915912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6495</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6495" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6495.html">CVE-2014-6495</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6495">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6495">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6495">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6496</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6496" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6496" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6496.html">CVE-2014-6496</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6496">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6496">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6496">SUSE bug 915912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6500</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6500" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6500.html">CVE-2014-6500</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6500">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6500">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6500">SUSE bug 915912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6505</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6505" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6505.html">CVE-2014-6505</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6505">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6505">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6505">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6507</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6507" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6507.html">CVE-2014-6507</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6507">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6507">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6507">SUSE bug 915912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6520</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6520" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6520" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6520.html">CVE-2014-6520</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6520">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6520">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6520">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6530</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6530" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6530" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to CLIENT:MYSQLDUMP.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6530.html">CVE-2014-6530</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6530">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6530">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6530">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6551</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6551" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6551" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6551.html">CVE-2014-6551</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6551">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6551">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6551">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6555</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6555" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6555.html">CVE-2014-6555</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6555">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6555">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6555">SUSE bug 915912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6559</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6559" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6559" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6559.html">CVE-2014-6559</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6559">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6559">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6559">SUSE bug 915912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6564</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6564" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6564.html">CVE-2014-6564</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6564">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6564">SUSE bug 901237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6564">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6568</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6568" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6568.html">CVE-2014-6568</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6568">SUSE bug 914058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6568">SUSE bug 915911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6568">SUSE bug 915911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6568">SUSE bug 915911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6568">SUSE bug 915911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6568">SUSE bug 915911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6568">SUSE bug 915911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6568">SUSE bug 915911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6568">SUSE bug 915911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6568">SUSE bug 915911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6568">SUSE bug 915911</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6588</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6588" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6588" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6589, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6588.html">CVE-2014-6588</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6588">SUSE bug 914447</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6589</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6589" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6589.html">CVE-2014-6589</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6589">SUSE bug 914447</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6590</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6590" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6595, and CVE-2015-0427.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6590.html">CVE-2014-6590</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6590">SUSE bug 914447</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20146595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-6595</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-6595" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6595" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2015-0427.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-6595.html">CVE-2014-6595</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-6595">SUSE bug 914447</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7141</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7141" source="CVE"/>
    <description>
    The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7141.html">CVE-2014-7141</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 891268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 891268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 891268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 891268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 891268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 895773</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 891268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 891268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 891268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 891268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 891268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 891268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7141">SUSE bug 1040640</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7142" source="CVE"/>
    <description>
    The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (crash) via a crafted (1) ICMP or (2) ICMP6 packet size.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7142.html">CVE-2014-7142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7142">SUSE bug 895773</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7142">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7142">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7142">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7142">SUSE bug 973782</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7154</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7154" source="CVE"/>
    <description>
    Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain local guest domains to cause a denial of service via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7154.html">CVE-2014-7154</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 895798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 895798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 880751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 880751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 895798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 895798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 895798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 895798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 895798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 895798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 895798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7154">SUSE bug 895798</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7155</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7155" source="CVE"/>
    <description>
    The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service (guest crash) or gain guest kernel mode privileges via vectors involving an (1) HLT, (2) LGDT, (3) LIDT, or (4) LMSW instruction.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7155.html">CVE-2014-7155</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 895799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 895799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 880751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 880751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 895799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 895799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 895799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 895799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 895799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 895799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 895799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 895799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7155">SUSE bug 895799</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7156</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7156" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7156" source="CVE"/>
    <description>
    The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 3.3.x through 4.4.x does not check the supervisor mode permissions for instructions that generate software interrupts, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7156.html">CVE-2014-7156</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 895802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 895802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 880751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 880751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 895802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 895802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 895802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 895802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 895802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 895802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 895802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7156">SUSE bug 895802</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7169</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7169" source="CVE"/>
    <description>
    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7169.html">CVE-2014-7169</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 896776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 900127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 902237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 899266</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 902237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 902237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 926146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 926146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 926146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 926146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 926146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 926146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 926146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 926146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 926146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 926146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 926146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 900127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 900454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 1024628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7169">SUSE bug 870618</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139289" comment="bash-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152102" comment="bash is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139290" comment="bash-doc-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152103" comment="bash-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139291" comment="bash-lang-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152104" comment="bash-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139292" comment="libreadline6-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152107" comment="libreadline6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139293" comment="readline-devel-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152108" comment="readline-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139294" comment="readline-doc-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152109" comment="readline-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7185</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7185" source="CVE"/>
    <description>
    Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7185.html">CVE-2014-7185</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 955182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 955182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 955182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 955182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 955182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 955182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 955182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 898572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 955182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7185">SUSE bug 913479</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7186</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7186" source="CVE"/>
    <description>
    The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7186.html">CVE-2014-7186</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7186">SUSE bug 1024628</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139289" comment="bash-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152102" comment="bash is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139290" comment="bash-doc-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152103" comment="bash-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139291" comment="bash-lang-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152104" comment="bash-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139292" comment="libreadline6-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152107" comment="libreadline6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139293" comment="readline-devel-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152108" comment="readline-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139294" comment="readline-doc-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152109" comment="readline-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7187</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7187" source="CVE"/>
    <description>
    Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7187.html">CVE-2014-7187</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 900057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 898603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7187">SUSE bug 1024628</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139289" comment="bash-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152102" comment="bash is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139290" comment="bash-doc-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152103" comment="bash-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139291" comment="bash-lang-4.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152104" comment="bash-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139292" comment="libreadline6-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152107" comment="libreadline6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139293" comment="readline-devel-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152108" comment="readline-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139294" comment="readline-doc-6.3-79.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152109" comment="readline-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7188</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7188" source="CVE"/>
    <description>
    The hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an improper MSR range for x2APIC emulation, which allows local HVM guests to cause a denial of service (host crash) or read data from the hypervisor or other guests via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7188.html">CVE-2014-7188</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 880751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 880751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 903970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7188">SUSE bug 897657</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7204</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7204" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7204" source="CVE"/>
    <description>
    jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7204.html">CVE-2014-7204</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7204">SUSE bug 899486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7204">SUSE bug 899486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7204">SUSE bug 899486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7204">SUSE bug 899486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7204">SUSE bug 899486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7204">SUSE bug 899486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7204">SUSE bug 899486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7204">SUSE bug 899486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7204">SUSE bug 899486</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139350" comment="ctags-5.8-9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152214" comment="ctags is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7271</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7271" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7271" source="CVE"/>
    <description>
    Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7271.html">CVE-2014-7271</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7271">SUSE bug 897788</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140357" comment="sddm-0.13.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152215" comment="sddm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140358" comment="sddm-branding-openSUSE-0.13.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152216" comment="sddm-branding-openSUSE is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7272</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7272" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7272" source="CVE"/>
    <description>
    Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may have created links in advance (exploitation requires the user to win a race condition in the ~/.Xauthority chown case, but not other cases).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7272.html">CVE-2014-7272</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7272">SUSE bug 897788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7272">SUSE bug 897788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7272">SUSE bug 897788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7272">SUSE bug 897788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7272">SUSE bug 897788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7272">SUSE bug 897788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7272">SUSE bug 897788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7272">SUSE bug 897788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7272">SUSE bug 897788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7272">SUSE bug 897788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7272">SUSE bug 897788</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140357" comment="sddm-0.13.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152215" comment="sddm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140358" comment="sddm-branding-openSUSE-0.13.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152216" comment="sddm-branding-openSUSE is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7300</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7300" source="CVE"/>
    <description>
    GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a temporary lock outage, and the resulting temporary shell availability, caused by the Linux kernel OOM killer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7300.html">CVE-2014-7300</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7300">SUSE bug 900031</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139553" comment="gnome-settings-daemon-3.20.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154123" comment="gnome-settings-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139554" comment="gnome-settings-daemon-lang-3.20.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154124" comment="gnome-settings-daemon-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7815</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7815" source="CVE"/>
    <description>
    The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7815.html">CVE-2014-7815</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 902737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 902737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 902737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 902737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 902737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 902737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 962627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 962627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 962627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 962627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 902737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7815">SUSE bug 902737</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7817</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7817" source="CVE"/>
    <description>
    The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))".
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7817.html">CVE-2014-7817</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7817">SUSE bug 906371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7817">SUSE bug 906371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7817">SUSE bug 906371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7817">SUSE bug 906371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7817">SUSE bug 906371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7817">SUSE bug 906371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7817">SUSE bug 906371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7817">SUSE bug 906371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7817">SUSE bug 906371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7817">SUSE bug 906371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7817">SUSE bug 906371</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7823</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7823" source="CVE"/>
    <description>
    The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7823.html">CVE-2014-7823</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7823">SUSE bug 904176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7823">SUSE bug 904176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7823">SUSE bug 904176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7823">SUSE bug 904176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7823">SUSE bug 904176</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7824</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7824" source="CVE"/>
    <description>
    D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3636.1.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7824.html">CVE-2014-7824</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7824">SUSE bug 904017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7824">SUSE bug 904017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7824">SUSE bug 904017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7824">SUSE bug 904017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7824">SUSE bug 904017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7824">SUSE bug 904017</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7840</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7840" source="CVE"/>
    <description>
    The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7840.html">CVE-2014-7840</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7840">SUSE bug 905097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7840">SUSE bug 905097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7840">SUSE bug 905097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7840">SUSE bug 905097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7840">SUSE bug 905097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7840">SUSE bug 905097</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20147844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-7844</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-7844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7844" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-7844.html">CVE-2014-7844</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7844">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7844">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7844">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7844">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7844">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7844">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7844">SUSE bug 909208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-7844">SUSE bug 909208</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140241" comment="mailx-12.5-23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151013" comment="mailx is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8080</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8080" source="CVE"/>
    <description>
    The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document, aka an XML Entity Expansion (XEE) attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8080.html">CVE-2014-8080</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8080">SUSE bug 902851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8080">SUSE bug 902851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8080">SUSE bug 902851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8080">SUSE bug 902851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8080">SUSE bug 902851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8080">SUSE bug 902851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8080">SUSE bug 902851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8080">SUSE bug 902851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8080">SUSE bug 902851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8080">SUSE bug 902851</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140071" comment="libruby2_1-2_1-2.1.2-7.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152217" comment="libruby2_1-2_1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140072" comment="ruby2.1-2.1.2-7.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152218" comment="ruby2.1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140073" comment="ruby2.1-devel-2.1.2-7.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152219" comment="ruby2.1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140074" comment="ruby2.1-stdlib-2.1.2-7.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152220" comment="ruby2.1-stdlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8090</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8090" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8090" source="CVE"/>
    <description>
    The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nested entity references, aka an XML Entity Expansion (XEE) attack.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1821 and CVE-2014-8080.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8090.html">CVE-2014-8090</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8090">SUSE bug 905326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8090">SUSE bug 905326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8090">SUSE bug 905326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8090">SUSE bug 905326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8090">SUSE bug 905326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8090">SUSE bug 905326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8090">SUSE bug 905326</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140071" comment="libruby2_1-2_1-2.1.2-7.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152217" comment="libruby2_1-2_1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140072" comment="ruby2.1-2.1.2-7.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152218" comment="ruby2.1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140073" comment="ruby2.1-devel-2.1.2-7.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152219" comment="ruby2.1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140074" comment="ruby2.1-stdlib-2.1.2-7.23 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152220" comment="ruby2.1-stdlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8104</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8104" source="CVE"/>
    <description>
    OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8104.html">CVE-2014-8104</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8104">SUSE bug 907764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8104">SUSE bug 907764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8104">SUSE bug 907764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8104">SUSE bug 907764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8104">SUSE bug 907764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8104">SUSE bug 907764</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140270" comment="openvpn-2.3.8-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8106</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8106" source="CVE"/>
    <description>
    Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8106.html">CVE-2014-8106</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8106">SUSE bug 907805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8106">SUSE bug 907805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8106">SUSE bug 907805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8106">SUSE bug 907805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8106">SUSE bug 907805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8106">SUSE bug 907805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8106">SUSE bug 907805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8106">SUSE bug 907805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8106">SUSE bug 907805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8106">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8106">SUSE bug 1023004</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8108</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8108" source="CVE"/>
    <description>
    The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8108.html">CVE-2014-8108</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8108">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8108">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8108">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8108">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8108">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8108">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8108">SUSE bug 909935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8108">SUSE bug 909935</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8109</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8109" source="CVE"/>
    <description>
    mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8109.html">CVE-2014-8109</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8109">SUSE bug 909715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8109">SUSE bug 909715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8109">SUSE bug 909715</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8116</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8116" source="CVE"/>
    <description>
    The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid capabilities.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8116.html">CVE-2014-8116</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 910253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8116">SUSE bug 917152</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139440" comment="file-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139441" comment="file-devel-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151701" comment="file-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139442" comment="file-magic-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139443" comment="libmagic1-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139444" comment="libmagic1-32bit-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167054" comment="python-magic-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167055" comment="python-magic is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8117</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8117" source="CVE"/>
    <description>
    softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8117.html">CVE-2014-8117</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8117">SUSE bug 910252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8117">SUSE bug 910253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8117">SUSE bug 910253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8117">SUSE bug 910253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8117">SUSE bug 910253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8117">SUSE bug 910253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8117">SUSE bug 910253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8117">SUSE bug 910253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8117">SUSE bug 910253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8117">SUSE bug 910253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8117">SUSE bug 917152</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139440" comment="file-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139441" comment="file-devel-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151701" comment="file-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139442" comment="file-magic-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139443" comment="libmagic1-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139444" comment="libmagic1-32bit-5.19-6.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167054" comment="python-magic-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167055" comment="python-magic is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8118</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8118" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8118" source="CVE"/>
    <description>
    Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in the payload section of an RPM file, which triggers a stack-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8118.html">CVE-2014-8118</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 906803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8118">SUSE bug 908128</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009105405" comment="rpm-4.11.2-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151943" comment="rpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009105404" comment="rpm-32bit-4.11.2-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151944" comment="rpm-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009105406" comment="rpm-build-4.11.2-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151945" comment="rpm-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009105407" comment="rpm-devel-4.11.2-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151946" comment="rpm-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8119</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8119" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8119" source="CVE"/>
    <description>
    The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8119.html">CVE-2014-8119</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8119">SUSE bug 925225</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139272" comment="augeas-1.2.0-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154101" comment="augeas is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139273" comment="augeas-lenses-1.2.0-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151682" comment="augeas-lenses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139274" comment="libaugeas0-1.2.0-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151683" comment="libaugeas0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8121</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8121" source="CVE"/>
    <description>
    DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8121.html">CVE-2014-8121</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 939211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 945779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8121">SUSE bug 918187</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8127</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8127" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8127" source="CVE"/>
    <description>
    LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2) compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5) tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7) TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8127.html">CVE-2014-8127</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 942690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8127">SUSE bug 914890</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146601" comment="libtiff-devel-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8128</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8128" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8128.html">CVE-2014-8128</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 942690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8128">SUSE bug 960341</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169670" comment="libtiff-devel-32bit-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8129</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8129" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8129" source="CVE"/>
    <description>
    LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8129.html">CVE-2014-8129</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 942690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8129">SUSE bug 914890</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8130</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8130" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8130" source="CVE"/>
    <description>
    The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8130.html">CVE-2014-8130</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 942690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8130">SUSE bug 914890</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8132</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8132" source="CVE"/>
    <description>
    Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8132.html">CVE-2014-8132</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8132">SUSE bug 910790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8132">SUSE bug 910790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8132">SUSE bug 910790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8132">SUSE bug 910790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8132">SUSE bug 910790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8132">SUSE bug 910790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8132">SUSE bug 910790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8132">SUSE bug 928323</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140104" comment="libssh-devel-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151771" comment="libssh-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140105" comment="libssh4-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8136</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8136" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8136" source="CVE"/>
    <description>
    The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8136.html">CVE-2014-8136</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8136">SUSE bug 910862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8136">SUSE bug 910862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8136">SUSE bug 910862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8136">SUSE bug 910862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8136">SUSE bug 910862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8136">SUSE bug 910862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8136">SUSE bug 910862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8136">SUSE bug 910862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8136">SUSE bug 910862</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8137</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8137" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8137" source="CVE"/>
    <description>
    Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8137.html">CVE-2014-8137</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 909474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 909475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 909474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 909474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 909474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 909474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 909474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 909474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 909474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 909474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8137">SUSE bug 968373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139881" comment="libjasper-devel-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139882" comment="libjasper1-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139883" comment="libjasper1-32bit-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8138</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8138" source="CVE"/>
    <description>
    Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8138.html">CVE-2014-8138</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8138">SUSE bug 909475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8138">SUSE bug 909474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8138">SUSE bug 909475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8138">SUSE bug 909475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8138">SUSE bug 909475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8138">SUSE bug 909475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8138">SUSE bug 909475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8138">SUSE bug 909475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8138">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8138">SUSE bug 909475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8138">SUSE bug 909475</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139881" comment="libjasper-devel-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139882" comment="libjasper1-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139883" comment="libjasper1-32bit-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8139</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8139" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8139" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8139.html">CVE-2014-8139</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 915880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8139">SUSE bug 915880</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140386" comment="unzip-6.00-28.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140387" comment="unzip-doc-6.00-28.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8140</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8140" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8140" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8140.html">CVE-2014-8140</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8140">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8140">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8140">SUSE bug 914442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8140">SUSE bug 915880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8140">SUSE bug 915880</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140386" comment="unzip-6.00-28.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140387" comment="unzip-doc-6.00-28.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8141</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8141" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8141.html">CVE-2014-8141</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8141">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8141">SUSE bug 909214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8141">SUSE bug 915880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8141">SUSE bug 915880</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140386" comment="unzip-6.00-28.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140387" comment="unzip-doc-6.00-28.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8142" source="CVE"/>
    <description>
    Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8142.html">CVE-2014-8142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8142">SUSE bug 910659</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8143" source="CVE"/>
    <description>
    Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8143.html">CVE-2014-8143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8143">SUSE bug 914279</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8146</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8146" source="CVE"/>
    <description>
    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8146.html">CVE-2014-8146</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 927951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 927951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 927951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 959178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 959178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8146">SUSE bug 929629</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163212" comment="icu-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163213" comment="icu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163214" comment="icu-data-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163215" comment="icu-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163216" comment="libicu-devel-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152556" comment="libicu-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163217" comment="libicu-devel-32bit-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163218" comment="libicu-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163219" comment="libicu-doc-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163220" comment="libicu-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163221" comment="libicu52_1-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152557" comment="libicu52_1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163222" comment="libicu52_1-32bit-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163223" comment="libicu52_1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163224" comment="libicu52_1-data-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152558" comment="libicu52_1-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8147</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8147" source="CVE"/>
    <description>
    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8147.html">CVE-2014-8147</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 927951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 927951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 927951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 959178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 959178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 910806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1079317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1079317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1079317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1079317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1079317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1079317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1079317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1079317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 1066493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8147">SUSE bug 929629</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163212" comment="icu-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163213" comment="icu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163214" comment="icu-data-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163215" comment="icu-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163216" comment="libicu-devel-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152556" comment="libicu-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163217" comment="libicu-devel-32bit-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163218" comment="libicu-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163219" comment="libicu-doc-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163220" comment="libicu-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163221" comment="libicu52_1-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152557" comment="libicu52_1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163222" comment="libicu52_1-32bit-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163223" comment="libicu52_1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163224" comment="libicu52_1-data-52.1-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152558" comment="libicu52_1-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8148</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8148" source="CVE"/>
    <description>
    The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signals to any process on the system bus and possibly execute arbitrary code with root privileges.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8148.html">CVE-2014-8148</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8148">SUSE bug 912023</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8150</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8150" source="CVE"/>
    <description>
    CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8150.html">CVE-2014-8150</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8150">SUSE bug 911363</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8157</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8157" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8157" source="CVE"/>
    <description>
    Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8157.html">CVE-2014-8157</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8157">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8157">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8157">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8157">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8157">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8157">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8157">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8157">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8157">SUSE bug 911837</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139881" comment="libjasper-devel-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139882" comment="libjasper1-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139883" comment="libjasper1-32bit-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8158</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8158" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8158.html">CVE-2014-8158</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8158">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8158">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8158">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8158">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8158">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8158">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8158">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8158">SUSE bug 911837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8158">SUSE bug 911837</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139881" comment="libjasper-devel-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139882" comment="libjasper1-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139883" comment="libjasper1-32bit-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8161</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8161" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8161" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8161.html">CVE-2014-8161</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8161">SUSE bug 916953</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8169</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8169" source="CVE"/>
    <description>
    automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home directory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8169.html">CVE-2014-8169</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8169">SUSE bug 917977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8169">SUSE bug 917977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8169">SUSE bug 917977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8169">SUSE bug 917977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8169">SUSE bug 917977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8169">SUSE bug 917977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8169">SUSE bug 917977</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139275" comment="autofs-5.0.9-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152504" comment="autofs is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8240</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8240" source="CVE"/>
    <description>
    Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8240.html">CVE-2014-8240</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8240">SUSE bug 900896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8240">SUSE bug 900896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8240">SUSE bug 900896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8240">SUSE bug 900896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8240">SUSE bug 900896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8240">SUSE bug 900896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8240">SUSE bug 900896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8240">SUSE bug 900896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8240">SUSE bug 900896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8240">SUSE bug 900896</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139747" comment="libXvnc1-1.6.0-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139748" comment="tigervnc-1.6.0-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139749" comment="xorg-x11-Xvnc-1.6.0-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8242</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8242" source="CVE"/>
    <description>
    librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8242.html">CVE-2014-8242</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 922710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 922710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8242">SUSE bug 900914</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140070" comment="librsync2-1.0.0-3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152509" comment="librsync2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140351" comment="rsync-3.1.0-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151567" comment="rsync is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8275</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8275" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" source="CVE"/>
    <description>
    OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8275.html">CVE-2014-8275</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 911906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 911906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 911906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 920339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8275">SUSE bug 912018</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8354</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8354" source="CVE"/>
    <description>
    The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8354.html">CVE-2014-8354</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8354">SUSE bug 903204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8354">SUSE bug 903204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8354">SUSE bug 903204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8354">SUSE bug 903204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8354">SUSE bug 903638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8354">SUSE bug 903204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8354">SUSE bug 903204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8354">SUSE bug 903204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8355</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8355" source="CVE"/>
    <description>
    PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8355.html">CVE-2014-8355</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8355">SUSE bug 903216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8355">SUSE bug 903216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8355">SUSE bug 903216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8355">SUSE bug 903216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8355">SUSE bug 903638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8355">SUSE bug 903216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8355">SUSE bug 903216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8355">SUSE bug 903216</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8483" source="CVE"/>
    <description>
    The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a malformed string.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8483.html">CVE-2014-8483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8483">SUSE bug 902670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8483">SUSE bug 902670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8483">SUSE bug 902670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8483">SUSE bug 902670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8483">SUSE bug 902670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8483">SUSE bug 902670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8483">SUSE bug 902670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8483">SUSE bug 902670</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139652" comment="konversation-1.6.2-1.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152510" comment="konversation is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139653" comment="konversation-lang-1.6.2-1.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152511" comment="konversation-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8484</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8484" source="CVE"/>
    <description>
    The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8484.html">CVE-2014-8484</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8484">SUSE bug 902677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8484">SUSE bug 902677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8484">SUSE bug 902677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8484">SUSE bug 902677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8484">SUSE bug 902677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8484">SUSE bug 902676</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139300" comment="binutils-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139301" comment="binutils-devel-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8485</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8485" source="CVE"/>
    <description>
    The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8485.html">CVE-2014-8485</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8485">SUSE bug 902676</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139300" comment="binutils-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139301" comment="binutils-devel-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8500</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8500" source="CVE"/>
    <description>
    ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8500.html">CVE-2014-8500</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8500">SUSE bug 908994</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8501</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8501" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8501" source="CVE"/>
    <description>
    The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8501.html">CVE-2014-8501</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8501">SUSE bug 903655</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139300" comment="binutils-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139301" comment="binutils-devel-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8502</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8502" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8502" source="CVE"/>
    <description>
    Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a truncated export table in a PE file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8502.html">CVE-2014-8502</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8502">SUSE bug 903655</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139300" comment="binutils-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139301" comment="binutils-devel-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8503</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8503" source="CVE"/>
    <description>
    Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted ihex file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8503.html">CVE-2014-8503</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8503">SUSE bug 903655</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139300" comment="binutils-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139301" comment="binutils-devel-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8504</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8504" source="CVE"/>
    <description>
    Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8504.html">CVE-2014-8504</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8504">SUSE bug 903655</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139300" comment="binutils-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139301" comment="binutils-devel-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8517</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8517" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8517" source="CVE"/>
    <description>
    The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8517.html">CVE-2014-8517</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8517">SUSE bug 903011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8517">SUSE bug 903011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8517">SUSE bug 903011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8517">SUSE bug 903011</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140374" comment="tnftp-20141104-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152514" comment="tnftp is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8562</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8562" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8562" source="CVE"/>
    <description>
    DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8562.html">CVE-2014-8562</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8562">SUSE bug 903638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8562">SUSE bug 903638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8562">SUSE bug 903638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8562">SUSE bug 903638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8562">SUSE bug 903638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8562">SUSE bug 903638</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8564</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8564" source="CVE"/>
    <description>
    The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) Elliptic Curve Cryptography (ECC) certificate or (2) certificate signing requests (CSR), related to generating key IDs.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8564.html">CVE-2014-8564</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8564">SUSE bug 904603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8564">SUSE bug 904603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8564">SUSE bug 904603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8564">SUSE bug 904603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8564">SUSE bug 904603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8564">SUSE bug 904603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8564">SUSE bug 904603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8564">SUSE bug 904603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8564">SUSE bug 904603</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8600" source="CVE"/>
    <description>
    Multiple cross-site scripting (XSS) vulnerabilities in KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via a crafted URI using the (1) zip, (2) trash, (3) tar, (4) thumbnail, (5) smtps, (6) smtp, (7) smb, (8) remote, (9) recentdocuments, (10) nntps, (11) nntp, (12) network, (13) mbox, (14) ldaps, (15) ldap, (16) fonts, (17) file, (18) desktop, (19) cgi, (20) bookmarks, or (21) ar scheme, which is not properly handled in an error message.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8600.html">CVE-2014-8600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8600">SUSE bug 905742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8600">SUSE bug 905742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8600">SUSE bug 905742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8600">SUSE bug 905742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8600">SUSE bug 905742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8600">SUSE bug 905742</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139648" comment="kio-extras5-16.08.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152515" comment="kio-extras5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139649" comment="kwebkitpart-1.3.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152516" comment="kwebkitpart is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139650" comment="kwebkitpart-lang-1.3.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152517" comment="kwebkitpart-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8627</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8627" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8627" source="CVE"/>
    <description>
    PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8627.html">CVE-2014-8627</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8627">SUSE bug 903672</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8627">SUSE bug 903672</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8627">SUSE bug 903672</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8627">SUSE bug 903672</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8627">SUSE bug 903672</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139932" comment="libmbedtls9-1.3.17-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152973" comment="libmbedtls9 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8628</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8628" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8628" source="CVE"/>
    <description>
    Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted X.509 certificates.  NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2014-9744 for the ClientHello message issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8628.html">CVE-2014-8628</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8628">SUSE bug 903672</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139932" comment="libmbedtls9-1.3.17-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152973" comment="libmbedtls9 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8634</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8634" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8634" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8634.html">CVE-2014-8634</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8634">SUSE bug 913064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8634">SUSE bug 913064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8634">SUSE bug 913064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8634">SUSE bug 913096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8634">SUSE bug 913064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8634">SUSE bug 913064</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8635</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8635" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8635" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8635.html">CVE-2014-8635</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8636</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8636" source="CVE"/>
    <description>
    The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8636.html">CVE-2014-8636</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8636">SUSE bug 913102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8636">SUSE bug 913096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8636">SUSE bug 913102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8636">SUSE bug 913102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8636">SUSE bug 913102</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8637</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8637" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8637" source="CVE"/>
    <description>
    Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8637.html">CVE-2014-8637</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8637">SUSE bug 913103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8637">SUSE bug 913096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8637">SUSE bug 913103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8637">SUSE bug 913103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8637">SUSE bug 913103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8638</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8638" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8638" source="CVE"/>
    <description>
    The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 omits the CORS Origin header, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8638.html">CVE-2014-8638</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8638">SUSE bug 913068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8638">SUSE bug 913068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8638">SUSE bug 913068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8638">SUSE bug 913096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8638">SUSE bug 913068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8638">SUSE bug 913068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8638">SUSE bug 913068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8638">SUSE bug 913068</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8639</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8639" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8639" source="CVE"/>
    <description>
    Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 (aka Proxy Authentication Required) status code, which allows remote HTTP proxy servers to conduct session fixation attacks by providing a cookie name that corresponds to the session cookie of the origin server.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8639.html">CVE-2014-8639</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8639">SUSE bug 913066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8639">SUSE bug 913066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8639">SUSE bug 913096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8639">SUSE bug 913066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8639">SUSE bug 913066</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8640</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8640" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8640" source="CVE"/>
    <description>
    The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service (uninitialized-memory read and application crash) via crafted API calls.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8640.html">CVE-2014-8640</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8640">SUSE bug 913104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8640">SUSE bug 913104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8640">SUSE bug 913096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8640">SUSE bug 913104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8640">SUSE bug 913104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8640">SUSE bug 913104</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8641</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8641" source="CVE"/>
    <description>
    Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before 2.32 allows remote attackers to execute arbitrary code via crafted track data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8641.html">CVE-2014-8641</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8641">SUSE bug 913067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8641">SUSE bug 913067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8641">SUSE bug 913067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8641">SUSE bug 913096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8641">SUSE bug 913067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8641">SUSE bug 913067</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8642</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8642" source="CVE"/>
    <description>
    Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck extension in deciding whether to trust an OCSP responder, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which there was an incorrect decision to accept a compromised and revoked certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8642.html">CVE-2014-8642</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8642">SUSE bug 913222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8642">SUSE bug 913222</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8643</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8643" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8643" source="CVE"/>
    <description>
    Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by leveraging access to the GMP process, as demonstrated by the OpenH264 plugin's process.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8643.html">CVE-2014-8643</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8651</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8651" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8651" source="CVE"/>
    <description>
    The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8651.html">CVE-2014-8651</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8651">SUSE bug 904625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8651">SUSE bug 904625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8651">SUSE bug 904625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8651">SUSE bug 904625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8651">SUSE bug 904625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8651">SUSE bug 904625</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140299" comment="plasma5-desktop-5.8.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152518" comment="plasma5-desktop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140300" comment="plasma5-desktop-lang-5.8.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152519" comment="plasma5-desktop-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8710</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8710" source="CVE"/>
    <description>
    The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before 1.10.11 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8710.html">CVE-2014-8710</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8710">SUSE bug 905246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8710">SUSE bug 905246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8710">SUSE bug 905246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8710">SUSE bug 905246</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8711</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8711" source="CVE"/>
    <description>
    Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application crash) via a crafted amqp_0_10 PDU in a packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8711.html">CVE-2014-8711</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8711">SUSE bug 905245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8711">SUSE bug 905245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8711">SUSE bug 905245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8711">SUSE bug 905245</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8712</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8712" source="CVE"/>
    <description>
    The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8712.html">CVE-2014-8712</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8712">SUSE bug 905248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8712">SUSE bug 905248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8712">SUSE bug 905248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8712">SUSE bug 905248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8713</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8713" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8713" source="CVE"/>
    <description>
    Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8713.html">CVE-2014-8713</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8713">SUSE bug 905248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8713">SUSE bug 905248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8713">SUSE bug 905248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8713">SUSE bug 905248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8714</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8714" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8714" source="CVE"/>
    <description>
    The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8714.html">CVE-2014-8714</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8714">SUSE bug 905247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8714">SUSE bug 905247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8714">SUSE bug 905247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8714">SUSE bug 905247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8716</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8716" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8716" source="CVE"/>
    <description>
    The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory access and crash).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8716.html">CVE-2014-8716</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8716">SUSE bug 905260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8716">SUSE bug 905260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8716">SUSE bug 905260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8716">SUSE bug 905260</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8737</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8737" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8737" source="CVE"/>
    <description>
    Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an archive to ar.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8737.html">CVE-2014-8737</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 912408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8737">SUSE bug 905736</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139300" comment="binutils-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139301" comment="binutils-devel-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8738</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8738" source="CVE"/>
    <description>
    The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (invalid write, segmentation fault, and crash) via a crafted extended name table in an archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8738.html">CVE-2014-8738</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8738">SUSE bug 905735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8738">SUSE bug 905735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8738">SUSE bug 905735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8738">SUSE bug 905735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8738">SUSE bug 905735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8738">SUSE bug 905735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8738">SUSE bug 905735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8738">SUSE bug 905735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8738">SUSE bug 905735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8738">SUSE bug 905735</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139300" comment="binutils-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139301" comment="binutils-devel-2.26.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8767</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8767" source="CVE"/>
    <description>
    Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8767.html">CVE-2014-8767</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8767">SUSE bug 905870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8767">SUSE bug 905870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8767">SUSE bug 905870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8767">SUSE bug 905871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8767">SUSE bug 905870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8767">SUSE bug 905870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8767">SUSE bug 905870</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140370" comment="tcpdump-4.5.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8768</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8768" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8768" source="CVE"/>
    <description>
    Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8768.html">CVE-2014-8768</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8768">SUSE bug 905871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8768">SUSE bug 905871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8768">SUSE bug 905871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8768">SUSE bug 905871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8768">SUSE bug 905871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8768">SUSE bug 905871</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140370" comment="tcpdump-4.5.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8769</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8769" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8769" source="CVE"/>
    <description>
    tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8769.html">CVE-2014-8769</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8769">SUSE bug 905872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8769">SUSE bug 905871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8769">SUSE bug 905872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8769">SUSE bug 905872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8769">SUSE bug 905872</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140370" comment="tcpdump-4.5.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8962</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8962" source="CVE"/>
    <description>
    Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8962.html">CVE-2014-8962</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8962">SUSE bug 906831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8962">SUSE bug 906831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8962">SUSE bug 906831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8962">SUSE bug 906831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8962">SUSE bug 906831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8962">SUSE bug 907764</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139445" comment="flac-1.3.0-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152521" comment="flac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139446" comment="flac-devel-1.3.0-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152522" comment="flac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139447" comment="libFLAC++6-1.3.0-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152523" comment="libFLAC++6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139448" comment="libFLAC8-1.3.0-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152524" comment="libFLAC8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139449" comment="libFLAC8-32bit-1.3.0-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152525" comment="libFLAC8-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8964</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8964" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8964" source="CVE"/>
    <description>
    Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8964.html">CVE-2014-8964</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 933288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 936408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8964">SUSE bug 906574</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20148991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-8991</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-8991" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8991" source="CVE"/>
    <description>
    pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-8991.html">CVE-2014-8991</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8991">SUSE bug 907038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8991">SUSE bug 907038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-8991">SUSE bug 907038</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140329" comment="python3-pip-7.1.2-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151932" comment="python3-pip is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9028</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9028" source="CVE"/>
    <description>
    Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9028.html">CVE-2014-9028</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9028">SUSE bug 907016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9028">SUSE bug 907016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9028">SUSE bug 907016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9028">SUSE bug 907016</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139445" comment="flac-1.3.0-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152521" comment="flac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139446" comment="flac-devel-1.3.0-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152522" comment="flac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139447" comment="libFLAC++6-1.3.0-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152523" comment="libFLAC++6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139448" comment="libFLAC8-1.3.0-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152524" comment="libFLAC8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139449" comment="libFLAC8-32bit-1.3.0-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152525" comment="libFLAC8-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9029</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9029" source="CVE"/>
    <description>
    Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9029.html">CVE-2014-9029</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9029">SUSE bug 906364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9029">SUSE bug 906364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9029">SUSE bug 906364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9029">SUSE bug 906364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9029">SUSE bug 906364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9029">SUSE bug 909474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9029">SUSE bug 906364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9029">SUSE bug 906364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9029">SUSE bug 906364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9029">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139881" comment="libjasper-devel-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139882" comment="libjasper1-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139883" comment="libjasper1-32bit-1.900.1-165.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9050</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9050" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9050" source="CVE"/>
    <description>
    Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service (crash) via a crafted y0da Crypter PE file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9050.html">CVE-2014-9050</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9050">SUSE bug 906770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9050">SUSE bug 906770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9050">SUSE bug 906770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9050">SUSE bug 1040662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9087</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9087" source="CVE"/>
    <description>
    Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9087.html">CVE-2014-9087</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9087">SUSE bug 907074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9087">SUSE bug 907074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9087">SUSE bug 907074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9087">SUSE bug 907074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9087">SUSE bug 907074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9087">SUSE bug 907074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9087">SUSE bug 907074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9087">SUSE bug 926826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9087">SUSE bug 996084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139909" comment="libksba8-1.3.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152539" comment="libksba8 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9092</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9092" source="CVE"/>
    <description>
    libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9092.html">CVE-2014-9092</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9092">SUSE bug 906761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9092">SUSE bug 906761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9092">SUSE bug 906761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9092">SUSE bug 906761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9092">SUSE bug 906761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9092">SUSE bug 906761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9092">SUSE bug 906761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9092">SUSE bug 906761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9092">SUSE bug 906761</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139901" comment="libjpeg-turbo-1.3.1-32.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152540" comment="libjpeg-turbo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139902" comment="libjpeg62-62.1.0-32.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152541" comment="libjpeg62 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139903" comment="libjpeg62-devel-62.1.0-32.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152542" comment="libjpeg62-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139904" comment="libjpeg8-8.0.2-32.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152543" comment="libjpeg8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139905" comment="libjpeg8-32bit-8.0.2-32.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152544" comment="libjpeg8-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139906" comment="libturbojpeg0-8.0.2-32.18 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152545" comment="libturbojpeg0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9093</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9093" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9093" source="CVE"/>
    <description>
    LibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write operation and crash) and possibly execute arbitrary code via a crafted RTF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9093.html">CVE-2014-9093</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9093">SUSE bug 907636</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9112</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9112" source="CVE"/>
    <description>
    Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9112.html">CVE-2014-9112</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 907456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 907456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 907456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 907456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 907456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 907456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 907456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 907456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9112">SUSE bug 913479</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139324" comment="cpio-2.11-31.51 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151389" comment="cpio is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139325" comment="cpio-lang-2.11-31.51 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151390" comment="cpio-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9114</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9114" source="CVE"/>
    <description>
    Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9114.html">CVE-2014-9114</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 906725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 908742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 888678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9114">SUSE bug 907434</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139778" comment="libblkid-devel-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151786" comment="libblkid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139779" comment="libblkid1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151787" comment="libblkid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139780" comment="libblkid1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151788" comment="libblkid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139781" comment="libfdisk1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154114" comment="libfdisk1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139782" comment="libmount1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151789" comment="libmount1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139783" comment="libmount1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151790" comment="libmount1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139784" comment="libsmartcols1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151791" comment="libsmartcols1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139785" comment="libuuid-devel-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151792" comment="libuuid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139786" comment="libuuid1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151793" comment="libuuid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139787" comment="libuuid1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151794" comment="libuuid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139788" comment="util-linux-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151795" comment="util-linux is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139789" comment="util-linux-lang-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151796" comment="util-linux-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139790" comment="util-linux-systemd-2.28-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151797" comment="util-linux-systemd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9116</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9116" source="CVE"/>
    <description>
    The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9116.html">CVE-2014-9116</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9116">SUSE bug 907453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9116">SUSE bug 907453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9116">SUSE bug 907453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9116">SUSE bug 907453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9116">SUSE bug 907453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9116">SUSE bug 907453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9116">SUSE bug 907453</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140248" comment="mutt-1.5.24-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152082" comment="mutt is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9130</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9130" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9130" source="CVE"/>
    <description>
    scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9130.html">CVE-2014-9130</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9130">SUSE bug 907809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9130">SUSE bug 907809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9130">SUSE bug 907809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9130">SUSE bug 907809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9130">SUSE bug 911782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9130">SUSE bug 907809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9130">SUSE bug 907809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9130">SUSE bug 921588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9130">SUSE bug 907809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9130">SUSE bug 907809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140234" comment="libyaml-0-2-0.1.6-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151942" comment="libyaml-0-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140295" comment="perl-YAML-LibYAML-0.38-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151687" comment="perl-YAML-LibYAML is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9140</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9140" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9140" source="CVE"/>
    <description>
    Buffer overflow in the ppp_hdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a denial of service (crash) cia a crafted PPP packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9140.html">CVE-2014-9140</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9140">SUSE bug 923142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9140">SUSE bug 923142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9140">SUSE bug 923142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9140">SUSE bug 923142</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140370" comment="tcpdump-4.5.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9157</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9157" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9157" source="CVE"/>
    <description>
    Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9157.html">CVE-2014-9157</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9157">SUSE bug 908426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9157">SUSE bug 908426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9157">SUSE bug 908426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9157">SUSE bug 908426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9157">SUSE bug 908426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9157">SUSE bug 908426</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167846" comment="graphviz-2.38.0-4.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167847" comment="graphviz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167848" comment="graphviz-devel-2.38.0-4.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167849" comment="graphviz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167850" comment="graphviz-doc-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167851" comment="graphviz-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167852" comment="graphviz-gd-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167853" comment="graphviz-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167854" comment="graphviz-gnome-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167855" comment="graphviz-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167856" comment="graphviz-guile-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167857" comment="graphviz-guile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167858" comment="graphviz-gvedit-2.38.0-4.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167859" comment="graphviz-gvedit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167860" comment="graphviz-java-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167861" comment="graphviz-java is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167862" comment="graphviz-lua-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167863" comment="graphviz-lua is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167864" comment="graphviz-perl-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167865" comment="graphviz-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167866" comment="graphviz-php-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167867" comment="graphviz-php is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167868" comment="graphviz-plugins-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167869" comment="graphviz-plugins is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167870" comment="graphviz-python-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167871" comment="graphviz-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167872" comment="graphviz-ruby-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167873" comment="graphviz-ruby is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167874" comment="graphviz-smyrna-2.38.0-4.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167875" comment="graphviz-smyrna is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167876" comment="graphviz-tcl-2.38.0-4.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167877" comment="graphviz-tcl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9293</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9293" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9293" source="CVE"/>
    <description>
    The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9293.html">CVE-2014-9293</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9293">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9293">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9293">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9293">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9293">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9293">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9293">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9293">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9293">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9293">SUSE bug 959243</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9294</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9294" source="CVE"/>
    <description>
    util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9294.html">CVE-2014-9294</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9294">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9294">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9294">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9294">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9294">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9294">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9294">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9294">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9294">SUSE bug 959243</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9295</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9295" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9295.html">CVE-2014-9295</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 912826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 883859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 912826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 916239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 912826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9295">SUSE bug 959243</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9296</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9296" source="CVE"/>
    <description>
    The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended association change via crafted packets.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9296.html">CVE-2014-9296</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9296">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9296">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9296">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9296">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9296">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9296">SUSE bug 910764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9296">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9296">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9296">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9297</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9297" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9297" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9750, CVE-2014-9751.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9297.html">CVE-2014-9297</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 948963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9297">SUSE bug 911792</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149298" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9298</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9298" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9298" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9750, CVE-2014-9751.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9298.html">CVE-2014-9298</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 948963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9298">SUSE bug 911792</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9328</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9328" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9328" source="CVE"/>
    <description>
    ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9328.html">CVE-2014-9328</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9328">SUSE bug 915512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9328">SUSE bug 915512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9328">SUSE bug 915512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9328">SUSE bug 915512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9328">SUSE bug 915512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9328">SUSE bug 1040662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9328">SUSE bug 915512</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9390</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9390" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9390" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9390.html">CVE-2014-9390</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 910756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 910756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 910756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 910756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 910756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 925040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 925040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 925040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 910756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 910756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 910756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9390">SUSE bug 925040</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139494" comment="git-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151600" comment="git is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139495" comment="git-core-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151601" comment="git-core is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139496" comment="git-cvs-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151602" comment="git-cvs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139497" comment="git-daemon-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151603" comment="git-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139498" comment="git-email-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151604" comment="git-email is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139499" comment="git-gui-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151605" comment="git-gui is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139500" comment="git-svn-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151606" comment="git-svn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139501" comment="git-web-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151607" comment="git-web is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139502" comment="gitk-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151608" comment="gitk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9402</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9402" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9402" source="CVE"/>
    <description>
    The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9402.html">CVE-2014-9402</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9402">SUSE bug 910599</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9421</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9421" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9421" source="CVE"/>
    <description>
    The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly handle partial XDR deserialization, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via malformed XDR data, as demonstrated by data sent to kadmind.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9421.html">CVE-2014-9421</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 1005509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 770172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9421">SUSE bug 912002</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9422</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9422" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9422" source="CVE"/>
    <description>
    The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9422.html">CVE-2014-9422</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 1005509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 770172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9422">SUSE bug 912002</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9423</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9423" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9423" source="CVE"/>
    <description>
    The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9423.html">CVE-2014-9423</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 1005509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9423">SUSE bug 912002</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9427</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9427" source="CVE"/>
    <description>
    sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9427.html">CVE-2014-9427</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9427">SUSE bug 911664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9427">SUSE bug 911664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9427">SUSE bug 911664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9427">SUSE bug 911664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9427">SUSE bug 911664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9427">SUSE bug 911664</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9447</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9447" source="CVE"/>
    <description>
    Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9447.html">CVE-2014-9447</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 912408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 912408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 911662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9447">SUSE bug 912408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139400" comment="elfutils-0.158-10.50 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152057" comment="elfutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139401" comment="libasm1-0.158-10.50 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152058" comment="libasm1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139402" comment="libdw1-0.158-10.50 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152059" comment="libdw1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139403" comment="libelf1-0.158-10.50 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152060" comment="libelf1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139404" comment="libelf1-32bit-0.158-10.50 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152061" comment="libelf1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9449</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9449" source="CVE"/>
    <description>
    Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9449.html">CVE-2014-9449</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139431" comment="exiv2-0.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139432" comment="exiv2-lang-0.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139433" comment="libexiv2-14-0.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152551" comment="libexiv2-14 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139434" comment="libexiv2-devel-0.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9474</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9474" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9474" source="CVE"/>
    <description>
    Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpn_set_str.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9474.html">CVE-2014-9474</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9474">SUSE bug 911812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9474">SUSE bug 911812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9474">SUSE bug 911812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9474">SUSE bug 911812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9474">SUSE bug 911812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9474">SUSE bug 911812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9474">SUSE bug 911812</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139938" comment="libmpfr4-3.1.2-11.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152553" comment="libmpfr4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139939" comment="mpfr-devel-3.1.2-11.53 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152554" comment="mpfr-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9495</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9495" source="CVE"/>
    <description>
    Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9495.html">CVE-2014-9495</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9495">SUSE bug 912076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9495">SUSE bug 912076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9495">SUSE bug 912076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9495">SUSE bug 912076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9495">SUSE bug 912929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9495">SUSE bug 912076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9495">SUSE bug 912076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9495">SUSE bug 912076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9495">SUSE bug 912076</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117932" comment="libpng16-16-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117933" comment="libpng16-16-32bit-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117936" comment="libpng16-compat-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117937" comment="libpng16-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9496</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9496" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9496" source="CVE"/>
    <description>
    The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9496.html">CVE-2014-9496</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9496">SUSE bug 911796</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119287" comment="libsndfile-devel-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119271" comment="libsndfile1-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119272" comment="libsndfile1-32bit-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9512</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9512" source="CVE"/>
    <description>
    rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9512.html">CVE-2014-9512</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 960191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 960191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 960191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9512">SUSE bug 915410</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140351" comment="rsync-3.1.0-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151567" comment="rsync is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9556</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9556" source="CVE"/>
    <description>
    Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9556.html">CVE-2014-9556</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 919283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 919283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 919283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 919283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 934533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 919283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 919283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 919283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 919283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 919283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9556">SUSE bug 919283</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139940" comment="libmspack0-0.5-5.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151459" comment="libmspack0 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9620</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9620" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9620" source="CVE"/>
    <description>
    The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9620.html">CVE-2014-9620</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9620">SUSE bug 913651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9620">SUSE bug 913651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9620">SUSE bug 913651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9620">SUSE bug 913651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9620">SUSE bug 913651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9620">SUSE bug 913651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9620">SUSE bug 913651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9620">SUSE bug 913651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9620">SUSE bug 917152</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167056" comment="file-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167057" comment="file-devel-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151701" comment="file-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167058" comment="file-magic-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167059" comment="libmagic1-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167060" comment="libmagic1-32bit-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167054" comment="python-magic-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167055" comment="python-magic is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9621</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9621" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9621" source="CVE"/>
    <description>
    The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9621.html">CVE-2014-9621</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9621">SUSE bug 913650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9621">SUSE bug 913650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9621">SUSE bug 913650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9621">SUSE bug 913650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9621">SUSE bug 913650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9621">SUSE bug 913650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9621">SUSE bug 913650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9621">SUSE bug 913650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9621">SUSE bug 917152</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167056" comment="file-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167057" comment="file-devel-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151701" comment="file-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167058" comment="file-magic-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167059" comment="libmagic1-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167060" comment="libmagic1-32bit-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167054" comment="python-magic-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167055" comment="python-magic is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9636</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9636" source="CVE"/>
    <description>
    unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9636.html">CVE-2014-9636</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9636">SUSE bug 914442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9636">SUSE bug 914442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9636">SUSE bug 914442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9636">SUSE bug 914442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9636">SUSE bug 914442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9636">SUSE bug 914442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9636">SUSE bug 914442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9636">SUSE bug 914442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9636">SUSE bug 914442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9636">SUSE bug 914442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9636">SUSE bug 914442</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140386" comment="unzip-6.00-28.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152223" comment="unzip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140387" comment="unzip-doc-6.00-28.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152224" comment="unzip-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9638</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9638" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9638" source="CVE"/>
    <description>
    oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9638.html">CVE-2014-9638</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9638">SUSE bug 914439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9638">SUSE bug 914439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9638">SUSE bug 914441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9638">SUSE bug 914439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9638">SUSE bug 914439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9638">SUSE bug 914439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9638">SUSE bug 914439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9638">SUSE bug 914439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9638">SUSE bug 914439</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140395" comment="vorbis-tools-1.4.0-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151128" comment="vorbis-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140396" comment="vorbis-tools-lang-1.4.0-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151129" comment="vorbis-tools-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9639</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9639" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9639" source="CVE"/>
    <description>
    Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9639.html">CVE-2014-9639</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9639">SUSE bug 914441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9639">SUSE bug 914439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9639">SUSE bug 914441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9639">SUSE bug 914439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9639">SUSE bug 914441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9639">SUSE bug 914441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9639">SUSE bug 914441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9639">SUSE bug 914441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9639">SUSE bug 914441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9639">SUSE bug 914441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9639">SUSE bug 1081744</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140395" comment="vorbis-tools-1.4.0-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151128" comment="vorbis-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140396" comment="vorbis-tools-lang-1.4.0-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151129" comment="vorbis-tools-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9640</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9640" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9640" source="CVE"/>
    <description>
    oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9640.html">CVE-2014-9640</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9640">SUSE bug 914938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9640">SUSE bug 914938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9640">SUSE bug 914938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9640">SUSE bug 914938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9640">SUSE bug 914938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9640">SUSE bug 912214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9640">SUSE bug 919283</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140395" comment="vorbis-tools-1.4.0-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151128" comment="vorbis-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140396" comment="vorbis-tools-lang-1.4.0-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151129" comment="vorbis-tools-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9645</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9645" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9645" source="CVE"/>
    <description>
    The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /snd_pcm none /" command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9645.html">CVE-2014-9645</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9645">SUSE bug 914660</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139307" comment="busybox-1.21.1-6.20 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152555" comment="busybox is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9652</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9652" source="CVE"/>
    <description>
    The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9652.html">CVE-2014-9652</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9652">SUSE bug 917150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9652">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9652">SUSE bug 917150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9652">SUSE bug 917150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9652">SUSE bug 917150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9652">SUSE bug 917302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9652">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9653</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9653" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9653" source="CVE"/>
    <description>
    readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9653.html">CVE-2014-9653</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9653">SUSE bug 917152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9653">SUSE bug 917152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9653">SUSE bug 917152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9653">SUSE bug 917152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9653">SUSE bug 917152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9653">SUSE bug 917152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9653">SUSE bug 917152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9653">SUSE bug 917152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9653">SUSE bug 917152</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167056" comment="file-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151700" comment="file is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167057" comment="file-devel-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151701" comment="file-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167058" comment="file-magic-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151702" comment="file-magic is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167059" comment="libmagic1-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151703" comment="libmagic1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167060" comment="libmagic1-32bit-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151704" comment="libmagic1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167054" comment="python-magic-5.22-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167055" comment="python-magic is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9654</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9654" source="CVE"/>
    <description>
    The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted string, a related issue to CVE-2014-7923.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9654.html">CVE-2014-9654</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 929629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 917129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 952260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9654">SUSE bug 969781</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139873" comment="libicu-devel-52.1-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152556" comment="libicu-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139874" comment="libicu52_1-52.1-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152557" comment="libicu52_1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139875" comment="libicu52_1-data-52.1-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152558" comment="libicu52_1-data is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9655</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9655" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9655" source="CVE"/>
    <description>
    The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9655.html">CVE-2014-9655</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9655">SUSE bug 916927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9655">SUSE bug 916927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9655">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9655">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9655">SUSE bug 916927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9655">SUSE bug 916927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9655">SUSE bug 916927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9655">SUSE bug 916927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9655">SUSE bug 916927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9655">SUSE bug 916927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9655">SUSE bug 916927</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9656</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9656" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9656" source="CVE"/>
    <description>
    The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenType font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9656.html">CVE-2014-9656</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9656">SUSE bug 916847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9656">SUSE bug 916847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9656">SUSE bug 916847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9656">SUSE bug 916847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9656">SUSE bug 916847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9656">SUSE bug 916847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9656">SUSE bug 916847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9656">SUSE bug 916847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9656">SUSE bug 916847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149657" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9657</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9657" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9657" source="CVE"/>
    <description>
    The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9657.html">CVE-2014-9657</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9657">SUSE bug 916856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9657">SUSE bug 916856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9657">SUSE bug 916856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9657">SUSE bug 916856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9657">SUSE bug 916856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9657">SUSE bug 916856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9658</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9658" source="CVE"/>
    <description>
    The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9658.html">CVE-2014-9658</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9658">SUSE bug 916857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9658">SUSE bug 916857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9658">SUSE bug 916857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9658">SUSE bug 916857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9658">SUSE bug 916857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9658">SUSE bug 916857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9658">SUSE bug 916857</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9659</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9659" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9659" source="CVE"/>
    <description>
    cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9659.html">CVE-2014-9659</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9659">SUSE bug 916867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9659">SUSE bug 916867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9659">SUSE bug 916867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9659">SUSE bug 916867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9659">SUSE bug 916867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9659">SUSE bug 916867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9659">SUSE bug 916867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9659">SUSE bug 916867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9659">SUSE bug 916867</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9660</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9660" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9660" source="CVE"/>
    <description>
    The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9660.html">CVE-2014-9660</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9660">SUSE bug 916858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9660">SUSE bug 916858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9660">SUSE bug 916858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9660">SUSE bug 916858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9660">SUSE bug 916858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9660">SUSE bug 916858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9660">SUSE bug 916858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9660">SUSE bug 916858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9661</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9661" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9661" source="CVE"/>
    <description>
    type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9661.html">CVE-2014-9661</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9661">SUSE bug 916859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9661">SUSE bug 916859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9661">SUSE bug 916859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9661">SUSE bug 916859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9661">SUSE bug 916859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9661">SUSE bug 916859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9661">SUSE bug 916859</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9662</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9662" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9662" source="CVE"/>
    <description>
    cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation functions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted OTF font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9662.html">CVE-2014-9662</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9662">SUSE bug 916860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9662">SUSE bug 916860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9662">SUSE bug 916860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9662">SUSE bug 916860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9662">SUSE bug 916860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9662">SUSE bug 916860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9662">SUSE bug 916860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9662">SUSE bug 916860</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9663</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9663" source="CVE"/>
    <description>
    The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted cmap SFNT table.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9663.html">CVE-2014-9663</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9663">SUSE bug 916865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9663">SUSE bug 916865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9663">SUSE bug 916865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9663">SUSE bug 916865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9663">SUSE bug 916865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9663">SUSE bug 916865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9663">SUSE bug 916865</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9664</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9664" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9664" source="CVE"/>
    <description>
    FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted Type42 font, related to type42/t42parse.c and type1/t1load.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9664.html">CVE-2014-9664</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9664">SUSE bug 916864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9664">SUSE bug 916864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9664">SUSE bug 916864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9664">SUSE bug 916864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9664">SUSE bug 916864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9664">SUSE bug 916864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9664">SUSE bug 916864</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9665</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9665" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9665" source="CVE"/>
    <description>
    The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact by embedding a PNG file in a .ttf font file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9665.html">CVE-2014-9665</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9665">SUSE bug 916863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9665">SUSE bug 916863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9665">SUSE bug 916863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9665">SUSE bug 916863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9665">SUSE bug 916863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9665">SUSE bug 916863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9665">SUSE bug 916863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9665">SUSE bug 916863</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9666</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9666" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9666" source="CVE"/>
    <description>
    The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted embedded bitmap.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9666.html">CVE-2014-9666</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9666">SUSE bug 916862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9666">SUSE bug 916862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9666">SUSE bug 916862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9666">SUSE bug 916862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9666">SUSE bug 916862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9666">SUSE bug 916862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9666">SUSE bug 916862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9666">SUSE bug 916862</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9667</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9667" source="CVE"/>
    <description>
    sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9667.html">CVE-2014-9667</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9667">SUSE bug 916861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9667">SUSE bug 916861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9667">SUSE bug 916861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9667">SUSE bug 916861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9667">SUSE bug 916861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9667">SUSE bug 916861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9667">SUSE bug 916861</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9668</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9668" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9668" source="CVE"/>
    <description>
    The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting length values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Web Open Font Format (WOFF) file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9668.html">CVE-2014-9668</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9668">SUSE bug 916868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9668">SUSE bug 916868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9668">SUSE bug 916868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9668">SUSE bug 916868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9668">SUSE bug 916868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9668">SUSE bug 916868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9668">SUSE bug 916868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9668">SUSE bug 916868</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9669</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9669" source="CVE"/>
    <description>
    Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9669.html">CVE-2014-9669</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9669">SUSE bug 916870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9669">SUSE bug 916870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9669">SUSE bug 916870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9669">SUSE bug 916870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9669">SUSE bug 916870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9669">SUSE bug 916870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9669">SUSE bug 916870</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9670</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9670" source="CVE"/>
    <description>
    Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9670.html">CVE-2014-9670</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9670">SUSE bug 916871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9670">SUSE bug 916871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9670">SUSE bug 916871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9670">SUSE bug 916871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9670">SUSE bug 916871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9670">SUSE bug 916871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9670">SUSE bug 916871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9670">SUSE bug 933247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9671</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9671" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9671" source="CVE"/>
    <description>
    Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9671.html">CVE-2014-9671</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9671">SUSE bug 916872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9671">SUSE bug 916872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9671">SUSE bug 916872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9671">SUSE bug 916872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9671">SUSE bug 916872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9671">SUSE bug 916872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9671">SUSE bug 916872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9671">SUSE bug 933247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9671">SUSE bug 933247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9672</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9672" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9672" source="CVE"/>
    <description>
    Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9672.html">CVE-2014-9672</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9672">SUSE bug 916873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9672">SUSE bug 916873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9672">SUSE bug 916873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9672">SUSE bug 916873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9672">SUSE bug 916873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9672">SUSE bug 916873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9672">SUSE bug 916873</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9673</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9673" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9673" source="CVE"/>
    <description>
    Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9673.html">CVE-2014-9673</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9673">SUSE bug 916874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9673">SUSE bug 916874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9673">SUSE bug 916874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9673">SUSE bug 916874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9673">SUSE bug 916874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9673">SUSE bug 916874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9673">SUSE bug 916874</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9674</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9674" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9674" source="CVE"/>
    <description>
    The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9674.html">CVE-2014-9674</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9674">SUSE bug 916879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9674">SUSE bug 916879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9674">SUSE bug 916879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9674">SUSE bug 916879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9674">SUSE bug 916879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9674">SUSE bug 916879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9674">SUSE bug 916879</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9675</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9675" source="CVE"/>
    <description>
    bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9675.html">CVE-2014-9675</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9675">SUSE bug 916881</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9675">SUSE bug 916881</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9675">SUSE bug 916881</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9675">SUSE bug 916881</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9675">SUSE bug 916881</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9675">SUSE bug 916881</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139455" comment="freetype2-devel-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151246" comment="freetype2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139458" comment="ft2demos-2.6.3-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151247" comment="ft2demos is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139456" comment="libfreetype6-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151248" comment="libfreetype6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139457" comment="libfreetype6-32bit-2.6.3-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151249" comment="libfreetype6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9679</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9679" source="CVE"/>
    <description>
    Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9679.html">CVE-2014-9679</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9679">SUSE bug 917799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9679">SUSE bug 917799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9679">SUSE bug 917799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9679">SUSE bug 917799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9679">SUSE bug 917799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9679">SUSE bug 917799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9679">SUSE bug 917799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9679">SUSE bug 917799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9679">SUSE bug 917799</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9680</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9680" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9680" source="CVE"/>
    <description>
    sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9680.html">CVE-2014-9680</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 919737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 953359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9680">SUSE bug 917806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140363" comment="sudo-1.8.10p3-5.22 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136375" comment="sudo-devel-1.8.10p3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152559" comment="sudo-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136376" comment="sudo-test-1.8.10p3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152560" comment="sudo-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9705</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9705" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9705" source="CVE"/>
    <description>
    Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9705.html">CVE-2014-9705</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9705">SUSE bug 922451</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9709</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9709" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9709" source="CVE"/>
    <description>
    The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9709.html">CVE-2014-9709</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9709">SUSE bug 923945</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9749</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9749" source="CVE"/>
    <description>
    Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9749.html">CVE-2014-9749</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 993299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9749">SUSE bug 949942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9756</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9756" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9756" source="CVE"/>
    <description>
    The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9756.html">CVE-2014-9756</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9756">SUSE bug 953521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9756">SUSE bug 953521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9756">SUSE bug 953521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9756">SUSE bug 953521</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119287" comment="libsndfile-devel-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119271" comment="libsndfile1-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119272" comment="libsndfile1-32bit-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9761</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9761" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9761" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9761.html">CVE-2014-9761</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9761">SUSE bug 962738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9761">SUSE bug 962738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9761">SUSE bug 962738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9761">SUSE bug 962738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9761">SUSE bug 962738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9761">SUSE bug 962738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9761">SUSE bug 962738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9761">SUSE bug 986086</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9767</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9767" source="CVE"/>
    <description>
    Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9767.html">CVE-2014-9767</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9767">SUSE bug 971612</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9805</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9805" source="CVE"/>
    <description>
    ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9805.html">CVE-2014-9805</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9805">SUSE bug 983752</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9806</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9806" source="CVE"/>
    <description>
    ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9806.html">CVE-2014-9806</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 983774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 983774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 983774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 983774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 983774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 983774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 983774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 983774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 983774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9806">SUSE bug 983774</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9807</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9807" source="CVE"/>
    <description>
    The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9807.html">CVE-2014-9807</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9807">SUSE bug 983794</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9808</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9808" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9808" source="CVE"/>
    <description>
    ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9808.html">CVE-2014-9808</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9808">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9808">SUSE bug 983796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9808">SUSE bug 983796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9808">SUSE bug 983796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9808">SUSE bug 983796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9808">SUSE bug 983796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9808">SUSE bug 983796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9808">SUSE bug 983796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9808">SUSE bug 983796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9808">SUSE bug 983796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9808">SUSE bug 983796</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9809</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9809" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9809" source="CVE"/>
    <description>
    ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9809.html">CVE-2014-9809</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9809">SUSE bug 983799</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9810</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9810" source="CVE"/>
    <description>
    The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed dpx file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9810.html">CVE-2014-9810</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 983803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 983803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 983803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 983803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 983803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 983803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 983803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 983803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 983803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9810">SUSE bug 983803</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9811</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9811" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9811" source="CVE"/>
    <description>
    The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed xwd file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9811.html">CVE-2014-9811</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9811">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9811">SUSE bug 984032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9811">SUSE bug 984032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9811">SUSE bug 984032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9811">SUSE bug 984032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9811">SUSE bug 984032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9811">SUSE bug 984032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9811">SUSE bug 984032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9811">SUSE bug 984032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9811">SUSE bug 984032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9811">SUSE bug 984032</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9812</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9812" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9812" source="CVE"/>
    <description>
    ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9812.html">CVE-2014-9812</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9812">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9812">SUSE bug 984137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9812">SUSE bug 984137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9812">SUSE bug 984137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9812">SUSE bug 984137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9812">SUSE bug 984137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9812">SUSE bug 984137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9812">SUSE bug 984137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9812">SUSE bug 984137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9812">SUSE bug 984137</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9812">SUSE bug 984137</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9813</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9813" source="CVE"/>
    <description>
    ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9813.html">CVE-2014-9813</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9813">SUSE bug 984035</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9814</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9814" source="CVE"/>
    <description>
    ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9814.html">CVE-2014-9814</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9814">SUSE bug 984193</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9815</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9815" source="CVE"/>
    <description>
    ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9815.html">CVE-2014-9815</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9815">SUSE bug 984372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9816</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9816" source="CVE"/>
    <description>
    ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9816.html">CVE-2014-9816</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9816">SUSE bug 984398</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9817</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9817" source="CVE"/>
    <description>
    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9817.html">CVE-2014-9817</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9817">SUSE bug 984400</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9818</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9818" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9818" source="CVE"/>
    <description>
    ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9818.html">CVE-2014-9818</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 984181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9818">SUSE bug 1000690</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9819</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9819" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9819" source="CVE"/>
    <description>
    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9823.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9819.html">CVE-2014-9819</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9819">SUSE bug 984142</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9820</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9820" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9820" source="CVE"/>
    <description>
    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9820.html">CVE-2014-9820</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9820">SUSE bug 984150</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9821</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9821" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9821" source="CVE"/>
    <description>
    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9821.html">CVE-2014-9821</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9821">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9821">SUSE bug 984014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9821">SUSE bug 984014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9821">SUSE bug 984014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9821">SUSE bug 984014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9821">SUSE bug 984014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9821">SUSE bug 984014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9821">SUSE bug 984014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9821">SUSE bug 984014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9821">SUSE bug 984014</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9822</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9822" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9822" source="CVE"/>
    <description>
    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9822.html">CVE-2014-9822</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9822">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9822">SUSE bug 984187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9822">SUSE bug 984187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9822">SUSE bug 984187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9822">SUSE bug 984187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9822">SUSE bug 984187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9822">SUSE bug 984187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9822">SUSE bug 984187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9822">SUSE bug 984187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9822">SUSE bug 984187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9822">SUSE bug 984187</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9823</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9823" source="CVE"/>
    <description>
    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9819.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9823.html">CVE-2014-9823</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 984401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 984401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 984401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 984401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 984401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 984401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 984401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 984401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 984401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 984401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9823">SUSE bug 984401</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9824</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9824" source="CVE"/>
    <description>
    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9825.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9824.html">CVE-2014-9824</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 984185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 984185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 984185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 984185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 984185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 984185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 984185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 984185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 984185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 984185</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9824">SUSE bug 984185</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9825</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9825" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9825" source="CVE"/>
    <description>
    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9824.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9825.html">CVE-2014-9825</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 984427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 984427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 984427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 984427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 984427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 984427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 984427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 984427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 984427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 984427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9825">SUSE bug 984427</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9826</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9826" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9826" source="CVE"/>
    <description>
    ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9826.html">CVE-2014-9826</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9826">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9826">SUSE bug 984186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9826">SUSE bug 984186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9826">SUSE bug 984186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9826">SUSE bug 984186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9826">SUSE bug 984186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9826">SUSE bug 984186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9826">SUSE bug 984186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9826">SUSE bug 984186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9826">SUSE bug 984186</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9828</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9828" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9828" source="CVE"/>
    <description>
    coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9828.html">CVE-2014-9828</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9828">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9828">SUSE bug 984028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9828">SUSE bug 984028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9828">SUSE bug 984028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9828">SUSE bug 984028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9828">SUSE bug 984028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9828">SUSE bug 984028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9828">SUSE bug 984028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9828">SUSE bug 984028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9828">SUSE bug 984028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9828">SUSE bug 984028</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9829</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9829" source="CVE"/>
    <description>
    coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted sun file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9829.html">CVE-2014-9829</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 984409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 984409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 984409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 984409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 984409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 984409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 984409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 984409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 984409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 984409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9829">SUSE bug 984409</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9830" source="CVE"/>
    <description>
    coders/sun.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted sun file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9830.html">CVE-2014-9830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 984135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 984135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 984135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 984135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 984135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 984135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 984135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 984135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 984135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 984135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9830">SUSE bug 1000690</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9831</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9831" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9831" source="CVE"/>
    <description>
    coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted wpg file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9831.html">CVE-2014-9831</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9831">SUSE bug 984375</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9832</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9832" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9832" source="CVE"/>
    <description>
    Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9832.html">CVE-2014-9832</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9832">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9832">SUSE bug 984183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9832">SUSE bug 984183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9832">SUSE bug 984183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9832">SUSE bug 984183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9832">SUSE bug 984183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9832">SUSE bug 984183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9832">SUSE bug 984183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9832">SUSE bug 984183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9832">SUSE bug 984183</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9833</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9833" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9833" source="CVE"/>
    <description>
    Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9833.html">CVE-2014-9833</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9833">SUSE bug 984406</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9834</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9834" source="CVE"/>
    <description>
    Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9834.html">CVE-2014-9834</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9834">SUSE bug 984436</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9835" source="CVE"/>
    <description>
    Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9835.html">CVE-2014-9835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9835">SUSE bug 984145</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9836" source="CVE"/>
    <description>
    ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9836.html">CVE-2014-9836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9836">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9836">SUSE bug 984023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9836">SUSE bug 984023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9836">SUSE bug 984023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9836">SUSE bug 984023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9836">SUSE bug 984023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9836">SUSE bug 984023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9836">SUSE bug 984023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9836">SUSE bug 984023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9836">SUSE bug 984023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9836">SUSE bug 984023</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9837" source="CVE"/>
    <description>
    coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a crafted png file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9837.html">CVE-2014-9837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9837">SUSE bug 984166</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9838</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9838" source="CVE"/>
    <description>
    magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9838.html">CVE-2014-9838</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 984370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 984370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 984370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 984370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 984370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 984370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 984370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 984370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 984370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 984370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9838">SUSE bug 984370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9839</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9839" source="CVE"/>
    <description>
    magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9839.html">CVE-2014-9839</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9839">SUSE bug 984379</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9840</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9840" source="CVE"/>
    <description>
    ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9840.html">CVE-2014-9840</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 984433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 984433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 984433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 984433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 984433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 984433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 984433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 984433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 984433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 984433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9840">SUSE bug 984433</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9841</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9841" source="CVE"/>
    <description>
    The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9841.html">CVE-2014-9841</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9841">SUSE bug 984172</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9842</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9842" source="CVE"/>
    <description>
    Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9842.html">CVE-2014-9842</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9842">SUSE bug 984374</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9843</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9843" source="CVE"/>
    <description>
    The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9843.html">CVE-2014-9843</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9843">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9843">SUSE bug 984179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9843">SUSE bug 984179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9843">SUSE bug 984179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9843">SUSE bug 984179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9843">SUSE bug 984179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9843">SUSE bug 984179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9843">SUSE bug 984179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9843">SUSE bug 984179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9843">SUSE bug 1000697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9843">SUSE bug 984179</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9844</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9844" source="CVE"/>
    <description>
    The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9844.html">CVE-2014-9844</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9844">SUSE bug 984373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9845</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9845" source="CVE"/>
    <description>
    The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9845.html">CVE-2014-9845</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9845">SUSE bug 984394</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9846</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9846" source="CVE"/>
    <description>
    Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9846.html">CVE-2014-9846</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9846">SUSE bug 983521</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9847</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9847" source="CVE"/>
    <description>
    The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9847.html">CVE-2014-9847</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9847">SUSE bug 984144</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9848</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9848" source="CVE"/>
    <description>
    Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9848.html">CVE-2014-9848</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9848">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9848">SUSE bug 984404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9848">SUSE bug 984404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9848">SUSE bug 984404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9848">SUSE bug 984404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9848">SUSE bug 984404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9848">SUSE bug 984404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9848">SUSE bug 984404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9848">SUSE bug 984404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9848">SUSE bug 984404</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146409" comment="ImageMagick-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146412" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128816" comment="libMagick++-devel-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146413" comment="libMagick++-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128813" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146414" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149849" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9849</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9849" source="CVE"/>
    <description>
    The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9849.html">CVE-2014-9849</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9849">SUSE bug 984018</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9850</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9850" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9850" source="CVE"/>
    <description>
    Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9850.html">CVE-2014-9850</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9850">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9850">SUSE bug 984149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9850">SUSE bug 984149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9850">SUSE bug 984149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9850">SUSE bug 984149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9850">SUSE bug 984149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9850">SUSE bug 984149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9850">SUSE bug 984149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9850">SUSE bug 984149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9850">SUSE bug 984149</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9851</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9851" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9851" source="CVE"/>
    <description>
    ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9851.html">CVE-2014-9851</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9851">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9851">SUSE bug 984160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9851">SUSE bug 984160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9851">SUSE bug 984160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9851">SUSE bug 984160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9851">SUSE bug 984160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9851">SUSE bug 984160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9851">SUSE bug 984160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9851">SUSE bug 984160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9851">SUSE bug 984160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9851">SUSE bug 984160</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9852</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9852" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9852" source="CVE"/>
    <description>
    distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9852.html">CVE-2014-9852</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9852">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9852">SUSE bug 984191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9852">SUSE bug 984191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9852">SUSE bug 984191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9852">SUSE bug 984191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9852">SUSE bug 984191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9852">SUSE bug 984191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9852">SUSE bug 984191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9852">SUSE bug 984191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9852">SUSE bug 984191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9852">SUSE bug 984191</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9853</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9853" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9853" source="CVE"/>
    <description>
    Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9853.html">CVE-2014-9853</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9853">SUSE bug 984408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149854" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9854</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9854" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9854" source="CVE"/>
    <description>
    coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9854.html">CVE-2014-9854</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9854">SUSE bug 984184</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9907</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9907" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9907" source="CVE"/>
    <description>
    coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9907.html">CVE-2014-9907</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9907">SUSE bug 1000714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9907">SUSE bug 1000714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9907">SUSE bug 1000714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9907">SUSE bug 1000714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9907">SUSE bug 1000714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9907">SUSE bug 1074610</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20149939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2014-9939</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2014-9939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9939" source="CVE"/>
    <description>
    ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2014-9939.html">CVE-2014-9939</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9939">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9939">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9939">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9939">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9939">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9939">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9939">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9939">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9939">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9939">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2014-9939">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0202</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0202" source="CVE"/>
    <description>
    The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0202.html">CVE-2015-0202</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0202">SUSE bug 923793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0202">SUSE bug 923793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0202">SUSE bug 923793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0202">SUSE bug 923793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0202">SUSE bug 923793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0202">SUSE bug 923793</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0204</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0204" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" source="CVE"/>
    <description>
    The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue.  NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0204.html">CVE-2015-0204</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 920339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 920484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 920482</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 920484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 927591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 936787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 936787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 936787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 952088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 952088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 952088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 952088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 952088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0204">SUSE bug 912014</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0205</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" source="CVE"/>
    <description>
    The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0205.html">CVE-2015-0205</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 920339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0205">SUSE bug 912293</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0206</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" source="CVE"/>
    <description>
    Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0206.html">CVE-2015-0206</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 920339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0206">SUSE bug 912292</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0209</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" source="CVE"/>
    <description>
    Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0209.html">CVE-2015-0209</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 936586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0209">SUSE bug 919648</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0210" source="CVE"/>
    <description>
    wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0210.html">CVE-2015-0210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0210">SUSE bug 915323</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140402" comment="wpa_supplicant-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140403" comment="wpa_supplicant-gui-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0228</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0228" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0228" source="CVE"/>
    <description>
    The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0228.html">CVE-2015-0228</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0228">SUSE bug 918352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0228">SUSE bug 918352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0228">SUSE bug 918352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0228">SUSE bug 918352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0228">SUSE bug 918352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0228">SUSE bug 918352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0228">SUSE bug 918352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0228">SUSE bug 918352</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0231</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0231" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0231" source="CVE"/>
    <description>
    Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0231.html">CVE-2015-0231</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0231">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0231">SUSE bug 910659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0231">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0231">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0231">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0231">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0232</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0232" source="CVE"/>
    <description>
    The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0232.html">CVE-2015-0232</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0232">SUSE bug 914690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0232">SUSE bug 914690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0232">SUSE bug 914690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0232">SUSE bug 914690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0232">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0232">SUSE bug 992991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0236</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0236" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0236" source="CVE"/>
    <description>
    libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0236.html">CVE-2015-0236</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0236">SUSE bug 914693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0236">SUSE bug 914693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0236">SUSE bug 914693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0236">SUSE bug 914693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0236">SUSE bug 914693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0236">SUSE bug 914693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0236">SUSE bug 914693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0236">SUSE bug 914693</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150240" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0240</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0240" source="CVE"/>
    <description>
    The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0240.html">CVE-2015-0240</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0240">SUSE bug 917376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0241</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0241" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0241" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0241.html">CVE-2015-0241</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0241">SUSE bug 916953</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0242</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0242" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0242.html">CVE-2015-0242</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0243</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0243" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0243.html">CVE-2015-0243</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0243">SUSE bug 916953</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0244</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0244" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0244.html">CVE-2015-0244</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0244">SUSE bug 916953</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0245</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0245" source="CVE"/>
    <description>
    D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0245.html">CVE-2015-0245</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0245">SUSE bug 916343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0245">SUSE bug 916343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0245">SUSE bug 916343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0245">SUSE bug 916343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0245">SUSE bug 916343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0245">SUSE bug 1003898</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139375" comment="dbus-1-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151535" comment="dbus-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139376" comment="dbus-1-devel-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151536" comment="dbus-1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139377" comment="dbus-1-x11-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151537" comment="dbus-1-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139378" comment="libdbus-1-3-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151538" comment="libdbus-1-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139379" comment="libdbus-1-3-32bit-1.8.22-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151539" comment="libdbus-1-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0247</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0247" source="CVE"/>
    <description>
    Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0247.html">CVE-2015-0247</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0247">SUSE bug 918346</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139393" comment="e2fsprogs-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152602" comment="e2fsprogs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139394" comment="e2fsprogs-devel-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152603" comment="e2fsprogs-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139395" comment="libcom_err-devel-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152604" comment="libcom_err-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139396" comment="libcom_err2-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152605" comment="libcom_err2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139397" comment="libcom_err2-32bit-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152606" comment="libcom_err2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139398" comment="libext2fs-devel-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152607" comment="libext2fs-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139399" comment="libext2fs2-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152608" comment="libext2fs2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0248</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0248" source="CVE"/>
    <description>
    The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0248.html">CVE-2015-0248</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0248">SUSE bug 923794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0248">SUSE bug 923794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0248">SUSE bug 923794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0248">SUSE bug 923794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0248">SUSE bug 923794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0248">SUSE bug 923794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0248">SUSE bug 923794</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0251</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0251" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0251" source="CVE"/>
    <description>
    The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0251.html">CVE-2015-0251</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0251">SUSE bug 923795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0251">SUSE bug 923795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0251">SUSE bug 923795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0251">SUSE bug 923795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0251">SUSE bug 923795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0251">SUSE bug 923795</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0252</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0252" source="CVE"/>
    <description>
    internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0252.html">CVE-2015-0252</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0252">SUSE bug 920810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140229" comment="libxerces-c-3_1-3.1.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151260" comment="libxerces-c-3_1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0253</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0253" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0253" source="CVE"/>
    <description>
    The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0253.html">CVE-2015-0253</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0255</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0255" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0255" source="CVE"/>
    <description>
    X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0255.html">CVE-2015-0255</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0255">SUSE bug 915810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139747" comment="libXvnc1-1.6.0-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139748" comment="tigervnc-1.6.0-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139749" comment="xorg-x11-Xvnc-1.6.0-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0261</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0261" source="CVE"/>
    <description>
    Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0261.html">CVE-2015-0261</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0261">SUSE bug 922220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0261">SUSE bug 922220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0261">SUSE bug 922220</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140370" comment="tcpdump-4.5.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0273</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0273" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0273" source="CVE"/>
    <description>
    Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0273.html">CVE-2015-0273</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 917302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0273">SUSE bug 918768</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0286</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" source="CVE"/>
    <description>
    The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0286.html">CVE-2015-0286</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 936586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 922496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0286">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0287</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0287" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" source="CVE"/>
    <description>
    The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0287.html">CVE-2015-0287</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 936586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 940369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 922499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 940369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 940369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 937492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0287">SUSE bug 968888</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0288</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0288" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" source="CVE"/>
    <description>
    The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0288.html">CVE-2015-0288</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 936586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 920236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0288">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0289</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0289" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" source="CVE"/>
    <description>
    The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0289.html">CVE-2015-0289</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 936586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0289">SUSE bug 922500</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150293" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0293</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0293" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0293" source="CVE"/>
    <description>
    The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0293.html">CVE-2015-0293</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 922488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 919648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 922488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 922488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 922488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 922488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 922488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 922488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 922488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 922488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 936586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 968051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 968053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 968053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 968051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 968053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0293">SUSE bug 986238</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0294</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0294" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0294.html">CVE-2015-0294</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0294">SUSE bug 919938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0294">SUSE bug 919938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0294">SUSE bug 919938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0294">SUSE bug 919938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0294">SUSE bug 919938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0294">SUSE bug 919938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0294">SUSE bug 919938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0294">SUSE bug 919938</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0295</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0295" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0295" source="CVE"/>
    <description>
    The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0295.html">CVE-2015-0295</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 936523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 936523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 936523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 936523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 936523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0295">SUSE bug 936523</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139668" comment="libQt5Concurrent-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152274" comment="libQt5Concurrent-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139669" comment="libQt5Concurrent5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152276" comment="libQt5Concurrent5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139670" comment="libQt5Core-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152278" comment="libQt5Core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139671" comment="libQt5Core-private-headers-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152280" comment="libQt5Core-private-headers-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139672" comment="libQt5Core5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152281" comment="libQt5Core5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139673" comment="libQt5DBus-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152283" comment="libQt5DBus-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139674" comment="libQt5DBus5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152286" comment="libQt5DBus5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139675" comment="libQt5Gui-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152294" comment="libQt5Gui-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139676" comment="libQt5Gui-private-headers-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152296" comment="libQt5Gui-private-headers-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139677" comment="libQt5Gui5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152297" comment="libQt5Gui5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139678" comment="libQt5Network-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152305" comment="libQt5Network-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139679" comment="libQt5Network5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152308" comment="libQt5Network5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139680" comment="libQt5OpenGL-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152313" comment="libQt5OpenGL-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139681" comment="libQt5OpenGL5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152316" comment="libQt5OpenGL5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139682" comment="libQt5PlatformHeaders-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152320" comment="libQt5PlatformHeaders-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139683" comment="libQt5PrintSupport-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152326" comment="libQt5PrintSupport-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139684" comment="libQt5PrintSupport5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152329" comment="libQt5PrintSupport5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139685" comment="libQt5Sql-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152338" comment="libQt5Sql-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139686" comment="libQt5Sql5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152341" comment="libQt5Sql5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139687" comment="libQt5Sql5-mysql-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152343" comment="libQt5Sql5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139688" comment="libQt5Sql5-postgresql-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152345" comment="libQt5Sql5-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139689" comment="libQt5Sql5-sqlite-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152347" comment="libQt5Sql5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139690" comment="libQt5Sql5-unixODBC-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152349" comment="libQt5Sql5-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139691" comment="libQt5Test-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152353" comment="libQt5Test-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139692" comment="libQt5Test5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152356" comment="libQt5Test5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139693" comment="libQt5Widgets-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152377" comment="libQt5Widgets-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139694" comment="libQt5Widgets5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152380" comment="libQt5Widgets5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139695" comment="libQt5Xml-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152384" comment="libQt5Xml-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139696" comment="libQt5Xml5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152386" comment="libQt5Xml5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139697" comment="libqt5-qtbase-common-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152401" comment="libqt5-qtbase-common-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139698" comment="libqt5-qtbase-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152402" comment="libqt5-qtbase-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0374</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0374" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0374.html">CVE-2015-0374</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0374">SUSE bug 914058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0374">SUSE bug 915911</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0377</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0377" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0377.html">CVE-2015-0377</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0377">SUSE bug 914447</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0381</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0381" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0381.html">CVE-2015-0381</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0381">SUSE bug 914058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0381">SUSE bug 915911</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0382</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0382" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0382.html">CVE-2015-0382</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0382">SUSE bug 914058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0382">SUSE bug 915911</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0391</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0391" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0391" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0391.html">CVE-2015-0391</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0391">SUSE bug 914058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0391">SUSE bug 915913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0411</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0411" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0411.html">CVE-2015-0411</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0411">SUSE bug 914058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0411">SUSE bug 915911</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0418</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0418" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0377.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0418.html">CVE-2015-0418</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0418">SUSE bug 914447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0418">SUSE bug 914447</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0427</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0427" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0427.html">CVE-2015-0427</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0427">SUSE bug 914447</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0432</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0432" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0432" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0432.html">CVE-2015-0432</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0432">SUSE bug 914058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0432">SUSE bug 915911</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0433</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0433" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0433" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0433.html">CVE-2015-0433</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0433">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0433">SUSE bug 936409</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0441</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0441" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0441" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Encryption.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0441.html">CVE-2015-0441</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0441">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0441">SUSE bug 936409</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0499</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0499" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0499" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Federated.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0499.html">CVE-2015-0499</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0499">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0499">SUSE bug 936408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0501</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0501" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0501" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0501.html">CVE-2015-0501</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0501">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0501">SUSE bug 936408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0505</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0505" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0505.html">CVE-2015-0505</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0505">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0505">SUSE bug 936408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0552</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0552" source="CVE"/>
    <description>
    Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0552.html">CVE-2015-0552</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0552">SUSE bug 911814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0552">SUSE bug 911814</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139461" comment="gcab-0.6-5.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152619" comment="gcab is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139462" comment="gcab-lang-0.6-5.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152620" comment="gcab-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139463" comment="libgcab-1_0-0-0.6-5.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152621" comment="libgcab-1_0-0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0559</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0559" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0559" source="CVE"/>
    <description>
    Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0559.html">CVE-2015-0559</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0559">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0559">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0559">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0559">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0559">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0559">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0559">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0559">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0559">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0559">SUSE bug 912365</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0560</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0560" source="CVE"/>
    <description>
    The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0560.html">CVE-2015-0560</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0560">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0560">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0560">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0560">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0560">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0560">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0560">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0560">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0560">SUSE bug 912365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0560">SUSE bug 912365</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0561</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0561" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0561" source="CVE"/>
    <description>
    asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a certain index value, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0561.html">CVE-2015-0561</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0561">SUSE bug 912368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0561">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0561">SUSE bug 912368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0561">SUSE bug 912368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0561">SUSE bug 912368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0561">SUSE bug 912368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0561">SUSE bug 912368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0561">SUSE bug 912368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0561">SUSE bug 912368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0561">SUSE bug 912368</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0562</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0562" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0562" source="CVE"/>
    <description>
    Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0562.html">CVE-2015-0562</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0562">SUSE bug 912369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0562">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0562">SUSE bug 912369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0562">SUSE bug 912369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0562">SUSE bug 912369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0562">SUSE bug 912369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0562">SUSE bug 912369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0562">SUSE bug 912369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0562">SUSE bug 912369</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0563</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0563" source="CVE"/>
    <description>
    epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0563.html">CVE-2015-0563</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0563">SUSE bug 912370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0563">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0563">SUSE bug 912370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0563">SUSE bug 912370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0563">SUSE bug 912370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0563">SUSE bug 912370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0563">SUSE bug 912370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0563">SUSE bug 912370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0563">SUSE bug 912370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0564</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0564" source="CVE"/>
    <description>
    Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0564.html">CVE-2015-0564</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0564">SUSE bug 912372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0564">SUSE bug 912316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0564">SUSE bug 912372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0564">SUSE bug 912372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0564">SUSE bug 912372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0564">SUSE bug 912372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0564">SUSE bug 912372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0564">SUSE bug 912372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0564">SUSE bug 912372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0778</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0778" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0778" source="CVE"/>
    <description>
    osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a _service file.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2015-0778.html">CVE-2015-0778</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0778">SUSE bug 901643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0778">SUSE bug 901643</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140274" comment="osc-0.155.0-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151686" comment="osc is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0797</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0797" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0797" source="CVE"/>
    <description>
    GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0797.html">CVE-2015-0797</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0797">SUSE bug 927559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0797">SUSE bug 927559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0797">SUSE bug 927559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0797">SUSE bug 927559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0797">SUSE bug 930622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0797">SUSE bug 927559</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139581" comment="gstreamer-0_10-plugins-bad-0.10.23-22.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152622" comment="gstreamer-0_10-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139582" comment="gstreamer-0_10-plugins-bad-lang-0.10.23-22.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152623" comment="gstreamer-0_10-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139583" comment="libgstbasecamerabinsrc-0_10-23-0.10.23-22.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152624" comment="libgstbasecamerabinsrc-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139584" comment="libgstbasevideo-0_10-23-0.10.23-22.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152625" comment="libgstbasevideo-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139585" comment="libgstcodecparsers-0_10-23-0.10.23-22.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152626" comment="libgstcodecparsers-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139586" comment="libgstphotography-0_10-23-0.10.23-22.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152627" comment="libgstphotography-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139587" comment="libgstsignalprocessor-0_10-23-0.10.23-22.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152628" comment="libgstsignalprocessor-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139588" comment="libgstvdp-0_10-23-0.10.23-22.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152629" comment="libgstvdp-0_10-23 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0798</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0798" source="CVE"/>
    <description>
    The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0798.html">CVE-2015-0798</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0799</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0799" source="CVE"/>
    <description>
    The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0799.html">CVE-2015-0799</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0799">SUSE bug 926166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0799">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0799">SUSE bug 926166</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0800</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0800" source="CVE"/>
    <description>
    The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0800.html">CVE-2015-0800</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0801</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0801" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0801" source="CVE"/>
    <description>
    Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0801.html">CVE-2015-0801</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0801">SUSE bug 925401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0801">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0801">SUSE bug 925401</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0802</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0802" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0802" source="CVE"/>
    <description>
    Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content navigation that leverages the reachability of a privileged window with an unintended persistence of access to restricted internal methods.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0802.html">CVE-2015-0802</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0802">SUSE bug 925402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0802">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0802">SUSE bug 925402</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0803</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0803" source="CVE"/>
    <description>
    The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element's attributes, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0803.html">CVE-2015-0803</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0803">SUSE bug 925400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0803">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0803">SUSE bug 925400</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0804</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0804" source="CVE"/>
    <description>
    The HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly constrain a data type after omitting namespace validation during certain tree-binding operations, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document containing a SOURCE element.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0804.html">CVE-2015-0804</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0804">SUSE bug 925400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0804">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0804">SUSE bug 925400</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0805</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0805" source="CVE"/>
    <description>
    The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an incorrect memset call during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors that trigger rendering of 2D graphics content.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0805.html">CVE-2015-0805</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0805">SUSE bug 925399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0805">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0805">SUSE bug 925399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0806</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0806" source="CVE"/>
    <description>
    The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0806.html">CVE-2015-0806</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0806">SUSE bug 925399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0806">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0806">SUSE bug 925399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0807</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0807" source="CVE"/>
    <description>
    The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0807.html">CVE-2015-0807</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0807">SUSE bug 925398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0807">SUSE bug 913068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0807">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0807">SUSE bug 925398</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0808</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0808" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0808" source="CVE"/>
    <description>
    The webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox before 37.0 uses incompatible approaches to the deallocation of memory for simple-type arrays, which might allow remote attackers to cause a denial of service (memory corruption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0808.html">CVE-2015-0808</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0808">SUSE bug 925397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0808">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0808">SUSE bug 925397</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0810</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0810" source="CVE"/>
    <description>
    Mozilla Firefox before 37.0 on OS X does not ensure that the cursor is visible, which allows remote attackers to conduct clickjacking attacks via a Flash object in conjunction with DIV elements associated with layered presentation, and crafted JavaScript code that interacts with an IMG element.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0810.html">CVE-2015-0810</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0811</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0811" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0811" source="CVE"/>
    <description>
    The QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain sensitive information from process heap memory or cause a denial of service (out-of-bounds read) via an image that is improperly handled during transformation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0811.html">CVE-2015-0811</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0811">SUSE bug 925396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0811">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0811">SUSE bug 925396</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0812</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0812" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0812" source="CVE"/>
    <description>
    Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0812.html">CVE-2015-0812</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0812">SUSE bug 925394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0812">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0812">SUSE bug 925394</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0813</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0813" source="CVE"/>
    <description>
    Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted MP3 file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0813.html">CVE-2015-0813</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0813">SUSE bug 925393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0813">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0813">SUSE bug 925393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0814</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0814" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0814.html">CVE-2015-0814</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0814">SUSE bug 925392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0814">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0814">SUSE bug 925392</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0815</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0815" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0815.html">CVE-2015-0815</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0815">SUSE bug 925392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0815">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0815">SUSE bug 925392</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0816</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0816" source="CVE"/>
    <description>
    Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy, as demonstrated by the resource: URL associated with PDF.js.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0816.html">CVE-2015-0816</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0816">SUSE bug 925395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0816">SUSE bug 925368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0816">SUSE bug 925395</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0817</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0817" source="CVE"/>
    <description>
    The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases in which bounds checking may be safely skipped during JIT compilation and heap access, which allows remote attackers to read or write to unintended memory locations, and consequently execute arbitrary code, via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0817.html">CVE-2015-0817</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0817">SUSE bug 923495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0817">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0817">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0817">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0817">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0817">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0817">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0817">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0817">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0817">SUSE bug 923534</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0818</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0818" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0818" source="CVE"/>
    <description>
    Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0818.html">CVE-2015-0818</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0818">SUSE bug 923495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0818">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0818">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0818">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0818">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0818">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0818">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0818">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0818">SUSE bug 923534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0818">SUSE bug 923534</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0819</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0819" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0819" source="CVE"/>
    <description>
    The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0819.html">CVE-2015-0819</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0819">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0820</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0820" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0820" source="CVE"/>
    <description>
    Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to an extensible state, which allows remote attackers to bypass a Caja Compiler sandbox protection mechanism or a Secure EcmaScript sandbox protection mechanism via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0820.html">CVE-2015-0820</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0820">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0821</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0821" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0821" source="CVE"/>
    <description>
    Mozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0821.html">CVE-2015-0821</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0821">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0822</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0822" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0822" source="CVE"/>
    <description>
    The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0822.html">CVE-2015-0822</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0822">SUSE bug 910669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0822">SUSE bug 924515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0822">SUSE bug 917597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0822">SUSE bug 923534</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0823</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0823" source="CVE"/>
    <description>
    Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the ots::ots_gasp_parse function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0823.html">CVE-2015-0823</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0823">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0824</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0824" source="CVE"/>
    <description>
    The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service (out-of-bounds write of zero values, and application crash) via vectors that trigger use of DrawTarget and the Cairo library for image drawing.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0824.html">CVE-2015-0824</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0824">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0825</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0825" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0825" source="CVE"/>
    <description>
    Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0825.html">CVE-2015-0825</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0825">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0826</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0826" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0826" source="CVE"/>
    <description>
    The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read of heap memory) via a crafted Cascading Style Sheets (CSS) token sequence that triggers a restyle or reflow operation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0826.html">CVE-2015-0826</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0826">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0827</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0827" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0827" source="CVE"/>
    <description>
    Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0827.html">CVE-2015-0827</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0827">SUSE bug 910669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0827">SUSE bug 924515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0827">SUSE bug 917597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0827">SUSE bug 923534</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0828</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0828" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0828" source="CVE"/>
    <description>
    Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0828.html">CVE-2015-0828</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0828">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0829</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0829" source="CVE"/>
    <description>
    Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is improperly handled during playback.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0829.html">CVE-2015-0829</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0829">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0830" source="CVE"/>
    <description>
    The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a denial of service (application crash) via crafted WebGL content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0830.html">CVE-2015-0830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0830">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0831</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0831" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0831" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0831.html">CVE-2015-0831</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0831">SUSE bug 910669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0831">SUSE bug 924515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0831">SUSE bug 917597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0831">SUSE bug 923534</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0832</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0832" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0832" source="CVE"/>
    <description>
    Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0832.html">CVE-2015-0832</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0832">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0833</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0833" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0833" source="CVE"/>
    <description>
    Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0833.html">CVE-2015-0833</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0833">SUSE bug 923534</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0834</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0834" source="CVE"/>
    <description>
    The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0834.html">CVE-2015-0834</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0834">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0835" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0835.html">CVE-2015-0835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0835">SUSE bug 910669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0835">SUSE bug 924515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0835">SUSE bug 917597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0836" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0836.html">CVE-2015-0836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0836">SUSE bug 910669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0836">SUSE bug 924515</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0836">SUSE bug 917597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0836">SUSE bug 923534</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0837" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0837.html">CVE-2015-0837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0837">SUSE bug 920057</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139859" comment="libgcrypt-devel-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151920" comment="libgcrypt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139860" comment="libgcrypt20-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139861" comment="libgcrypt20-32bit-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0839</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0839" source="CVE"/>
    <description>
    The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0839.html">CVE-2015-0839</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0839">SUSE bug 933191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0839">SUSE bug 933191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0839">SUSE bug 933191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0839">SUSE bug 933191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0839">SUSE bug 933191</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139597" comment="hplip-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151009" comment="hplip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139598" comment="hplip-hpijs-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151010" comment="hplip-hpijs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139599" comment="hplip-sane-3.16.5-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151011" comment="hplip-sane is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0840</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0840" source="CVE"/>
    <description>
    The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0840.html">CVE-2015-0840</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0840">SUSE bug 926749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0840">SUSE bug 926749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0840">SUSE bug 926749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0840">SUSE bug 926749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0840">SUSE bug 926749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0840">SUSE bug 926749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0840">SUSE bug 926749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0840">SUSE bug 926749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0840">SUSE bug 926749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140388" comment="update-alternatives-1.18.4-2.17 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154128" comment="update-alternatives is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0847</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0847" source="CVE"/>
    <description>
    nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0847.html">CVE-2015-0847</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0847">SUSE bug 930173</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140254" comment="nbd-3.11-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152630" comment="nbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140255" comment="nbd-doc-3.11-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152631" comment="nbd-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0848</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0848" source="CVE"/>
    <description>
    Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0848.html">CVE-2015-0848</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0848">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0848">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0848">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0848">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0848">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0848">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0848">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0848">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0848">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0848">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0848">SUSE bug 933109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140192" comment="libwmf-0_2-7-0.2.8.4-241.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152632" comment="libwmf-0_2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140193" comment="libwmf-tools-0.2.8.4-241.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152633" comment="libwmf-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0855</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0855" source="CVE"/>
    <description>
    The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0855.html">CVE-2015-0855</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0855">SUSE bug 960339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0855">SUSE bug 960339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0855">SUSE bug 960339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0855">SUSE bug 960339</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140297" comment="pitivi-0.94-7.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152634" comment="pitivi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140298" comment="pitivi-lang-0.94-7.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152635" comment="pitivi-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0856</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0856" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0856" source="CVE"/>
    <description>
    daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0856.html">CVE-2015-0856</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0856">SUSE bug 950491</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140357" comment="sddm-0.13.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152215" comment="sddm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140358" comment="sddm-branding-openSUSE-0.13.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152216" comment="sddm-branding-openSUSE is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20150973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-0973</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-0973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0973" source="CVE"/>
    <description>
    Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-0973.html">CVE-2015-0973</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0973">SUSE bug 912929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-0973">SUSE bug 912929</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117932" comment="libpng16-16-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117933" comment="libpng16-16-32bit-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117936" comment="libpng16-compat-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117937" comment="libpng16-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1030</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1030" source="CVE"/>
    <description>
    Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests that are rejected because the socket limit is reached.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1030.html">CVE-2015-1030</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1030">SUSE bug 913094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1030">SUSE bug 907675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1030">SUSE bug 913094</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140303" comment="privoxy-3.0.24-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152636" comment="privoxy is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1031</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1031" source="CVE"/>
    <description>
    Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unmap function in list.c or (2) "two additional unconfirmed use-after-free complaints made by Coverity scan." NOTE: some of these details are obtained from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1031.html">CVE-2015-1031</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1031">SUSE bug 913094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1031">SUSE bug 907675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1031">SUSE bug 913094</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140303" comment="privoxy-3.0.24-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152636" comment="privoxy is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1038</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1038" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1038" source="CVE"/>
    <description>
    p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1038.html">CVE-2015-1038</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1038">SUSE bug 912878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1038">SUSE bug 912878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1038">SUSE bug 912878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1038">SUSE bug 912878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1038">SUSE bug 912878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1038">SUSE bug 912878</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140275" comment="p7zip-9.20.1-15.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152637" comment="p7zip is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1071</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1071" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1071.html">CVE-2015-1071</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1071">SUSE bug 923223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1071">SUSE bug 923223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1071">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1076</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1076" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1076" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1076.html">CVE-2015-1076</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1076">SUSE bug 923223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1076">SUSE bug 923223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1076">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1081</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1081" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1081.html">CVE-2015-1081</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1081">SUSE bug 923223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1081">SUSE bug 923223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1081">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1083</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1083" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1083.html">CVE-2015-1083</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1083">SUSE bug 923223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1083">SUSE bug 923223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1083">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1120</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1120" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1120" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1120.html">CVE-2015-1120</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1120">SUSE bug 928380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1120">SUSE bug 928380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1120">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1122</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1122" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1122" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1122.html">CVE-2015-1122</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1122">SUSE bug 928380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1122">SUSE bug 928380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1122">SUSE bug 971460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1122">SUSE bug 1082221</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1127</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1127" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1127" source="CVE"/>
    <description>
    The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1127.html">CVE-2015-1127</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1127">SUSE bug 928380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1127">SUSE bug 928380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1127">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1153</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1153" source="CVE"/>
    <description>
    WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1154.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1153.html">CVE-2015-1153</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1153">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1155</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1155" source="CVE"/>
    <description>
    The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1155.html">CVE-2015-1155</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1155">SUSE bug 971460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1155">SUSE bug 1082221</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1158</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1158" source="CVE"/>
    <description>
    The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1158.html">CVE-2015-1158</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1158">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1158">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1158">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1158">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1158">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1158">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1158">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1158">SUSE bug 976653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1158">SUSE bug 976653</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1159</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1159" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1159.html">CVE-2015-1159</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1159">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1159">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1159">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1159">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1159">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1159">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1159">SUSE bug 924208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1159">SUSE bug 976653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1159">SUSE bug 976653</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139351" comment="cups-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151184" comment="cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139352" comment="cups-client-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151185" comment="cups-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139353" comment="cups-devel-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151186" comment="cups-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139354" comment="cups-libs-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151187" comment="cups-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139355" comment="cups-libs-32bit-1.7.5-7.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151188" comment="cups-libs-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1182</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1182" source="CVE"/>
    <description>
    The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1_sequence linked list, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ASN.1 sequence in a certificate.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1182.html">CVE-2015-1182</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1182">SUSE bug 913903</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1182">SUSE bug 913903</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139932" comment="libmbedtls9-1.3.17-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152973" comment="libmbedtls9 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1191" source="CVE"/>
    <description>
    Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1191.html">CVE-2015-1191</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1191">SUSE bug 913627</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140296" comment="pigz-2.3-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152650" comment="pigz is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1196</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1196" source="CVE"/>
    <description>
    GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1196.html">CVE-2015-1196</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1196">SUSE bug 913678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1196">SUSE bug 913678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1196">SUSE bug 915329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1196">SUSE bug 913678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1196">SUSE bug 913678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1196">SUSE bug 915329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1196">SUSE bug 913678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1196">SUSE bug 913678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1196">SUSE bug 913678</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140285" comment="patch-2.7.5-6.54 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151547" comment="patch is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1201</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1201" source="CVE"/>
    <description>
    Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1201.html">CVE-2015-1201</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1201">SUSE bug 914450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1201">SUSE bug 907675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1201">SUSE bug 914450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140303" comment="privoxy-3.0.24-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152636" comment="privoxy is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1283</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1283" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283" source="CVE"/>
    <description>
    Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1283.html">CVE-2015-1283</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 939077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 983985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 983985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 983985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 1034050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 1034050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1283">SUSE bug 983985</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139435" comment="expat-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139436" comment="libexpat-devel-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139437" comment="libexpat1-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139438" comment="libexpat1-32bit-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1349</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1349" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1349" source="CVE"/>
    <description>
    named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1349.html">CVE-2015-1349</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1349">SUSE bug 918330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1349">SUSE bug 918330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1349">SUSE bug 918330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1349">SUSE bug 918330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1349">SUSE bug 918330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1349">SUSE bug 918330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1349">SUSE bug 918330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1349">SUSE bug 918330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1349">SUSE bug 918330</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1350</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1350" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1350" source="CVE"/>
    <description>
    The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1350.html">CVE-2015-1350</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 914939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1350">SUSE bug 1052256</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1380</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1380" source="CVE"/>
    <description>
    jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1380.html">CVE-2015-1380</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1380">SUSE bug 914934</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140303" comment="privoxy-3.0.24-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152636" comment="privoxy is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1381</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1381" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service (segmentation fault or memory consumption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1381.html">CVE-2015-1381</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1381">SUSE bug 914934</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140303" comment="privoxy-3.0.24-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152636" comment="privoxy is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1382</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1382" source="CVE"/>
    <description>
    parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to an HTTP time header.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1382.html">CVE-2015-1382</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1382">SUSE bug 914934</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140303" comment="privoxy-3.0.24-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152636" comment="privoxy is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1395</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1395" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1395" source="CVE"/>
    <description>
    Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. (dot dot) in a diff file name.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1395.html">CVE-2015-1395</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1395">SUSE bug 915328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1395">SUSE bug 915328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1395">SUSE bug 915328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1395">SUSE bug 915328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1395">SUSE bug 915328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1395">SUSE bug 915328</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140285" comment="patch-2.7.5-6.54 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151547" comment="patch is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1396</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1396" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1396.html">CVE-2015-1396</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1396">SUSE bug 915329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1396">SUSE bug 915329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1396">SUSE bug 915329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1396">SUSE bug 915329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1396">SUSE bug 915329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1396">SUSE bug 915329</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140285" comment="patch-2.7.5-6.54 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151547" comment="patch is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1419</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1419" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1419" source="CVE"/>
    <description>
    Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1419.html">CVE-2015-1419</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 900326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1419">SUSE bug 915522</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140397" comment="vsftpd-3.0.2-17.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152656" comment="vsftpd is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1461</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1461" source="CVE"/>
    <description>
    ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap out of bounds condition."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1461.html">CVE-2015-1461</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1461">SUSE bug 916217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1461">SUSE bug 916217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1461">SUSE bug 916217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1461">SUSE bug 916217</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1461">SUSE bug 1040662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1461">SUSE bug 916217</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1462</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1462" source="CVE"/>
    <description>
    ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1462.html">CVE-2015-1462</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1462">SUSE bug 916214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1462">SUSE bug 916214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1462">SUSE bug 916214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1462">SUSE bug 916214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1462">SUSE bug 1040662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1462">SUSE bug 916214</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1463</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1463" source="CVE"/>
    <description>
    ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1463.html">CVE-2015-1463</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1463">SUSE bug 916215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1463">SUSE bug 916215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1463">SUSE bug 916215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1463">SUSE bug 916215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1463">SUSE bug 1040662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1463">SUSE bug 916215</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1472</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1472" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1472" source="CVE"/>
    <description>
    The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1472.html">CVE-2015-1472</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 920341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 922243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1472">SUSE bug 916222</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1473</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1473" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1473" source="CVE"/>
    <description>
    The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during a risk-management decision for use of the alloca function, which might allow context-dependent attackers to cause a denial of service (segmentation violation) or overwrite memory locations beyond the stack boundary via a long line containing wide characters that are improperly handled in a wscanf call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1473.html">CVE-2015-1473</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 920341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 922243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 916222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1473">SUSE bug 916222</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1547</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1547" source="CVE"/>
    <description>
    The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1547.html">CVE-2015-1547</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 914890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1547">SUSE bug 916925</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1572</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1572" source="CVE"/>
    <description>
    Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1572.html">CVE-2015-1572</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1572">SUSE bug 918346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1572">SUSE bug 918346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1572">SUSE bug 918346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1572">SUSE bug 915402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1572">SUSE bug 918346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1572">SUSE bug 918346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1572">SUSE bug 918346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1572">SUSE bug 918346</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139393" comment="e2fsprogs-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152602" comment="e2fsprogs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139394" comment="e2fsprogs-devel-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152603" comment="e2fsprogs-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139395" comment="libcom_err-devel-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152604" comment="libcom_err-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139396" comment="libcom_err2-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152605" comment="libcom_err2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139397" comment="libcom_err2-32bit-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152606" comment="libcom_err2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139398" comment="libext2fs-devel-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152607" comment="libext2fs-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139399" comment="libext2fs2-1.42.11-11.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152608" comment="libext2fs2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151606" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1606</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1606" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1606" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1606.html">CVE-2015-1606</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1606">SUSE bug 918089</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1606">SUSE bug 918089</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1606">SUSE bug 918089</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1606">SUSE bug 918089</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1606">SUSE bug 918089</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1606">SUSE bug 918089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139564" comment="gpg2-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139565" comment="gpg2-lang-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1607</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1607" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1607" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1607.html">CVE-2015-1607</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1607">SUSE bug 918090</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139564" comment="gpg2-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151446" comment="gpg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139565" comment="gpg2-lang-2.0.24-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151447" comment="gpg2-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1779</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1779" source="CVE"/>
    <description>
    The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1779.html">CVE-2015-1779</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 962632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 962632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 962632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 962632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 962632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 962632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 962632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 962632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 924018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 962632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1779">SUSE bug 962632</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1781</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1781" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1781" source="CVE"/>
    <description>
    Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1781.html">CVE-2015-1781</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 939211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1781">SUSE bug 927080</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1782</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1782" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1782" source="CVE"/>
    <description>
    The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1782.html">CVE-2015-1782</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1782">SUSE bug 921070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1782">SUSE bug 921070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1782">SUSE bug 921070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1782">SUSE bug 921070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1782">SUSE bug 921070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1782">SUSE bug 921070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1782">SUSE bug 921070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1782">SUSE bug 921070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1782">SUSE bug 921070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1782">SUSE bug 921070</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009124591" comment="libssh2-1-1.4.3-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1788</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" source="CVE"/>
    <description>
    The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1788.html">CVE-2015-1788</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 936586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 938432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1788">SUSE bug 934487</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151789" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1789</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1789" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" source="CVE"/>
    <description>
    The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1789.html">CVE-2015-1789</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 936586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 938432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1789">SUSE bug 934489</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1790</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" source="CVE"/>
    <description>
    The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1790.html">CVE-2015-1790</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 936586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 938432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1790">SUSE bug 934491</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1791</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" source="CVE"/>
    <description>
    Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1791.html">CVE-2015-1791</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 986238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 989464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 989464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 933911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 989464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1791">SUSE bug 989464</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1792</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" source="CVE"/>
    <description>
    The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1792.html">CVE-2015-1792</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 937891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 934493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1792">SUSE bug 986238</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1798</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1798" source="CVE"/>
    <description>
    The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1798.html">CVE-2015-1798</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1798">SUSE bug 924202</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1799</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1799" source="CVE"/>
    <description>
    The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1799.html">CVE-2015-1799</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 943565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 943565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 943565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 943565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 943565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 943565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 943565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 943565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 943565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 927497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 943565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 957163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1799">SUSE bug 924202</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1802</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1802" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1802" source="CVE"/>
    <description>
    The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a (1) negative or (2) large property count in a BDF font file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1802.html">CVE-2015-1802</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1802">SUSE bug 921978</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139721" comment="libXfont-devel-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151631" comment="libXfont-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139722" comment="libXfont1-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1803</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1803" source="CVE"/>
    <description>
    The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1803.html">CVE-2015-1803</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1803">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1803">SUSE bug 921978</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139721" comment="libXfont-devel-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151631" comment="libXfont-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139722" comment="libXfont1-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1804</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1804" source="CVE"/>
    <description>
    The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1804.html">CVE-2015-1804</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1804">SUSE bug 921978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1804">SUSE bug 921978</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139721" comment="libXfont-devel-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151631" comment="libXfont-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139722" comment="libXfont1-1.5.1-8.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1819</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1819" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1819" source="CVE"/>
    <description>
    The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1819.html">CVE-2015-1819</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1819">SUSE bug 928193</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1855</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1855" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1855.html">CVE-2015-1855</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1855">SUSE bug 926974</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154826" comment="libruby2_1-2_1-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152217" comment="libruby2_1-2_1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154827" comment="ruby2.1-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152218" comment="ruby2.1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154828" comment="ruby2.1-devel-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152219" comment="ruby2.1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154829" comment="ruby2.1-devel-extra-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154837" comment="ruby2.1-devel-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154830" comment="ruby2.1-doc-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154839" comment="ruby2.1-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154831" comment="ruby2.1-doc-ri-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154841" comment="ruby2.1-doc-ri is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154832" comment="ruby2.1-stdlib-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152220" comment="ruby2.1-stdlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1858</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1858" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1858" source="CVE"/>
    <description>
    Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1858.html">CVE-2015-1858</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1858">SUSE bug 927806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139668" comment="libQt5Concurrent-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152274" comment="libQt5Concurrent-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139669" comment="libQt5Concurrent5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152276" comment="libQt5Concurrent5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139670" comment="libQt5Core-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152278" comment="libQt5Core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139671" comment="libQt5Core-private-headers-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152280" comment="libQt5Core-private-headers-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139672" comment="libQt5Core5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152281" comment="libQt5Core5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139673" comment="libQt5DBus-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152283" comment="libQt5DBus-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139674" comment="libQt5DBus5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152286" comment="libQt5DBus5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139675" comment="libQt5Gui-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152294" comment="libQt5Gui-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139676" comment="libQt5Gui-private-headers-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152296" comment="libQt5Gui-private-headers-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139677" comment="libQt5Gui5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152297" comment="libQt5Gui5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139678" comment="libQt5Network-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152305" comment="libQt5Network-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139679" comment="libQt5Network5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152308" comment="libQt5Network5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139680" comment="libQt5OpenGL-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152313" comment="libQt5OpenGL-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139681" comment="libQt5OpenGL5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152316" comment="libQt5OpenGL5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139682" comment="libQt5PlatformHeaders-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152320" comment="libQt5PlatformHeaders-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139683" comment="libQt5PrintSupport-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152326" comment="libQt5PrintSupport-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139684" comment="libQt5PrintSupport5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152329" comment="libQt5PrintSupport5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139685" comment="libQt5Sql-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152338" comment="libQt5Sql-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139686" comment="libQt5Sql5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152341" comment="libQt5Sql5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139687" comment="libQt5Sql5-mysql-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152343" comment="libQt5Sql5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139688" comment="libQt5Sql5-postgresql-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152345" comment="libQt5Sql5-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139689" comment="libQt5Sql5-sqlite-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152347" comment="libQt5Sql5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139690" comment="libQt5Sql5-unixODBC-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152349" comment="libQt5Sql5-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139691" comment="libQt5Test-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152353" comment="libQt5Test-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139692" comment="libQt5Test5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152356" comment="libQt5Test5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139693" comment="libQt5Widgets-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152377" comment="libQt5Widgets-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139694" comment="libQt5Widgets5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152380" comment="libQt5Widgets5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139695" comment="libQt5Xml-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152384" comment="libQt5Xml-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139696" comment="libQt5Xml5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152386" comment="libQt5Xml5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139697" comment="libqt5-qtbase-common-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152401" comment="libqt5-qtbase-common-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139698" comment="libqt5-qtbase-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152402" comment="libqt5-qtbase-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1859</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1859" source="CVE"/>
    <description>
    Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1859.html">CVE-2015-1859</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1859">SUSE bug 927807</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139668" comment="libQt5Concurrent-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152274" comment="libQt5Concurrent-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139669" comment="libQt5Concurrent5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152276" comment="libQt5Concurrent5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139670" comment="libQt5Core-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152278" comment="libQt5Core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139671" comment="libQt5Core-private-headers-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152280" comment="libQt5Core-private-headers-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139672" comment="libQt5Core5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152281" comment="libQt5Core5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139673" comment="libQt5DBus-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152283" comment="libQt5DBus-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139674" comment="libQt5DBus5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152286" comment="libQt5DBus5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139675" comment="libQt5Gui-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152294" comment="libQt5Gui-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139676" comment="libQt5Gui-private-headers-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152296" comment="libQt5Gui-private-headers-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139677" comment="libQt5Gui5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152297" comment="libQt5Gui5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139678" comment="libQt5Network-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152305" comment="libQt5Network-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139679" comment="libQt5Network5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152308" comment="libQt5Network5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139680" comment="libQt5OpenGL-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152313" comment="libQt5OpenGL-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139681" comment="libQt5OpenGL5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152316" comment="libQt5OpenGL5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139682" comment="libQt5PlatformHeaders-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152320" comment="libQt5PlatformHeaders-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139683" comment="libQt5PrintSupport-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152326" comment="libQt5PrintSupport-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139684" comment="libQt5PrintSupport5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152329" comment="libQt5PrintSupport5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139685" comment="libQt5Sql-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152338" comment="libQt5Sql-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139686" comment="libQt5Sql5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152341" comment="libQt5Sql5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139687" comment="libQt5Sql5-mysql-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152343" comment="libQt5Sql5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139688" comment="libQt5Sql5-postgresql-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152345" comment="libQt5Sql5-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139689" comment="libQt5Sql5-sqlite-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152347" comment="libQt5Sql5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139690" comment="libQt5Sql5-unixODBC-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152349" comment="libQt5Sql5-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139691" comment="libQt5Test-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152353" comment="libQt5Test-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139692" comment="libQt5Test5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152356" comment="libQt5Test5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139693" comment="libQt5Widgets-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152377" comment="libQt5Widgets-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139694" comment="libQt5Widgets5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152380" comment="libQt5Widgets5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139695" comment="libQt5Xml-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152384" comment="libQt5Xml-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139696" comment="libQt5Xml5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152386" comment="libQt5Xml5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139697" comment="libqt5-qtbase-common-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152401" comment="libqt5-qtbase-common-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139698" comment="libqt5-qtbase-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152402" comment="libqt5-qtbase-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1860</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1860" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1860" source="CVE"/>
    <description>
    Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1860.html">CVE-2015-1860</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 921999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1860">SUSE bug 927808</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139668" comment="libQt5Concurrent-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152274" comment="libQt5Concurrent-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139669" comment="libQt5Concurrent5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152276" comment="libQt5Concurrent5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139670" comment="libQt5Core-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152278" comment="libQt5Core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139671" comment="libQt5Core-private-headers-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152280" comment="libQt5Core-private-headers-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139672" comment="libQt5Core5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152281" comment="libQt5Core5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139673" comment="libQt5DBus-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152283" comment="libQt5DBus-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139674" comment="libQt5DBus5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152286" comment="libQt5DBus5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139675" comment="libQt5Gui-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152294" comment="libQt5Gui-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139676" comment="libQt5Gui-private-headers-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152296" comment="libQt5Gui-private-headers-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139677" comment="libQt5Gui5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152297" comment="libQt5Gui5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139678" comment="libQt5Network-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152305" comment="libQt5Network-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139679" comment="libQt5Network5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152308" comment="libQt5Network5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139680" comment="libQt5OpenGL-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152313" comment="libQt5OpenGL-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139681" comment="libQt5OpenGL5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152316" comment="libQt5OpenGL5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139682" comment="libQt5PlatformHeaders-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152320" comment="libQt5PlatformHeaders-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139683" comment="libQt5PrintSupport-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152326" comment="libQt5PrintSupport-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139684" comment="libQt5PrintSupport5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152329" comment="libQt5PrintSupport5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139685" comment="libQt5Sql-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152338" comment="libQt5Sql-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139686" comment="libQt5Sql5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152341" comment="libQt5Sql5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139687" comment="libQt5Sql5-mysql-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152343" comment="libQt5Sql5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139688" comment="libQt5Sql5-postgresql-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152345" comment="libQt5Sql5-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139689" comment="libQt5Sql5-sqlite-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152347" comment="libQt5Sql5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139690" comment="libQt5Sql5-unixODBC-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152349" comment="libQt5Sql5-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139691" comment="libQt5Test-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152353" comment="libQt5Test-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139692" comment="libQt5Test5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152356" comment="libQt5Test5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139693" comment="libQt5Widgets-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152377" comment="libQt5Widgets-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139694" comment="libQt5Widgets5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152380" comment="libQt5Widgets5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139695" comment="libQt5Xml-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152384" comment="libQt5Xml-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139696" comment="libQt5Xml5-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152386" comment="libQt5Xml5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140016" comment="libqt4-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151228" comment="libqt4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140017" comment="libqt4-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151229" comment="libqt4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140018" comment="libqt4-devel-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151230" comment="libqt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140019" comment="libqt4-linguist-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151231" comment="libqt4-linguist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140020" comment="libqt4-qt3support-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151232" comment="libqt4-qt3support is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140021" comment="libqt4-qt3support-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151233" comment="libqt4-qt3support-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140022" comment="libqt4-sql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151234" comment="libqt4-sql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140023" comment="libqt4-sql-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151235" comment="libqt4-sql-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140024" comment="libqt4-sql-mysql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151236" comment="libqt4-sql-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140025" comment="libqt4-sql-postgresql-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151238" comment="libqt4-sql-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140026" comment="libqt4-sql-sqlite-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151240" comment="libqt4-sql-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140027" comment="libqt4-sql-sqlite-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151241" comment="libqt4-sql-sqlite-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140028" comment="libqt4-sql-unixODBC-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151242" comment="libqt4-sql-unixODBC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140029" comment="libqt4-x11-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151244" comment="libqt4-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140030" comment="libqt4-x11-32bit-4.8.6-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151245" comment="libqt4-x11-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139697" comment="libqt5-qtbase-common-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152401" comment="libqt5-qtbase-common-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139698" comment="libqt5-qtbase-devel-5.6.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152402" comment="libqt5-qtbase-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20151863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-1863</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-1863" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1863" source="CVE"/>
    <description>
    Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-1863.html">CVE-2015-1863</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-1863">SUSE bug 927558</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140402" comment="wpa_supplicant-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140403" comment="wpa_supplicant-gui-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152059" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2059</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2059" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2059" source="CVE"/>
    <description>
    The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2059.html">CVE-2015-2059</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 919214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 923241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2059">SUSE bug 937096</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139877" comment="libidn-devel-1.28-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152666" comment="libidn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139878" comment="libidn11-1.28-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152668" comment="libidn11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140399" comment="wget-1.14-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2153</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2153" source="CVE"/>
    <description>
    The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2153.html">CVE-2015-2153</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2153">SUSE bug 922221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2153">SUSE bug 922222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2153">SUSE bug 922223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2153">SUSE bug 922221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2153">SUSE bug 922221</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140370" comment="tcpdump-4.5.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2154</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2154" source="CVE"/>
    <description>
    The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2154.html">CVE-2015-2154</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2154">SUSE bug 922222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2154">SUSE bug 922222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2154">SUSE bug 922222</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140370" comment="tcpdump-4.5.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2155</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2155" source="CVE"/>
    <description>
    The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2155.html">CVE-2015-2155</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2155">SUSE bug 922220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2155">SUSE bug 922221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2155">SUSE bug 922222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2155">SUSE bug 922223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2155">SUSE bug 922223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2155">SUSE bug 922223</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140370" comment="tcpdump-4.5.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2170</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2170" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2170" source="CVE"/>
    <description>
    The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2170.html">CVE-2015-2170</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2170">SUSE bug 922560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2170">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2170">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2170">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2170">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2170">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2170">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2170">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2170">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2170">SUSE bug 1040662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2170">SUSE bug 929192</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2181</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2181" source="CVE"/>
    <description>
    Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) password or (2) username.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2181.html">CVE-2015-2181</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2181">SUSE bug 976988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2181">SUSE bug 976988</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136830" comment="roundcubemail-1.1.7-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152670" comment="roundcubemail is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2187</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2187" source="CVE"/>
    <description>
    The dissect_atn_cpdlc_heur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c in the ATN-CPDLC dissector in Wireshark 1.12.x before 1.12.4 does not properly follow the TRY/ENDTRY code requirements, which allows remote attackers to cause a denial of service (stack memory corruption and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2187.html">CVE-2015-2187</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2187">SUSE bug 920695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2187">SUSE bug 920695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2187">SUSE bug 920695</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2188</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2188" source="CVE"/>
    <description>
    epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that is improperly handled during decompression.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2188.html">CVE-2015-2188</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2188">SUSE bug 920696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2188">SUSE bug 920696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2188">SUSE bug 920696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2188">SUSE bug 920696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2188">SUSE bug 920696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2188">SUSE bug 920696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2188">SUSE bug 920696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2188">SUSE bug 920696</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2189</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2189" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2189" source="CVE"/>
    <description>
    Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via an invalid Interface Statistics Block (ISB) interface ID in a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2189.html">CVE-2015-2189</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2189">SUSE bug 920697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2189">SUSE bug 920697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2189">SUSE bug 920697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2189">SUSE bug 920697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2189">SUSE bug 920697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2189">SUSE bug 920697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2189">SUSE bug 920697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2189">SUSE bug 920697</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2190</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2190" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2190" source="CVE"/>
    <description>
    epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet that is improperly handled by the LLDP dissector.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2190.html">CVE-2015-2190</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2190">SUSE bug 920698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2190">SUSE bug 920698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2190">SUSE bug 920698</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2191" source="CVE"/>
    <description>
    Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2191.html">CVE-2015-2191</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2191">SUSE bug 920699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2191">SUSE bug 920699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2191">SUSE bug 920699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2191">SUSE bug 920699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2191">SUSE bug 920699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2191">SUSE bug 920699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2191">SUSE bug 920699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2191">SUSE bug 920699</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2192</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2192" source="CVE"/>
    <description>
    Integer overflow in the dissect_osd2_cdb_continuation function in epan/dissectors/packet-scsi-osd.c in the SCSI OSD dissector in Wireshark 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2192.html">CVE-2015-2192</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2192">SUSE bug 920700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2192">SUSE bug 920700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2192">SUSE bug 920700</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2221</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2221" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2221" source="CVE"/>
    <description>
    ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted y0da cryptor file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2221.html">CVE-2015-2221</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2221">SUSE bug 922560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2221">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2221">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2221">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2221">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2221">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2221">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2221">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2221">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2221">SUSE bug 1040662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2221">SUSE bug 929192</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2222</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2222" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2222" source="CVE"/>
    <description>
    ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted petite packed file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2222.html">CVE-2015-2222</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2222">SUSE bug 922560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2222">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2222">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2222">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2222">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2222">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2222">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2222">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2222">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2222">SUSE bug 1040662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2222">SUSE bug 929192</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2265</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2265" source="CVE"/>
    <description>
    The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or (2) PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2265.html">CVE-2015-2265</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 937018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2265">SUSE bug 921753</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2296</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2296" source="CVE"/>
    <description>
    The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2296.html">CVE-2015-2296</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2296">SUSE bug 922448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2296">SUSE bug 922448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2296">SUSE bug 926396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2296">SUSE bug 922448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2296">SUSE bug 922448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2296">SUSE bug 922448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2296">SUSE bug 922448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2296">SUSE bug 922448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2296">SUSE bug 922448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2296">SUSE bug 922448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2296">SUSE bug 922448</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140316" comment="python-requests-2.11.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154120" comment="python-requests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140329" comment="python3-pip-7.1.2-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151932" comment="python3-pip is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2301</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2301" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2301" source="CVE"/>
    <description>
    Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2301.html">CVE-2015-2301</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2301">SUSE bug 922452</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2304</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2304" source="CVE"/>
    <description>
    Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2304.html">CVE-2015-2304</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2304">SUSE bug 920870</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136449" comment="libarchive-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152671" comment="libarchive is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136452" comment="libarchive13-32bit-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152672" comment="libarchive13-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2305</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2305" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2305" source="CVE"/>
    <description>
    Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2305.html">CVE-2015-2305</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 922030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 1040662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2305">SUSE bug 929192</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2325</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2325" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2325" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2325.html">CVE-2015-2325</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 933288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 936408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2325">SUSE bug 924960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152326" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2326</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2326" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2326" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2326.html">CVE-2015-2326</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 933288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 936408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2326">SUSE bug 924961</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2327</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2327" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2327" source="CVE"/>
    <description>
    PCRE before 8.36 mishandles the /(((a\2)|(a*)\g&lt;-1&gt;))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2327.html">CVE-2015-2327</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2327">SUSE bug 957567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2327">SUSE bug 957567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2327">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2327">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2327">SUSE bug 957567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2327">SUSE bug 957567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2327">SUSE bug 957567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2327">SUSE bug 957567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2327">SUSE bug 957567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2327">SUSE bug 957567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2327">SUSE bug 957567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2328</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2328" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2328" source="CVE"/>
    <description>
    PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2328.html">CVE-2015-2328</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 957600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 957600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 957600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 957600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 957600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 957600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 957600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 957600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 957600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2328">SUSE bug 957600</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2330</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2330" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2330" source="CVE"/>
    <description>
    Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2330.html">CVE-2015-2330</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2330">SUSE bug 922895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2330">SUSE bug 922895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2330">SUSE bug 922895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2330">SUSE bug 922895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2330">SUSE bug 922895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2330">SUSE bug 922895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152331" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2331</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2331" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2331" source="CVE"/>
    <description>
    Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2331.html">CVE-2015-2331</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 922894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 922894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 923240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 922894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 923240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 922894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 922894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 922894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 923240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 922894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 923240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 922894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 922894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2331">SUSE bug 922894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140235" comment="libzip-devel-0.11.1-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151554" comment="libzip-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140236" comment="libzip2-0.11.1-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151555" comment="libzip2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2348</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2348" source="CVE"/>
    <description>
    The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 truncates a pathname upon encountering a \x00 character, which allows remote attackers to bypass intended extension restrictions and create files with unexpected names via a crafted second argument.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2348.html">CVE-2015-2348</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2348">SUSE bug 924970</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2568</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2568" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server : Security : Privileges.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2568.html">CVE-2015-2568</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2568">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2568">SUSE bug 936409</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2571</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2571" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2571.html">CVE-2015-2571</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2571">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2571">SUSE bug 936408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2573</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2573" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2573" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2573.html">CVE-2015-2573</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2573">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2573">SUSE bug 936409</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2575</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2575" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2575" source="CVE"/>
    <description>
    Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2575.html">CVE-2015-2575</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2575">SUSE bug 927981</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140249" comment="mysql-connector-java-5.1.35-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152673" comment="mysql-connector-java is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2590</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2590.html">CVE-2015-2590</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2590">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2590">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2590">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2590">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2590">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2590">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2590">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2590">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2590">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2597</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2597" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2597.html">CVE-2015-2597</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2597">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2597">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2597">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2601</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2601" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2601.html">CVE-2015-2601</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2601">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2601">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2601">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2601">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2613</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2613" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2613" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2613.html">CVE-2015-2613</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2613">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2613">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2613">SUSE bug 951727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2613">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2613">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2619</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2619" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2619.html">CVE-2015-2619</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2619">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2619">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2619">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2619">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2621</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2621" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2621.html">CVE-2015-2621</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2621">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2621">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2621">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2621">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2625</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2625.html">CVE-2015-2625</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2625">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2625">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2625">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2625">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2627</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2627" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2627" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to installation.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2627.html">CVE-2015-2627</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2627">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2627">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2627">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2628</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2628" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2628.html">CVE-2015-2628</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2628">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2628">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2628">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2632</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2632.html">CVE-2015-2632</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2632">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2632">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2632">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2632">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2637</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2637" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2637" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2637.html">CVE-2015-2637</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2637">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2637">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2637">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2637">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2638</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2638" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2638" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2638.html">CVE-2015-2638</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2638">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2638">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2638">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2638">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2659</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2659" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2659" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related to Security.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2659.html">CVE-2015-2659</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2659">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2659">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2659">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2664</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2664" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2664" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2664.html">CVE-2015-2664</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2664">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2664">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2664">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2664">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2668</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2668" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2668" source="CVE"/>
    <description>
    ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted xz archive file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2668.html">CVE-2015-2668</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2668">SUSE bug 922560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2668">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2668">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2668">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2668">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2668">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2668">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2668">SUSE bug 921950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2668">SUSE bug 929192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2668">SUSE bug 1040662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2668">SUSE bug 929192</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139313" comment="clamav-0.99.2-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151381" comment="clamav is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2694</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2694" source="CVE"/>
    <description>
    The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2694.html">CVE-2015-2694</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2694">SUSE bug 928978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2694">SUSE bug 928978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2694">SUSE bug 928978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2694">SUSE bug 928978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2694">SUSE bug 928978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2694">SUSE bug 928978</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2695</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2695" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2695" source="CVE"/>
    <description>
    lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2695.html">CVE-2015-2695</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 952188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 952188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 952188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 952188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 952188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 952188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 952188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 952188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 952188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 952188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 969771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2695">SUSE bug 770172</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2696</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2696" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2696" source="CVE"/>
    <description>
    lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a gss_inquire_context call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2696.html">CVE-2015-2696</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2696">SUSE bug 952189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2696">SUSE bug 952189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2696">SUSE bug 952189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2696">SUSE bug 954204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2696">SUSE bug 952189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2696">SUSE bug 770172</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152697" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2697</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2697" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2697" source="CVE"/>
    <description>
    The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field within a TGS request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2697.html">CVE-2015-2697</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2697">SUSE bug 952190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2697">SUSE bug 952190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2697">SUSE bug 952190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2697">SUSE bug 952190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2697">SUSE bug 770172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2697">SUSE bug 952190</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2698</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2698" source="CVE"/>
    <description>
    The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have unspecified other impact by interacting with an application that calls the gss_export_sec_context function.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-2696.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2698.html">CVE-2015-2698</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2698">SUSE bug 954204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2698">SUSE bug 954204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2698">SUSE bug 954204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2698">SUSE bug 954204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2698">SUSE bug 770172</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2706</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2706" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2706" source="CVE"/>
    <description>
    Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted plugin that does not properly complete initialization.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2706.html">CVE-2015-2706</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2706">SUSE bug 928116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2706">SUSE bug 928116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2706">SUSE bug 928116</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2708</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2708" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2708" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2708.html">CVE-2015-2708</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2708">SUSE bug 930622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2709</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2709" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2709" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2709.html">CVE-2015-2709</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2709">SUSE bug 930622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2710</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2710" source="CVE"/>
    <description>
    Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via crafted SVG graphics data in conjunction with a crafted Cascading Style Sheets (CSS) token sequence.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2710.html">CVE-2015-2710</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2710">SUSE bug 930622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2711</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2711" source="CVE"/>
    <description>
    Mozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META element in cases of context-menu navigation and middle-click navigation, which allows remote attackers to obtain sensitive information by reading web-server Referer logs that contain private data in a URL, as demonstrated by a private path component.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2711.html">CVE-2015-2711</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2711">SUSE bug 930622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2712</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2712" source="CVE"/>
    <description>
    The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification of cases in which bounds checking may be safely skipped, which allows remote attackers to trigger out-of-bounds write operations and possibly execute arbitrary code, or trigger out-of-bounds read operations and possibly obtain sensitive information from process memory, via crafted JavaScript.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2712.html">CVE-2015-2712</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2712">SUSE bug 930622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2713</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2713" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2713" source="CVE"/>
    <description>
    Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a document containing crafted text in conjunction with a Cascading Style Sheets (CSS) token sequence containing properties related to vertical text.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2713.html">CVE-2015-2713</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2713">SUSE bug 930622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2715</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2715" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2715" source="CVE"/>
    <description>
    Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) by leveraging improper Media Decoder Thread creation at the time of a shutdown.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2715.html">CVE-2015-2715</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2715">SUSE bug 930622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2716</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2716" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2716" source="CVE"/>
    <description>
    Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2716.html">CVE-2015-2716</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2716">SUSE bug 930622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2716">SUSE bug 980391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2716">SUSE bug 983985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2716">SUSE bug 983985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2716">SUSE bug 983985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2716">SUSE bug 983985</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2717</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2717" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2717" source="CVE"/>
    <description>
    Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and out-of-bounds read) via an MP4 video file containing invalid metadata.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2717.html">CVE-2015-2717</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2717">SUSE bug 930622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2718</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2718" source="CVE"/>
    <description>
    The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2718.html">CVE-2015-2718</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2718">SUSE bug 930622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2721</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2721" source="CVE"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, Thunderbird before 38.1, and other products, does not properly determine state transitions for the TLS state machine, which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages, as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message, aka a "SMACK SKIP-TLS" issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2721.html">CVE-2015-2721</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2721">SUSE bug 935979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2721">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2722</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2722" source="CVE"/>
    <description>
    Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2722.html">CVE-2015-2722</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2722">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2724</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2724" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2724" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2724.html">CVE-2015-2724</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2724">SUSE bug 935979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2724">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2725</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2725" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2725.html">CVE-2015-2725</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2725">SUSE bug 935979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2725">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152726" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2726</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2726" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2726" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2726.html">CVE-2015-2726</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2726">SUSE bug 935979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2726">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152727" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2727</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2727" source="CVE"/>
    <description>
    Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions.  NOTE: this vulnerability exists because of a CVE-2015-0821 regression.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2727.html">CVE-2015-2727</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2727">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2728</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2728" source="CVE"/>
    <description>
    The IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 misinterprets an unspecified IDBDatabase field as a pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors, related to a "type confusion" issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2728.html">CVE-2015-2728</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2728">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2729</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2729" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2729" source="CVE"/>
    <description>
    The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2729.html">CVE-2015-2729</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2729">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2730</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2730" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2730" source="CVE"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography (ECC) multiplications, which makes it easier for remote attackers to spoof ECDSA signatures via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2730.html">CVE-2015-2730</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2730">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2731</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2731" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2731" source="CVE"/>
    <description>
    Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers removal of a DOM object on the basis of a Content Policy.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2731.html">CVE-2015-2731</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2731">SUSE bug 935979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2731">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2733</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2733" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2733" source="CVE"/>
    <description>
    Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2733.html">CVE-2015-2733</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2733">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2734</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2734" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2734" source="CVE"/>
    <description>
    The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2734.html">CVE-2015-2734</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2734">SUSE bug 935979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2734">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2735</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2735" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2735" source="CVE"/>
    <description>
    nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2735.html">CVE-2015-2735</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2735">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2736</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2736" source="CVE"/>
    <description>
    The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2736.html">CVE-2015-2736</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2736">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2737</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2737" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2737" source="CVE"/>
    <description>
    The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2737.html">CVE-2015-2737</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2737">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2738</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2738" source="CVE"/>
    <description>
    The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2738.html">CVE-2015-2738</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2738">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2739</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2739" source="CVE"/>
    <description>
    The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2739.html">CVE-2015-2739</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2739">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2740</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2740" source="CVE"/>
    <description>
    Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2740.html">CVE-2015-2740</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2740">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2741</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2741" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2741" source="CVE"/>
    <description>
    Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted man-in-the-middle attackers to bypass intended access restrictions by triggering a (1) expired certificate or (2) mismatched hostname for a domain with pinning enabled.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2741.html">CVE-2015-2741</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2741">SUSE bug 935979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2741">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2742</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2742" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2742" source="CVE"/>
    <description>
    Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2742.html">CVE-2015-2742</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2742">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2743</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2743" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2743" source="CVE"/>
    <description>
    PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2743.html">CVE-2015-2743</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2743">SUSE bug 935979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2775</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2775" source="CVE"/>
    <description>
    Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2775.html">CVE-2015-2775</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2775">SUSE bug 925502</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2775">SUSE bug 925502</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2775">SUSE bug 925502</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2775">SUSE bug 925502</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140240" comment="mailman-2.1.22-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151563" comment="mailman is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2783</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2783" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2783" source="CVE"/>
    <description>
    ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2783.html">CVE-2015-2783</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2783">SUSE bug 928408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2783">SUSE bug 928506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2783">SUSE bug 928511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2783">SUSE bug 928511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2783">SUSE bug 928511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2783">SUSE bug 931418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2783">SUSE bug 931418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2783">SUSE bug 928511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2783">SUSE bug 928511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2783">SUSE bug 931418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2783">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2787</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2787" source="CVE"/>
    <description>
    Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2787.html">CVE-2015-2787</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2787">SUSE bug 924972</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2806</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2806" source="CVE"/>
    <description>
    Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2806.html">CVE-2015-2806</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 961491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2806">SUSE bug 924828</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140136" comment="libtasn1-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152119" comment="libtasn1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140137" comment="libtasn1-6-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152120" comment="libtasn1-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140138" comment="libtasn1-6-32bit-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152121" comment="libtasn1-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140139" comment="libtasn1-devel-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152122" comment="libtasn1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2808</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2808" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808" source="CVE"/>
    <description>
    The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2808.html">CVE-2015-2808</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 925378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 925378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 925378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 925378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 925378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 925378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 925378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 952088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 925378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2808">SUSE bug 925378</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20152924" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-2924</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-2924" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2924" source="CVE"/>
    <description>
    The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message, a similar issue to CVE-2015-2922.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-2924.html">CVE-2015-2924</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2924">SUSE bug 926223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2924">SUSE bug 926223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2924">SUSE bug 926223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2924">SUSE bug 926223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2924">SUSE bug 926223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2924">SUSE bug 926223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2924">SUSE bug 926223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-2924">SUSE bug 926223</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139178" comment="NetworkManager-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152685" comment="NetworkManager is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139179" comment="NetworkManager-devel-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152686" comment="NetworkManager-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139180" comment="NetworkManager-lang-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152687" comment="NetworkManager-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139181" comment="libnm-glib-vpn1-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152688" comment="libnm-glib-vpn1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139182" comment="libnm-glib4-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152689" comment="libnm-glib4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139183" comment="libnm-util2-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152690" comment="libnm-util2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139184" comment="libnm0-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152691" comment="libnm0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139185" comment="typelib-1_0-NM-1_0-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152692" comment="typelib-1_0-NM-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139186" comment="typelib-1_0-NMClient-1_0-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152693" comment="typelib-1_0-NMClient-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139187" comment="typelib-1_0-NetworkManager-1_0-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152694" comment="typelib-1_0-NetworkManager-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3138</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3138" source="CVE"/>
    <description>
    print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3138.html">CVE-2015-3138</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3138">SUSE bug 927637</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3143" source="CVE"/>
    <description>
    cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3143.html">CVE-2015-3143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3143">SUSE bug 927556</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3144</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3144" source="CVE"/>
    <description>
    The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-length host name, as demonstrated by "http://:80" and ":80."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3144.html">CVE-2015-3144</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3144">SUSE bug 927608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3144">SUSE bug 927608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3144">SUSE bug 927608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3144">SUSE bug 927608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3144">SUSE bug 927608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3144">SUSE bug 927608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3144">SUSE bug 927608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3144">SUSE bug 927608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3144">SUSE bug 927608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3144">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3145</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3145" source="CVE"/>
    <description>
    The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3145.html">CVE-2015-3145</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3145">SUSE bug 927607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3145">SUSE bug 927607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3145">SUSE bug 927607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3145">SUSE bug 927607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3145">SUSE bug 927607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3145">SUSE bug 927607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3145">SUSE bug 927607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3145">SUSE bug 927607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3145">SUSE bug 927607</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3146</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3146" source="CVE"/>
    <description>
    The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted SSH packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3146.html">CVE-2015-3146</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3146">SUSE bug 928323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3146">SUSE bug 928323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3146">SUSE bug 928323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3146">SUSE bug 928323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3146">SUSE bug 928323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3146">SUSE bug 928323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3146">SUSE bug 928323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3146">SUSE bug 928323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3146">SUSE bug 928323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3146">SUSE bug 928323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3146">SUSE bug 928323</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140104" comment="libssh-devel-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151771" comment="libssh-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140105" comment="libssh4-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3148</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3148" source="CVE"/>
    <description>
    cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3148.html">CVE-2015-3148</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3148">SUSE bug 927746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153152" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3152</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3152" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3152" source="CVE"/>
    <description>
    Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3152.html">CVE-2015-3152</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 936407</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 936407</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 936407</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 936407</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 936407</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 936407</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 936407</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 936407</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 1037590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 1047059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 1047059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 928962</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 1047059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 1088681</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 1088681</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 1088681</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 1088681</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3152">SUSE bug 1088681</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3153</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3153" source="CVE"/>
    <description>
    The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3153.html">CVE-2015-3153</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3153">SUSE bug 928533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3164</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3164" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3164" source="CVE"/>
    <description>
    The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3164.html">CVE-2015-3164</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3164">SUSE bug 934102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3164">SUSE bug 934102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3164">SUSE bug 934102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3164">SUSE bug 934102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3164">SUSE bug 934102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3164">SUSE bug 934102</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140418" comment="xorg-x11-server-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140419" comment="xorg-x11-server-extra-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140420" comment="xorg-x11-server-sdk-7.6_1.18.3-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3165</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3165" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3165" source="CVE"/>
    <description>
    Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3165.html">CVE-2015-3165</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3165">SUSE bug 931972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3165">SUSE bug 931973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3165">SUSE bug 931974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3165">SUSE bug 932040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3165">SUSE bug 931972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3165">SUSE bug 931972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3165">SUSE bug 932040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3165">SUSE bug 932040</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3166</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3166" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3166" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3166.html">CVE-2015-3166</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3166">SUSE bug 931972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3166">SUSE bug 931973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3166">SUSE bug 931974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3166">SUSE bug 932040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3166">SUSE bug 931973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3166">SUSE bug 931973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3166">SUSE bug 931973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3166">SUSE bug 931973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3166">SUSE bug 932040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3166">SUSE bug 932040</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3167</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3167" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3167.html">CVE-2015-3167</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3167">SUSE bug 931972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3167">SUSE bug 931973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3167">SUSE bug 931974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3167">SUSE bug 932040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3167">SUSE bug 931974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3167">SUSE bug 931974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3167">SUSE bug 932040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3167">SUSE bug 932040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3167">SUSE bug 931974</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3167">SUSE bug 931974</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3184</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3184" source="CVE"/>
    <description>
    mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3184.html">CVE-2015-3184</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3184">SUSE bug 939514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3184">SUSE bug 939516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3184">SUSE bug 939514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3184">SUSE bug 939514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3184">SUSE bug 939514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3184">SUSE bug 939514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3184">SUSE bug 939514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3184">SUSE bug 939514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3184">SUSE bug 939516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3184">SUSE bug 938723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3184">SUSE bug 938723</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3187</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3187" source="CVE"/>
    <description>
    The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3187.html">CVE-2015-3187</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3187">SUSE bug 939517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3187">SUSE bug 939517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3187">SUSE bug 939517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3187">SUSE bug 939517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3187">SUSE bug 939517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3187">SUSE bug 939517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3187">SUSE bug 939517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3187">SUSE bug 939517</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3194</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194" source="CVE"/>
    <description>
    crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3194.html">CVE-2015-3194</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3194">SUSE bug 990370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3195</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195" source="CVE"/>
    <description>
    The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3195.html">CVE-2015-3195</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 958768</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 963977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 923755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 963977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 986238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 986238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 986238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 986238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 986238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3195">SUSE bug 957812</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3196</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196" source="CVE"/>
    <description>
    ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3196.html">CVE-2015-3196</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3196">SUSE bug 957813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3196">SUSE bug 957813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3196">SUSE bug 957813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3196">SUSE bug 957813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3196">SUSE bug 957813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3196">SUSE bug 957813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3196">SUSE bug 957813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3196">SUSE bug 957813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3196">SUSE bug 957813</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3197</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3197" source="CVE"/>
    <description>
    ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3197.html">CVE-2015-3197</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3197">SUSE bug 963415</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3202</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3202" source="CVE"/>
    <description>
    fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3202.html">CVE-2015-3202</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3202">SUSE bug 931452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3202">SUSE bug 931452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3202">SUSE bug 931452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3202">SUSE bug 931452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3202">SUSE bug 931452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3202">SUSE bug 931452</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139459" comment="fuse-2.9.3-9.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151346" comment="fuse is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139460" comment="libfuse2-2.9.3-9.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151347" comment="libfuse2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3209</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3209" source="CVE"/>
    <description>
    Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3209.html">CVE-2015-3209</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3209">SUSE bug 932770</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3210" source="CVE"/>
    <description>
    Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P&lt;B&gt;c)(?P&lt;B&gt;a(?P=B)))&gt;WGXCREDITS)/, a different vulnerability than CVE-2015-8384.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3210.html">CVE-2015-3210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 933288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 933288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 933288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 933288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 933288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 933288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 933288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 933288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3210">SUSE bug 933288</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3216</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3216" source="CVE"/>
    <description>
    Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3216.html">CVE-2015-3216</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3216">SUSE bug 933898</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3217</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3217" source="CVE"/>
    <description>
    PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3217.html">CVE-2015-3217</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3217">SUSE bug 933878</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3218</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3218" source="CVE"/>
    <description>
    The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3218.html">CVE-2015-3218</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3218">SUSE bug 933922</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139970" comment="libpolkit0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139971" comment="polkit-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139972" comment="polkit-devel-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151395" comment="polkit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139973" comment="typelib-1_0-Polkit-1_0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3223</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3223" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3223" source="CVE"/>
    <description>
    The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3223.html">CVE-2015-3223</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3223">SUSE bug 958581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3223">SUSE bug 958581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3223">SUSE bug 958581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3223">SUSE bug 958581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3223">SUSE bug 958581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3223">SUSE bug 958581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3223">SUSE bug 958581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3223">SUSE bug 958581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3223">SUSE bug 958581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3223">SUSE bug 958581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3223">SUSE bug 958581</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139920" comment="libldb1-1.1.26-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152733" comment="libldb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139921" comment="libldb1-32bit-1.1.26-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152734" comment="libldb1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3228</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3228" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3228" source="CVE"/>
    <description>
    Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3228.html">CVE-2015-3228</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3228">SUSE bug 939342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3228">SUSE bug 939342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3228">SUSE bug 939342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3228">SUSE bug 939342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3228">SUSE bug 939342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3228">SUSE bug 939342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3228">SUSE bug 939342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3228">SUSE bug 939342</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139482" comment="ghostscript-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139483" comment="ghostscript-devel-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151934" comment="ghostscript-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139484" comment="ghostscript-x11-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3238</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3238" source="CVE"/>
    <description>
    The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3238.html">CVE-2015-3238</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3238">SUSE bug 934920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3238">SUSE bug 934920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3238">SUSE bug 934920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3238">SUSE bug 934920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3238">SUSE bug 934920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3238">SUSE bug 934920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3238">SUSE bug 934920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3238">SUSE bug 934920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3238">SUSE bug 934920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3238">SUSE bug 934920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3238">SUSE bug 934920</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140276" comment="pam-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151504" comment="pam is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140277" comment="pam-32bit-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151505" comment="pam-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140278" comment="pam-devel-1.3.0-1.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151506" comment="pam-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3247</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3247" source="CVE"/>
    <description>
    Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3247.html">CVE-2015-3247</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3247">SUSE bug 944460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140097" comment="libspice-server1-0.12.7-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3255</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3255" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3255" source="CVE"/>
    <description>
    The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3255.html">CVE-2015-3255</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3255">SUSE bug 939246</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139970" comment="libpolkit0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139971" comment="polkit-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139972" comment="polkit-devel-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151395" comment="polkit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139973" comment="typelib-1_0-Polkit-1_0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3256</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3256" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3256" source="CVE"/>
    <description>
    PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daemon crash) and possibly gain privileges via unspecified vectors, related to "javascript rule evaluation."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3256.html">CVE-2015-3256</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3256">SUSE bug 943816</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139970" comment="libpolkit0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139971" comment="polkit-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139972" comment="polkit-devel-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151395" comment="polkit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139973" comment="typelib-1_0-Polkit-1_0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3258</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3258" source="CVE"/>
    <description>
    Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3258.html">CVE-2015-3258</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 937018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 937018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 937018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3258">SUSE bug 936281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3259</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3259" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3259" source="CVE"/>
    <description>
    Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators to gain privileges via a long configuration argument.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3259.html">CVE-2015-3259</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 937018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3259">SUSE bug 935634</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3279</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3279" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3279" source="CVE"/>
    <description>
    Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3279.html">CVE-2015-3279</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3279">SUSE bug 937018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3279">SUSE bug 921753</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3279">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3279">SUSE bug 937018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3279">SUSE bug 936281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3279">SUSE bug 937018</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3294</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3294" source="CVE"/>
    <description>
    The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malformed DNS request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3294.html">CVE-2015-3294</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3294">SUSE bug 923144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3294">SUSE bug 928867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3294">SUSE bug 928867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3294">SUSE bug 928867</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139390" comment="dnsmasq-2.71-6.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3310</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3310" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3310" source="CVE"/>
    <description>
    Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3310.html">CVE-2015-3310</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3310">SUSE bug 927841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3310">SUSE bug 927841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3310">SUSE bug 927841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3310">SUSE bug 927841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3310">SUSE bug 927841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3310">SUSE bug 927841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3310">SUSE bug 927841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3310">SUSE bug 927841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3310">SUSE bug 927841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3310">SUSE bug 927841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3310">SUSE bug 927841</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140302" comment="ppp-2.4.7-5.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152115" comment="ppp is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153329" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3329</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3329" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3329" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3329.html">CVE-2015-3329</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3329">SUSE bug 928408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3329">SUSE bug 928506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3329">SUSE bug 928511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3329">SUSE bug 928506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3329">SUSE bug 928506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3329">SUSE bug 928506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3329">SUSE bug 928506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3329">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3330</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3330" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3330" source="CVE"/>
    <description>
    The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via pipelined HTTP requests that result in a "deconfigured interpreter."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3330.html">CVE-2015-3330</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3330">SUSE bug 928408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3330">SUSE bug 928408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3330">SUSE bug 928506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3330">SUSE bug 928511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3330">SUSE bug 928408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3330">SUSE bug 908782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3330">SUSE bug 908782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3330">SUSE bug 928408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3340</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3340" source="CVE"/>
    <description>
    Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3340.html">CVE-2015-3340</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3340">SUSE bug 927967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3340">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3340">SUSE bug 927967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3340">SUSE bug 927967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3340">SUSE bug 927967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3340">SUSE bug 927967</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3405</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3405" source="CVE"/>
    <description>
    ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3405.html">CVE-2015-3405</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 924202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3405">SUSE bug 928321</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3411</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3411" source="CVE"/>
    <description>
    PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\0.xml attack that bypasses an intended configuration in which client users may read only .xml files.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3411.html">CVE-2015-3411</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3411">SUSE bug 935227</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3412</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3412" source="CVE"/>
    <description>
    PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename\0.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3412.html">CVE-2015-3412</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935229</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3412">SUSE bug 935229</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3451</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3451" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3451" source="CVE"/>
    <description>
    The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3451.html">CVE-2015-3451</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3451">SUSE bug 929237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3451">SUSE bug 929237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3451">SUSE bug 929237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3451">SUSE bug 929237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3451">SUSE bug 929237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3451">SUSE bug 929237</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140294" comment="perl-XML-LibXML-2.0019-6.21 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152786" comment="perl-XML-LibXML is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3456</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456" source="CVE"/>
    <description>
    The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3456.html">CVE-2015-3456</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 932770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 929339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3456">SUSE bug 935900</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3622</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3622" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3622" source="CVE"/>
    <description>
    The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3622.html">CVE-2015-3622</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3622">SUSE bug 929414</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140136" comment="libtasn1-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152119" comment="libtasn1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140137" comment="libtasn1-6-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152120" comment="libtasn1-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140138" comment="libtasn1-6-32bit-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152121" comment="libtasn1-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140139" comment="libtasn1-devel-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152122" comment="libtasn1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3658</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3658" source="CVE"/>
    <description>
    The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3658.html">CVE-2015-3658</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3658">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153659" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3659</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3659" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3659" source="CVE"/>
    <description>
    The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3659.html">CVE-2015-3659</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3659">SUSE bug 936835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3659">SUSE bug 936835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3659">SUSE bug 936835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3659">SUSE bug 936835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3659">SUSE bug 936836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3659">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153727" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3727</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3727" source="CVE"/>
    <description>
    WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site's database via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3727.html">CVE-2015-3727</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3727">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3731</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3731" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3731" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3731.html">CVE-2015-3731</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3731">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3741</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3741" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3741" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3741.html">CVE-2015-3741</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3741">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3743</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3743" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3743" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3743.html">CVE-2015-3743</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3743">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3745</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3745" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3745.html">CVE-2015-3745</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3745">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3747</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3747" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3747" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3747.html">CVE-2015-3747</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3747">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3748</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3748" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3748.html">CVE-2015-3748</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3748">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3749</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3749" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3749.html">CVE-2015-3749</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3749">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3752</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3752" source="CVE"/>
    <description>
    The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly restrict cookie transmission for report requests, which allows remote attackers to obtain sensitive information via vectors involving (1) a cross-origin request or (2) a private-browsing request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3752.html">CVE-2015-3752</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3752">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3808</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3808" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3808" source="CVE"/>
    <description>
    The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3808.html">CVE-2015-3808</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3808">SUSE bug 930689</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3809</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3809" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3809" source="CVE"/>
    <description>
    The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3809.html">CVE-2015-3809</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3809">SUSE bug 930689</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3810</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3810" source="CVE"/>
    <description>
    epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3810.html">CVE-2015-3810</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3810">SUSE bug 930689</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3811</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3811" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3811" source="CVE"/>
    <description>
    epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, a different vulnerability than CVE-2015-2188.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3811.html">CVE-2015-3811</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3811">SUSE bug 930689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3811">SUSE bug 930691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3812</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3812" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3812" source="CVE"/>
    <description>
    Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service (memory consumption) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3812.html">CVE-2015-3812</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3812">SUSE bug 930689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3812">SUSE bug 930691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3813</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3813" source="CVE"/>
    <description>
    The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine the defragmentation state in a case of an insufficient snapshot length, which allows remote attackers to cause a denial of service (memory consumption) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3813.html">CVE-2015-3813</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3813">SUSE bug 930689</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3814</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3814" source="CVE"/>
    <description>
    The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 interpret a zero value as a length rather than an error condition, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3814.html">CVE-2015-3814</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3814">SUSE bug 930689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3814">SUSE bug 930691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3815</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3815" source="CVE"/>
    <description>
    The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3815.html">CVE-2015-3815</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3815">SUSE bug 930689</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20153900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-3900</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-3900" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3900" source="CVE"/>
    <description>
    RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-3900.html">CVE-2015-3900</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-3900">SUSE bug 936032</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154826" comment="libruby2_1-2_1-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152217" comment="libruby2_1-2_1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154827" comment="ruby2.1-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152218" comment="ruby2.1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154828" comment="ruby2.1-devel-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152219" comment="ruby2.1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154829" comment="ruby2.1-devel-extra-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154837" comment="ruby2.1-devel-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154830" comment="ruby2.1-doc-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154839" comment="ruby2.1-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154831" comment="ruby2.1-doc-ri-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154841" comment="ruby2.1-doc-ri is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154832" comment="ruby2.1-stdlib-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152220" comment="ruby2.1-stdlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4000</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000" source="CVE"/>
    <description>
    The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4000.html">CVE-2015-4000</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 932026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 932483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 934789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 935033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 935540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 936168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 935979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 937202</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 935979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 937766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 937724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 938432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 938905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 938906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 938913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 938945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 941696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 941696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 941696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 941696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 941696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 941696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 943664</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 944729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 955589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 955589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 980406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 980406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 980406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 980406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 980406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 931600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 990592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4000">SUSE bug 1074631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140140" comment="libtcnative-1-0-1.1.32-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152791" comment="libtcnative-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4021</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4021" source="CVE"/>
    <description>
    The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4021.html">CVE-2015-4021</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4021">SUSE bug 931769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4021">SUSE bug 931769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4021">SUSE bug 931769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4021">SUSE bug 931769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4021">SUSE bug 931769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4021">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4021">SUSE bug 931769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4021">SUSE bug 931769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4021">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4022</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4022" source="CVE"/>
    <description>
    Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4022.html">CVE-2015-4022</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4022">SUSE bug 931772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4022">SUSE bug 931772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4022">SUSE bug 931772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4022">SUSE bug 931772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4022">SUSE bug 935275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4022">SUSE bug 935275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4022">SUSE bug 931772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4022">SUSE bug 931772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4022">SUSE bug 931769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4022">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4022">SUSE bug 931772</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4024</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4024" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4024" source="CVE"/>
    <description>
    Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4024.html">CVE-2015-4024</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4024">SUSE bug 931421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4024">SUSE bug 931421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4024">SUSE bug 931421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4024">SUSE bug 931421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4024">SUSE bug 931421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4024">SUSE bug 931421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4024">SUSE bug 931421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4024">SUSE bug 931421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4024">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4025</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4025" source="CVE"/>
    <description>
    PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4025.html">CVE-2015-4025</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4025">SUSE bug 1067090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4025">SUSE bug 1067090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4025">SUSE bug 1067090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4025">SUSE bug 1067090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4025">SUSE bug 1067090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4025">SUSE bug 1067090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4025">SUSE bug 1067090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4025">SUSE bug 1067090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4025">SUSE bug 1067090</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168546" comment="apache2-mod_php5-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168547" comment="php5-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168548" comment="php5-bcmath-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168549" comment="php5-bz2-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168550" comment="php5-calendar-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168551" comment="php5-ctype-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168552" comment="php5-curl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168553" comment="php5-dba-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168554" comment="php5-devel-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168555" comment="php5-dom-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168556" comment="php5-enchant-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168557" comment="php5-exif-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168558" comment="php5-fastcgi-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168559" comment="php5-fileinfo-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168560" comment="php5-firebird-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168561" comment="php5-fpm-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168562" comment="php5-ftp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168563" comment="php5-gd-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168564" comment="php5-gettext-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168565" comment="php5-gmp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168566" comment="php5-iconv-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168567" comment="php5-imap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168568" comment="php5-intl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168569" comment="php5-json-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168570" comment="php5-ldap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168571" comment="php5-mbstring-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168572" comment="php5-mcrypt-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168573" comment="php5-mssql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168574" comment="php5-mysql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168575" comment="php5-odbc-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168576" comment="php5-opcache-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168577" comment="php5-openssl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168578" comment="php5-pcntl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168579" comment="php5-pdo-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168580" comment="php5-pear-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168581" comment="php5-pgsql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168582" comment="php5-phar-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168583" comment="php5-posix-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168584" comment="php5-pspell-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168585" comment="php5-readline-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168586" comment="php5-shmop-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168587" comment="php5-snmp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168588" comment="php5-soap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168589" comment="php5-sockets-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168590" comment="php5-sqlite-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168591" comment="php5-suhosin-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168592" comment="php5-sysvmsg-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168593" comment="php5-sysvsem-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168594" comment="php5-sysvshm-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168595" comment="php5-tidy-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168596" comment="php5-tokenizer-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168597" comment="php5-wddx-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168598" comment="php5-xmlreader-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168599" comment="php5-xmlrpc-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168600" comment="php5-xmlwriter-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168601" comment="php5-xsl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168602" comment="php5-zip-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168603" comment="php5-zlib-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4026</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4026" source="CVE"/>
    <description>
    The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4026.html">CVE-2015-4026</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4026">SUSE bug 931776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4026">SUSE bug 931776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4026">SUSE bug 931776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4026">SUSE bug 931776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4026">SUSE bug 931776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4026">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4026">SUSE bug 931776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4026">SUSE bug 931776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4026">SUSE bug 931776</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4026">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4037</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4037" source="CVE"/>
    <description>
    The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4037.html">CVE-2015-4037</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4037">SUSE bug 932267</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4041</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4041" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4041.html">CVE-2015-4041</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4041">SUSE bug 928749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139322" comment="coreutils-8.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151803" comment="coreutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139323" comment="coreutils-lang-8.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151804" comment="coreutils-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4042</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4042" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4042" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4042.html">CVE-2015-4042</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4042">SUSE bug 928749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139322" comment="coreutils-8.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151803" comment="coreutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139323" comment="coreutils-lang-8.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151804" comment="coreutils-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4047</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4047" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4047" source="CVE"/>
    <description>
    racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4047.html">CVE-2015-4047</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4047">SUSE bug 931989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4047">SUSE bug 931989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4047">SUSE bug 931989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4047">SUSE bug 931989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4047">SUSE bug 931989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4047">SUSE bug 931989</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139607" comment="ipsec-tools-0.8.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152802" comment="ipsec-tools is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4103</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4103" source="CVE"/>
    <description>
    Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4103.html">CVE-2015-4103</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4103">SUSE bug 931625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4103">SUSE bug 931625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4103">SUSE bug 931625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4103">SUSE bug 931625</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4103">SUSE bug 931625</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4104</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4104" source="CVE"/>
    <description>
    Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service (unexpected interrupt and host crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4104.html">CVE-2015-4104</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4104">SUSE bug 931626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4104">SUSE bug 931626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4104">SUSE bug 931626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4104">SUSE bug 931626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4104">SUSE bug 931626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4104">SUSE bug 931626</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4105</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4105" source="CVE"/>
    <description>
    Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to cause a denial of service (host disk consumption) via certain invalid operations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4105.html">CVE-2015-4105</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4105">SUSE bug 931627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4105">SUSE bug 931627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4105">SUSE bug 931627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4105">SUSE bug 931627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4105">SUSE bug 931627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4105">SUSE bug 931627</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4106</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4106" source="CVE"/>
    <description>
    QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4106.html">CVE-2015-4106</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4106">SUSE bug 931628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4106">SUSE bug 931628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4106">SUSE bug 931628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4106">SUSE bug 931628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4106">SUSE bug 931628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4106">SUSE bug 931628</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4116</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4116" source="CVE"/>
    <description>
    Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a failed SplMinHeap::compare operation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4116.html">CVE-2015-4116</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4116">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4141</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141" source="CVE"/>
    <description>
    The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4141.html">CVE-2015-4141</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4141">SUSE bug 930077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4141">SUSE bug 930077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4141">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4141">SUSE bug 930077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4141">SUSE bug 930077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4141">SUSE bug 930077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4141">SUSE bug 930077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4141">SUSE bug 930077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4141">SUSE bug 930077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4141">SUSE bug 930077</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140402" comment="wpa_supplicant-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140403" comment="wpa_supplicant-gui-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142" source="CVE"/>
    <description>
    Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4142.html">CVE-2015-4142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4142">SUSE bug 930078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4142">SUSE bug 930078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4142">SUSE bug 915323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4142">SUSE bug 930078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4142">SUSE bug 930078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4142">SUSE bug 930078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4142">SUSE bug 930078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4142">SUSE bug 930078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4142">SUSE bug 930078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4142">SUSE bug 930078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4142">SUSE bug 930078</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140402" comment="wpa_supplicant-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140403" comment="wpa_supplicant-gui-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143" source="CVE"/>
    <description>
    The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4143.html">CVE-2015-4143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4143">SUSE bug 930079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4143">SUSE bug 930079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4143">SUSE bug 930079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4143">SUSE bug 930079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4143">SUSE bug 930079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4143">SUSE bug 930079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4143">SUSE bug 930079</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140402" comment="wpa_supplicant-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140403" comment="wpa_supplicant-gui-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4144</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144" source="CVE"/>
    <description>
    The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service (crash) via a crafted message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4144.html">CVE-2015-4144</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4144">SUSE bug 930079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4144">SUSE bug 930079</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4145</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145" source="CVE"/>
    <description>
    The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to cause a denial of service (memory leak) via a crafted message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4145.html">CVE-2015-4145</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4145">SUSE bug 930079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4145">SUSE bug 930079</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4148</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4148" source="CVE"/>
    <description>
    The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a string, which allows remote attackers to obtain sensitive information by providing crafted serialized data with an int data type, related to a "type confusion" issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4148.html">CVE-2015-4148</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4148">SUSE bug 933227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4148">SUSE bug 933227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4148">SUSE bug 933227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4148">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4148">SUSE bug 933227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4148">SUSE bug 933227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4148">SUSE bug 933227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4148">SUSE bug 933227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4148">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4148">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4473</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4473" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4473" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4473.html">CVE-2015-4473</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4473">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4474</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4474" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4474" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4474.html">CVE-2015-4474</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4474">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4475</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4475" source="CVE"/>
    <description>
    The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a malformed file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4475.html">CVE-2015-4475</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4475">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4476</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4476" source="CVE"/>
    <description>
    Mozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar attributes by leveraging lack of navigation after a paste of a URL with a nonstandard scheme, as demonstrated by spoofing an SSL attribute.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4476.html">CVE-2015-4476</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4476">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4477</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4477" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4477" source="CVE"/>
    <description>
    Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2015-4477.html">CVE-2015-4477</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4477">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4478</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4478" source="CVE"/>
    <description>
    Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4478.html">CVE-2015-4478</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4478">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4479</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4479" source="CVE"/>
    <description>
    Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4479.html">CVE-2015-4479</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4479">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4480</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4480" source="CVE"/>
    <description>
    Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4480.html">CVE-2015-4480</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4480">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4481</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4481" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4481" source="CVE"/>
    <description>
    Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file during an update.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2015-4481.html">CVE-2015-4481</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4481">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4482</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4482" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4482" source="CVE"/>
    <description>
    mar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local users to gain privileges or cause a denial of service (out-of-bounds write) via a crafted name of a Mozilla Archive (aka MAR) file.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2015-4482.html">CVE-2015-4482</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4482">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4483" source="CVE"/>
    <description>
    Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2015-4483.html">CVE-2015-4483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4483">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4484</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4484" source="CVE"/>
    <description>
    The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to cause a denial of service (application crash) by leveraging the use of shared memory and accessing (1) an Atomics object or (2) a SharedArrayBuffer object.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4484.html">CVE-2015-4484</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4484">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4485</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4485" source="CVE"/>
    <description>
    Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4485.html">CVE-2015-4485</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4485">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4486</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4486" source="CVE"/>
    <description>
    The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4486.html">CVE-2015-4486</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4486">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4487</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4487" source="CVE"/>
    <description>
    The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4487.html">CVE-2015-4487</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4487">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154488" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4488</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4488" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4488" source="CVE"/>
    <description>
    Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4488.html">CVE-2015-4488</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4488">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4489</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4489" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4489" source="CVE"/>
    <description>
    The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging a self assignment.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4489.html">CVE-2015-4489</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4489">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4490</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4490" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4490" source="CVE"/>
    <description>
    The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob, data, and filesystem URL schemes during wildcard source-expression matching, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging unexpected policy-enforcement behavior.
    </description>
<advisory from="security@suse.de">
<cve href="https://www.suse.com/security/cve/CVE-2015-4490.html">CVE-2015-4490</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4490">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4491</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4491" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4491" source="CVE"/>
    <description>
    Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4491.html">CVE-2015-4491</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 940806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4491">SUSE bug 942801</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139466" comment="gdk-pixbuf-devel-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151614" comment="gdk-pixbuf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139467" comment="gdk-pixbuf-lang-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139468" comment="gdk-pixbuf-query-loaders-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139469" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151617" comment="gdk-pixbuf-query-loaders-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139470" comment="libgdk_pixbuf-2_0-0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139471" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151619" comment="libgdk_pixbuf-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139472" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4492</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4492" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4492" source="CVE"/>
    <description>
    Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4492.html">CVE-2015-4492</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4492">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4493</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4493" source="CVE"/>
    <description>
    Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via an invalid size field in an esds chunk in MPEG-4 video data, a related issue to CVE-2015-1539.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4493.html">CVE-2015-4493</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4493">SUSE bug 940806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4495</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4495" source="CVE"/>
    <description>
    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4495.html">CVE-2015-4495</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4495">SUSE bug 940918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4495">SUSE bug 940918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4495">SUSE bug 940918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4495">SUSE bug 940918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4495">SUSE bug 940918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4495">SUSE bug 940806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4495">SUSE bug 940918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4495">SUSE bug 940918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4495">SUSE bug 940918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4495">SUSE bug 940918</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4497</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4497" source="CVE"/>
    <description>
    Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4497.html">CVE-2015-4497</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4497">SUSE bug 943550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4497">SUSE bug 943557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4497">SUSE bug 943557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4497">SUSE bug 943557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4497">SUSE bug 943557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4497">SUSE bug 943557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4497">SUSE bug 943557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4497">SUSE bug 943608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4497">SUSE bug 943557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4497">SUSE bug 943557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4497">SUSE bug 943557</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4498</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4498" source="CVE"/>
    <description>
    The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early point in the installation process.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4498.html">CVE-2015-4498</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4498">SUSE bug 943550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4498">SUSE bug 943558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4498">SUSE bug 943558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4498">SUSE bug 943558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4498">SUSE bug 943558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4498">SUSE bug 943558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4498">SUSE bug 943558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4498">SUSE bug 943608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4498">SUSE bug 943558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4498">SUSE bug 943558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4498">SUSE bug 943558</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4500</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4500" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4500.html">CVE-2015-4500</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4500">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4501</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4501" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4501" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4501.html">CVE-2015-4501</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4501">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4502</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4502" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4502" source="CVE"/>
    <description>
    js/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments, which allows remote attackers to bypass intended window access restrictions via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4502.html">CVE-2015-4502</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4502">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4503</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4503" source="CVE"/>
    <description>
    The TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that were established with a navigator.mozTCPSocket.open method call and send method calls, which allows remote TCP servers to obtain sensitive information from process memory by reading packet data, as demonstrated by availability of this API in a Firefox OS application.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4503.html">CVE-2015-4503</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4503">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4504</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4504" source="CVE"/>
    <description>
    The lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows remote attackers to obtain sensitive information or cause a denial of service (buffer over-read and application crash) via crafted attributes in the ICC 4 profile of an image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4504.html">CVE-2015-4504</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4504">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4505</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4505" source="CVE"/>
    <description>
    updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4505.html">CVE-2015-4505</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4505">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4506</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4506" source="CVE"/>
    <description>
    Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4506.html">CVE-2015-4506</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4506">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4507</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4507" source="CVE"/>
    <description>
    The SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the Debugger API is enabled, allows remote attackers to cause a denial of service (getSlotRef assertion failure and application exit) or possibly execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4507.html">CVE-2015-4507</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4507">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4508</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4508" source="CVE"/>
    <description>
    Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4508.html">CVE-2015-4508</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4508">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4509</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4509" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4509" source="CVE"/>
    <description>
    Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element, aka ZDI-CAN-3176.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4509.html">CVE-2015-4509</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4509">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4510</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4510" source="CVE"/>
    <description>
    Race condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) by leveraging improper interaction between shared workers and the IndexedDB implementation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4510.html">CVE-2015-4510</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4510">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4511</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4511" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4511.html">CVE-2015-4511</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4511">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4512</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4512" source="CVE"/>
    <description>
    gfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use the Cairo library with 32-bit color-depth surface creation followed by 16-bit color-depth surface display, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) by using a CANVAS element to trigger 2D rendering.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4512.html">CVE-2015-4512</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4512">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4513</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4513" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4513.html">CVE-2015-4513</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4513">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4514</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4514" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4514.html">CVE-2015-4514</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4514">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4515</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4515" source="CVE"/>
    <description>
    Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4515.html">CVE-2015-4515</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4515">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4516</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4516" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4516" source="CVE"/>
    <description>
    Mozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API protection mechanisms and modify immutable properties, and consequently execute arbitrary JavaScript code with chrome privileges, via a crafted web page that does not use ES5 APIs.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4516.html">CVE-2015-4516</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4516">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4517</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4517" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4517" source="CVE"/>
    <description>
    NetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4517.html">CVE-2015-4517</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4517">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4518</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4518" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4518" source="CVE"/>
    <description>
    The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy (CSP) protection mechanism and conduct cross-site scripting (XSS) attacks via vectors involving SVG animations and the about:reader URL.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4518.html">CVE-2015-4518</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4518">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4519</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4519" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4519" source="CVE"/>
    <description>
    Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4519.html">CVE-2015-4519</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4519">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4520</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4520" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4520" source="CVE"/>
    <description>
    Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection mechanisms by leveraging (1) duplicate cache-key generation or (2) retrieval of a value from an incorrect HTTP Access-Control-* response header.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4520.html">CVE-2015-4520</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4520">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4521</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4521" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4521" source="CVE"/>
    <description>
    The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4521.html">CVE-2015-4521</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4521">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4522</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4522" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4522" source="CVE"/>
    <description>
    The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4522.html">CVE-2015-4522</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4522">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4551</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4551" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4551" source="CVE"/>
    <description>
    LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4551.html">CVE-2015-4551</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 893141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4551">SUSE bug 934423</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201545513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-45513</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-45513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-45513" source="CVE"/>
    <description>
    Unknown.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-45513.html">CVE-2015-45513</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4588</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4588" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4588" source="CVE"/>
    <description>
    Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4588.html">CVE-2015-4588</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4588">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4588">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4588">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4588">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4588">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4588">SUSE bug 933109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4588">SUSE bug 933109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140192" comment="libwmf-0_2-7-0.2.8.4-241.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152632" comment="libwmf-0_2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140193" comment="libwmf-tools-0.2.8.4-241.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152633" comment="libwmf-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4598</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4598" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4598" source="CVE"/>
    <description>
    PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument save method or (2) the GD imagepsloadfont function, as demonstrated by a filename\0.html attack that bypasses an intended configuration in which client users may write to only .html files.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4598.html">CVE-2015-4598</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4598">SUSE bug 935232</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4599</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4599" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4599" source="CVE"/>
    <description>
    The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information, cause a denial of service (application crash), or possibly execute arbitrary code via an unexpected data type, related to a "type confusion" issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4599.html">CVE-2015-4599</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4599">SUSE bug 935226</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4600" source="CVE"/>
    <description>
    The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in the (1) SoapClient::__getLastRequest, (2) SoapClient::__getLastResponse, (3) SoapClient::__getLastRequestHeaders, (4) SoapClient::__getLastResponseHeaders, (5) SoapClient::__getCookies, and (6) SoapClient::__setCookie methods.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4600.html">CVE-2015-4600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4600">SUSE bug 935226</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4601</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4601" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4601" source="CVE"/>
    <description>
    PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a different issue than CVE-2015-4600.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4601.html">CVE-2015-4601</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4601">SUSE bug 935226</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4602</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4602" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4602" source="CVE"/>
    <description>
    The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to a "type confusion" issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4602.html">CVE-2015-4602</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4602">SUSE bug 935224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154603" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4603</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4603" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4603" source="CVE"/>
    <description>
    The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type, related to a "type confusion" issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4603.html">CVE-2015-4603</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4603">SUSE bug 935234</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4620</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4620" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4620" source="CVE"/>
    <description>
    name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4620.html">CVE-2015-4620</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4620">SUSE bug 936476</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4625</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4625" source="CVE"/>
    <description>
    Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4625.html">CVE-2015-4625</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 943816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4625">SUSE bug 935119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139970" comment="libpolkit0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151393" comment="libpolkit0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139971" comment="polkit-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151394" comment="polkit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139972" comment="polkit-devel-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151395" comment="polkit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139973" comment="typelib-1_0-Polkit-1_0-0.113-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151396" comment="typelib-1_0-Polkit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4643</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4643" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4643" source="CVE"/>
    <description>
    Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4643.html">CVE-2015-4643</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 931769</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935275</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4643">SUSE bug 935275</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4644</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4644" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4644" source="CVE"/>
    <description>
    The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1352.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4644.html">CVE-2015-4644</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4644">SUSE bug 935274</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4651</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4651" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4651" source="CVE"/>
    <description>
    The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough memory is available for storing IP address strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4651.html">CVE-2015-4651</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4651">SUSE bug 935157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4651">SUSE bug 935157</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4652</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4652" source="CVE"/>
    <description>
    epan/dissectors/packet-gsm_a_dtap.c in the GSM DTAP dissector in Wireshark 1.12.x before 1.12.6 does not properly validate digit characters, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the de_emerg_num_list and de_bcd_num functions.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4652.html">CVE-2015-4652</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4652">SUSE bug 935158</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4652">SUSE bug 935158</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4652">SUSE bug 935158</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4652">SUSE bug 935158</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4695</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4695" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4695" source="CVE"/>
    <description>
    meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4695.html">CVE-2015-4695</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4695">SUSE bug 936058</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140192" comment="libwmf-0_2-7-0.2.8.4-241.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152632" comment="libwmf-0_2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140193" comment="libwmf-tools-0.2.8.4-241.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152633" comment="libwmf-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4696</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4696" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4696" source="CVE"/>
    <description>
    Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4696.html">CVE-2015-4696</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4696">SUSE bug 936062</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140192" comment="libwmf-0_2-7-0.2.8.4-241.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152632" comment="libwmf-0_2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140193" comment="libwmf-tools-0.2.8.4-241.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152633" comment="libwmf-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4729</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4729" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4729" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4729.html">CVE-2015-4729</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4729">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4729">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4729">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4729">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4731</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4731" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4731.html">CVE-2015-4731</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4731">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4731">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4731">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4731">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4732</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4732" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4732.html">CVE-2015-4732</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4732">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4732">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4732">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4732">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4733</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4733" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4733.html">CVE-2015-4733</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4733">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4733">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4733">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4733">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4734</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4734" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4734" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JGSS.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4734.html">CVE-2015-4734</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4734">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4734">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4734">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4736</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4736" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4736.html">CVE-2015-4736</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4736">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4736">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4736">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4748</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4748.html">CVE-2015-4748</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4748">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4748">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4748">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4748">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4749</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4749.html">CVE-2015-4749</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4749">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4749">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4749">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4749">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4760</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4760" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4760.html">CVE-2015-4760</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4760">SUSE bug 938248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4760">SUSE bug 938895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4760">SUSE bug 937828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4760">SUSE bug 938248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4792</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4792" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4792.html">CVE-2015-4792</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4792">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4792">SUSE bug 958789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4792">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4802</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4802" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4802" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4802.html">CVE-2015-4802</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4802">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4802">SUSE bug 958789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4802">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4803</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4803.html">CVE-2015-4803</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4803">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4803">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4803">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4805</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4805" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4805.html">CVE-2015-4805</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4805">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4805">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4805">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4806</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4806" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4806.html">CVE-2015-4806</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4806">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4806">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4806">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4807</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4807" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticated users to affect availability via unknown vectors related to Server : Query Cache.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4807.html">CVE-2015-4807</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4807">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4807">SUSE bug 958789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4807">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4810</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4810" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u85 and 8u60 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4810.html">CVE-2015-4810</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4810">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4810">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4810">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4813</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4813" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest, allows local users to affect availability via unknown vectors related to Core.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4813.html">CVE-2015-4813</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4813">SUSE bug 951432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4813">SUSE bug 951432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4813">SUSE bug 951432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4813">SUSE bug 951432</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4815</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4815" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4815.html">CVE-2015-4815</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4815">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4815">SUSE bug 958789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4815">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4826</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4826" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4826" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4826.html">CVE-2015-4826</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4826">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4826">SUSE bug 958789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4826">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4830" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4830.html">CVE-2015-4830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4830">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4830">SUSE bug 958789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4830">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4835" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4835.html">CVE-2015-4835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4835">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4835">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4835">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4836" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4836.html">CVE-2015-4836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4836">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4836">SUSE bug 958789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4836">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4840</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4840" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4840.html">CVE-2015-4840</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4840">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4840">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4840">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4842</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4842" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4842.html">CVE-2015-4842</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4842">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4842">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4842">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4843</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4843" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4843.html">CVE-2015-4843</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4843">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4843">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4843">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4844</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4844.html">CVE-2015-4844</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4844">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4844">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4844">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4858</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4858" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4858" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-4913.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4858.html">CVE-2015-4858</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4858">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4858">SUSE bug 958789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4858">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154860" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4860</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4860" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4860" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4860.html">CVE-2015-4860</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4860">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4860">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4860">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154861" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4861</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4861" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4861" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4861.html">CVE-2015-4861</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4861">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4861">SUSE bug 958789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4861">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154868" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4868</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4868" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4868" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u60 and Java SE Embedded 8u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4868.html">CVE-2015-4868</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4868">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4868">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4870</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4870" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4870" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4870.html">CVE-2015-4870</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4870">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4870">SUSE bug 958789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4870">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154872" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4872</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4872" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4872" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4872.html">CVE-2015-4872</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4872">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4872">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4872">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4872">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4881</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4881" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4881" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4835.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4881.html">CVE-2015-4881</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4881">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4881">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154882" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4882</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4882" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4882" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4882.html">CVE-2015-4882</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4882">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4882">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4882">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154883" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4883</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4883" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4883" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4883.html">CVE-2015-4883</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4883">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4883">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4883">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4893</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4893" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4893.html">CVE-2015-4893</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4893">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4893">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4893">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4896</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4896" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4896" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when a VM has the Remote Display feature (RDP) enabled, allows remote attackers to affect availability via unknown vectors related to Core.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4896.html">CVE-2015-4896</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4896">SUSE bug 951432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4896">SUSE bug 951432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4896">SUSE bug 951432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4896">SUSE bug 951432</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4901</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4901" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4901.html">CVE-2015-4901</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4901">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4901">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4902</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4902" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4902" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4902.html">CVE-2015-4902</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4902">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4902">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4902">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4903</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4903" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4903" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4903.html">CVE-2015-4903</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4903">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4903">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4903">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4906</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4906" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4906" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than CVE-2015-4908 and CVE-2015-4916.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4906.html">CVE-2015-4906</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4906">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4906">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4908</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4908" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4908" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4916.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4908.html">CVE-2015-4908</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4908">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4908">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4911</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4911" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4911.html">CVE-2015-4911</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4911">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4911">SUSE bug 955131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4911">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4913</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4913" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4913.html">CVE-2015-4913</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4913">SUSE bug 951391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4913">SUSE bug 958789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4913">SUSE bug 951391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20154916" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-4916</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-4916" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4916" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-4916.html">CVE-2015-4916</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4916">SUSE bug 951376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-4916">SUSE bug 951376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5073</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5073" source="CVE"/>
    <description>
    Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5073.html">CVE-2015-5073</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5073">SUSE bug 936227</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5130</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5130" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5130" source="CVE"/>
    <description>
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5130.html">CVE-2015-5130</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5130">SUSE bug 941239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5130">SUSE bug 952254</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140402" comment="wpa_supplicant-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140403" comment="wpa_supplicant-gui-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5154</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5154" source="CVE"/>
    <description>
    Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5154.html">CVE-2015-5154</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5154">SUSE bug 938344</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5174</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5174" source="CVE"/>
    <description>
    Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call, as demonstrated by the $CATALINA_BASE/webapps directory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5174.html">CVE-2015-5174</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5174">SUSE bug 967967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5174">SUSE bug 967967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5174">SUSE bug 967967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5174">SUSE bug 967967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5174">SUSE bug 967967</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140375" comment="tomcat-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140376" comment="tomcat-admin-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140377" comment="tomcat-el-3_0-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140378" comment="tomcat-jsp-2_3-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140379" comment="tomcat-lib-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140380" comment="tomcat-servlet-3_1-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140381" comment="tomcat-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5185</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5185" source="CVE"/>
    <description>
    The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty className in a packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5185.html">CVE-2015-5185</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5185">SUSE bug 942628</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140356" comment="sblim-sfcb-1.4.8-2.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152855" comment="sblim-sfcb is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5191" source="CVE"/>
    <description>
    VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5191.html">CVE-2015-5191</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5191">SUSE bug 1007600</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149864" comment="libvmtools-devel-10.1.0-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152856" comment="libvmtools-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149865" comment="libvmtools0-10.1.0-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152857" comment="libvmtools0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149866" comment="open-vm-tools-10.1.0-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152858" comment="open-vm-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149867" comment="open-vm-tools-desktop-10.1.0-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152859" comment="open-vm-tools-desktop is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5198</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5198" source="CVE"/>
    <description>
    libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5198.html">CVE-2015-5198</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5198">SUSE bug 943967</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140163" comment="libvdpau1-1.1.1-9.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152860" comment="libvdpau1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5199</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5199" source="CVE"/>
    <description>
    Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5199.html">CVE-2015-5199</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5199">SUSE bug 943968</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140163" comment="libvdpau1-1.1.1-9.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152860" comment="libvdpau1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5200</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5200" source="CVE"/>
    <description>
    The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary files via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5200.html">CVE-2015-5200</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5200">SUSE bug 943969</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140163" comment="libvdpau1-1.1.1-9.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152860" comment="libvdpau1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5203</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5203" source="CVE"/>
    <description>
    Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5203.html">CVE-2015-5203</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 941919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 941919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 941919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 942553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 941919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 941919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 941919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 941919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 941919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 941919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 941919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5203">SUSE bug 941919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5212</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5212" source="CVE"/>
    <description>
    Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5212.html">CVE-2015-5212</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5212">SUSE bug 936188</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5213</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5213" source="CVE"/>
    <description>
    Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5213.html">CVE-2015-5213</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5213">SUSE bug 936190</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5214</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5214" source="CVE"/>
    <description>
    LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via an index to a non-existent bookmark in a DOC file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5214.html">CVE-2015-5214</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 934423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5214">SUSE bug 940838</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5218</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5218" source="CVE"/>
    <description>
    Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5218.html">CVE-2015-5218</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5218">SUSE bug 949754</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139778" comment="libblkid-devel-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151786" comment="libblkid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139779" comment="libblkid1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151787" comment="libblkid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139780" comment="libblkid1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151788" comment="libblkid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139781" comment="libfdisk1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154114" comment="libfdisk1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139782" comment="libmount1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151789" comment="libmount1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139783" comment="libmount1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151790" comment="libmount1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139784" comment="libsmartcols1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151791" comment="libsmartcols1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139785" comment="libuuid-devel-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151792" comment="libuuid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139786" comment="libuuid1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151793" comment="libuuid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139787" comment="libuuid1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151794" comment="libuuid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139788" comment="util-linux-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151795" comment="util-linux is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139789" comment="util-linux-lang-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151796" comment="util-linux-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139790" comment="util-linux-systemd-2.28-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151797" comment="util-linux-systemd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5219</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5219" source="CVE"/>
    <description>
    The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5219.html">CVE-2015-5219</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943218</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943218</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 943216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5219">SUSE bug 1010964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145996" comment="ntp-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145997" comment="ntp-doc-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5221</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5221" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5221" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5221.html">CVE-2015-5221</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5221">SUSE bug 942553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5221">SUSE bug 942553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5221">SUSE bug 942553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5221">SUSE bug 942553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5221">SUSE bug 942553</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5225</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5225" source="CVE"/>
    <description>
    Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5225.html">CVE-2015-5225</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5225">SUSE bug 942845</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5234</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5234" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5234" source="CVE"/>
    <description>
    IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5234.html">CVE-2015-5234</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5234">SUSE bug 944209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5234">SUSE bug 944209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5234">SUSE bug 944209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5234">SUSE bug 944209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5234">SUSE bug 944209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5234">SUSE bug 944209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139604" comment="icedtea-web-javadoc-1.6.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139605" comment="java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151625" comment="java-1_8_0-openjdk-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155235" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5235</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5235" source="CVE"/>
    <description>
    IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5235.html">CVE-2015-5235</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5235">SUSE bug 944208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5235">SUSE bug 944208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5235">SUSE bug 944208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5235">SUSE bug 944208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5235">SUSE bug 944208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5235">SUSE bug 944208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5235">SUSE bug 944208</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139604" comment="icedtea-web-javadoc-1.6.1-2.37 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151624" comment="icedtea-web-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139605" comment="java-1_8_0-openjdk-plugin-1.6.1-2.35 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151625" comment="java-1_8_0-openjdk-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155239" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5239</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5239" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5239" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5239.html">CVE-2015-5239</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5239">SUSE bug 944463</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5247</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5247" source="CVE"/>
    <description>
    The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5247.html">CVE-2015-5247</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5247">SUSE bug 945645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5247">SUSE bug 945645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5247">SUSE bug 945645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5247">SUSE bug 945645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5247">SUSE bug 945645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5247">SUSE bug 945645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5247">SUSE bug 945645</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5252</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5252" source="CVE"/>
    <description>
    vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5252.html">CVE-2015-5252</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5252">SUSE bug 958582</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5259</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5259" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5259" source="CVE"/>
    <description>
    Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5259.html">CVE-2015-5259</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5259">SUSE bug 958299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5259">SUSE bug 958299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5259">SUSE bug 958299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5259">SUSE bug 958299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5259">SUSE bug 958299</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5260</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5260" source="CVE"/>
    <description>
    Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5260.html">CVE-2015-5260</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5260">SUSE bug 944787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5260">SUSE bug 944787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5260">SUSE bug 944787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5260">SUSE bug 944787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5260">SUSE bug 944787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5260">SUSE bug 944787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5260">SUSE bug 944787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5260">SUSE bug 944787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5260">SUSE bug 944787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5260">SUSE bug 944787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5260">SUSE bug 944787</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140097" comment="libspice-server1-0.12.7-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5261</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5261" source="CVE"/>
    <description>
    Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5261.html">CVE-2015-5261</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 948976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5261">SUSE bug 982386</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140097" comment="libspice-server1-0.12.7-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155276" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5276</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5276" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5276" source="CVE"/>
    <description>
    The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5276.html">CVE-2015-5276</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5276">SUSE bug 945842</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139326" comment="cpp48-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152183" comment="cpp48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139327" comment="gcc48-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152184" comment="gcc48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139328" comment="gcc48-c++-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152185" comment="gcc48-c++ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139329" comment="gcc48-fortran-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152186" comment="gcc48-fortran is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139330" comment="gcc48-gij-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152187" comment="gcc48-gij is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139331" comment="gcc48-info-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152188" comment="gcc48-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139332" comment="gcc48-java-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152189" comment="gcc48-java is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139333" comment="gcc48-locale-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152190" comment="gcc48-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139334" comment="gcc48-objc-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152191" comment="gcc48-objc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139335" comment="libasan0-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152192" comment="libasan0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139760" comment="libatomic1-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152915" comment="libatomic1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139761" comment="libffi-devel-gcc5-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152921" comment="libffi-devel-gcc5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139762" comment="libffi4-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152924" comment="libffi4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139763" comment="libffi4-32bit-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152925" comment="libffi4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139764" comment="libgcc_s1-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152931" comment="libgcc_s1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139765" comment="libgcc_s1-32bit-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152932" comment="libgcc_s1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139336" comment="libgcc_s1-gcc48-32bit-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152193" comment="libgcc_s1-gcc48-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139337" comment="libgcj48-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152194" comment="libgcj48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139338" comment="libgcj48-devel-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152195" comment="libgcj48-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139339" comment="libgcj48-jar-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152196" comment="libgcj48-jar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139340" comment="libgcj_bc1-gcc48-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152197" comment="libgcj_bc1-gcc48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139766" comment="libgfortran3-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152936" comment="libgfortran3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139767" comment="libgomp1-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152942" comment="libgomp1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139768" comment="libitm1-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152946" comment="libitm1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139341" comment="libobjc4-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152198" comment="libobjc4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139769" comment="libquadmath0-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152956" comment="libquadmath0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139342" comment="libstdc++48-devel-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152199" comment="libstdc++48-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139770" comment="libstdc++6-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152962" comment="libstdc++6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139771" comment="libstdc++6-32bit-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152963" comment="libstdc++6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139343" comment="libstdc++6-gcc48-locale-4.8.5-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152200" comment="libstdc++6-gcc48-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139772" comment="libtsan0-5.3.1+r233831-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152969" comment="libtsan0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5278</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5278" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5278" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5278.html">CVE-2015-5278</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5278">SUSE bug 945989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5278">SUSE bug 945989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5278">SUSE bug 945989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5278">SUSE bug 964947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5278">SUSE bug 964947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5278">SUSE bug 964947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5278">SUSE bug 964947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5278">SUSE bug 964947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5278">SUSE bug 945989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5278">SUSE bug 945989</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5279</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5279" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5279" source="CVE"/>
    <description>
    Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5279.html">CVE-2015-5279</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5279">SUSE bug 945987</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5288</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5288" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5288" source="CVE"/>
    <description>
    The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or read arbitrary server memory via a "too-short" salt.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5288.html">CVE-2015-5288</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5288">SUSE bug 949669</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5289</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5289" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5289" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to cause a denial of service (server crash) via unspecified vectors, which are not properly handled in (1) json or (2) jsonb values.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5289.html">CVE-2015-5289</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5289">SUSE bug 949670</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5291</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5291" source="CVE"/>
    <description>
    Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server name indication (SNI) extension, which is not properly handled when creating a ClientHello message.  NOTE: this identifier has been SPLIT per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in 1.3.0.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5291.html">CVE-2015-5291</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5291">SUSE bug 949380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5291">SUSE bug 949380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5291">SUSE bug 949380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5291">SUSE bug 949380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5291">SUSE bug 949380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5291">SUSE bug 949380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5291">SUSE bug 949380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5291">SUSE bug 949380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5291">SUSE bug 949380</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139932" comment="libmbedtls9-1.3.17-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152973" comment="libmbedtls9 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5296</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5296" source="CVE"/>
    <description>
    Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade attacks by modifying the client-server data stream, related to clidfs.c, libsmb_server.c, and smbXcli_base.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5296.html">CVE-2015-5296</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 958584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5296">SUSE bug 1058622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5299</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5299" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5299" source="CVE"/>
    <description>
    The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORY_LIST access right has been granted, which allows remote attackers to access snapshots by visiting a shadow copy directory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5299.html">CVE-2015-5299</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5299">SUSE bug 958583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5300</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5300" source="CVE"/>
    <description>
    The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5300.html">CVE-2015-5300</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5300">SUSE bug 951629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5300">SUSE bug 951629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5300">SUSE bug 951629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5300">SUSE bug 951629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5300">SUSE bug 951629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5300">SUSE bug 951629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5300">SUSE bug 951629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5300">SUSE bug 951629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5300">SUSE bug 951629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5300">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5300">SUSE bug 951629</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155307" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5307</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5307" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5307" source="CVE"/>
    <description>
    The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5307.html">CVE-2015-5307</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 962977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5307">SUSE bug 953527</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5310</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5310" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310" source="CVE"/>
    <description>
    The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection (MFP) was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service (ignored packets) via a WNM Sleep Mode response.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5310.html">CVE-2015-5310</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5310">SUSE bug 952254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5310">SUSE bug 953115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5310">SUSE bug 952254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5310">SUSE bug 952254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5310">SUSE bug 952254</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140402" comment="wpa_supplicant-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140403" comment="wpa_supplicant-gui-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5312</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5312" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5312" source="CVE"/>
    <description>
    The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5312.html">CVE-2015-5312</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5312">SUSE bug 957105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5312">SUSE bug 957105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5312">SUSE bug 957105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5312">SUSE bug 957105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5312">SUSE bug 957105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5312">SUSE bug 957105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5312">SUSE bug 959469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5312">SUSE bug 957105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5312">SUSE bug 957105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5312">SUSE bug 957105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5312">SUSE bug 957105</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5313</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5313" source="CVE"/>
    <description>
    Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5313.html">CVE-2015-5313</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5313">SUSE bug 953110</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140164" comment="libvirt-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151423" comment="libvirt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140165" comment="libvirt-client-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151424" comment="libvirt-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140166" comment="libvirt-daemon-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151425" comment="libvirt-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140167" comment="libvirt-daemon-config-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151426" comment="libvirt-daemon-config-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140168" comment="libvirt-daemon-config-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151427" comment="libvirt-daemon-config-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140169" comment="libvirt-daemon-driver-interface-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151428" comment="libvirt-daemon-driver-interface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140170" comment="libvirt-daemon-driver-libxl-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151429" comment="libvirt-daemon-driver-libxl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140171" comment="libvirt-daemon-driver-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151430" comment="libvirt-daemon-driver-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140172" comment="libvirt-daemon-driver-network-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151431" comment="libvirt-daemon-driver-network is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140173" comment="libvirt-daemon-driver-nodedev-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151432" comment="libvirt-daemon-driver-nodedev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140174" comment="libvirt-daemon-driver-nwfilter-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151433" comment="libvirt-daemon-driver-nwfilter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140175" comment="libvirt-daemon-driver-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151434" comment="libvirt-daemon-driver-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140176" comment="libvirt-daemon-driver-secret-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151435" comment="libvirt-daemon-driver-secret is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140177" comment="libvirt-daemon-driver-storage-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151436" comment="libvirt-daemon-driver-storage is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140178" comment="libvirt-daemon-driver-uml-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151437" comment="libvirt-daemon-driver-uml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140179" comment="libvirt-daemon-driver-vbox-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151438" comment="libvirt-daemon-driver-vbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140180" comment="libvirt-daemon-lxc-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151439" comment="libvirt-daemon-lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140181" comment="libvirt-daemon-qemu-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151440" comment="libvirt-daemon-qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140182" comment="libvirt-daemon-xen-2.0.0-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151441" comment="libvirt-daemon-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5314</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314" source="CVE"/>
    <description>
    The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with (1) an internal EAP server or (2) a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5314.html">CVE-2015-5314</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5314">SUSE bug 953115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5314">SUSE bug 953115</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5330</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5330" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5330" source="CVE"/>
    <description>
    ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading (1) an error message or (2) a database value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5330.html">CVE-2015-5330</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5330">SUSE bug 958586</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139920" comment="libldb1-1.1.26-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152733" comment="libldb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139921" comment="libldb1-32bit-1.1.26-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152734" comment="libldb1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5343</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5343" source="CVE"/>
    <description>
    Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5343.html">CVE-2015-5343</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5343">SUSE bug 958300</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5345</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5345" source="CVE"/>
    <description>
    The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5345.html">CVE-2015-5345</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5345">SUSE bug 967965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5345">SUSE bug 967965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5345">SUSE bug 967965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5345">SUSE bug 967965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5345">SUSE bug 967965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5345">SUSE bug 967965</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140375" comment="tomcat-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140376" comment="tomcat-admin-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140377" comment="tomcat-el-3_0-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140378" comment="tomcat-jsp-2_3-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140379" comment="tomcat-lib-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140380" comment="tomcat-servlet-3_1-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140381" comment="tomcat-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5346</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5346" source="CVE"/>
    <description>
    Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5346.html">CVE-2015-5346</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5346">SUSE bug 967814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5346">SUSE bug 967814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5346">SUSE bug 967814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5346">SUSE bug 967814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5346">SUSE bug 967814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5346">SUSE bug 967814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5346">SUSE bug 967814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5346">SUSE bug 967814</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140375" comment="tomcat-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140376" comment="tomcat-admin-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140377" comment="tomcat-el-3_0-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140378" comment="tomcat-jsp-2_3-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140379" comment="tomcat-lib-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140380" comment="tomcat-servlet-3_1-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140381" comment="tomcat-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5351</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5351" source="CVE"/>
    <description>
    The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5351.html">CVE-2015-5351</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5351">SUSE bug 967812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5351">SUSE bug 967812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5351">SUSE bug 967812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5351">SUSE bug 967812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5351">SUSE bug 967812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5351">SUSE bug 967812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5351">SUSE bug 967812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5351">SUSE bug 967812</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140375" comment="tomcat-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140376" comment="tomcat-admin-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140377" comment="tomcat-el-3_0-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140378" comment="tomcat-jsp-2_3-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140379" comment="tomcat-lib-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140380" comment="tomcat-servlet-3_1-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140381" comment="tomcat-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5352</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5352" source="CVE"/>
    <description>
    The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5352.html">CVE-2015-5352</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 938277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 938277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 938277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 938277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 938277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 938277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 938277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 938277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 948086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 938277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 936695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5352">SUSE bug 1074631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5370</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5370" source="CVE"/>
    <description>
    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5370.html">CVE-2015-5370</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5370">SUSE bug 936862</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5400</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5400" source="CVE"/>
    <description>
    Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5400.html">CVE-2015-5400</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 967073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5400">SUSE bug 938715</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5477</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5477" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5477" source="CVE"/>
    <description>
    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5477.html">CVE-2015-5477</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 939567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 939567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 939567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 939567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 939567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 939567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 939567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 939567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 939567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 939567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 939567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 980168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5477">SUSE bug 1000362</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5522</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5522" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5522" source="CVE"/>
    <description>
    Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5522.html">CVE-2015-5522</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5522">SUSE bug 933588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5522">SUSE bug 933588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140147" comment="libtidy-0_99-0-1.0.20100204cvs-21.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153015" comment="libtidy-0_99-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140148" comment="libtidy-0_99-0-devel-1.0.20100204cvs-21.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153016" comment="libtidy-0_99-0-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140149" comment="tidy-1.0.20100204cvs-21.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153017" comment="tidy is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5523</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5523" source="CVE"/>
    <description>
    The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5523.html">CVE-2015-5523</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5523">SUSE bug 933588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5523">SUSE bug 933588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140147" comment="libtidy-0_99-0-1.0.20100204cvs-21.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153015" comment="libtidy-0_99-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140148" comment="libtidy-0_99-0-devel-1.0.20100204cvs-21.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153016" comment="libtidy-0_99-0-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140149" comment="tidy-1.0.20100204cvs-21.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153017" comment="tidy is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5589</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5589" source="CVE"/>
    <description>
    The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted TAR archive that is mishandled in a Phar::convertToData call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5589.html">CVE-2015-5589</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5589">SUSE bug 938721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5589">SUSE bug 938721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5589">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5589">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5589">SUSE bug 938721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5589">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5589">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5589">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5589">SUSE bug 938721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5589">SUSE bug 938721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5589">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5590</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5590" source="CVE"/>
    <description>
    Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling of an e-mail attachment by the imap PHP extension.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5590.html">CVE-2015-5590</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5590">SUSE bug 938719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5590">SUSE bug 938719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5590">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5590">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5590">SUSE bug 938719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5590">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5590">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5590">SUSE bug 935074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5590">SUSE bug 938719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5590">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5600" source="CVE"/>
    <description>
    The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5600.html">CVE-2015-5600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 943504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 945985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 948086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 945985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 945985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 954457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 957883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 1009988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 1009988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 1009988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 938746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5600">SUSE bug 1074631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5621</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5621" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5621" source="CVE"/>
    <description>
    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5621.html">CVE-2015-5621</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5621">SUSE bug 940188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5621">SUSE bug 940188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5621">SUSE bug 940188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5621">SUSE bug 940188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5621">SUSE bug 940188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5621">SUSE bug 940188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5621">SUSE bug 940188</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140079" comment="libsnmp30-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151706" comment="libsnmp30 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140080" comment="libsnmp30-32bit-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151707" comment="libsnmp30-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140081" comment="net-snmp-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151708" comment="net-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140082" comment="net-snmp-devel-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151709" comment="net-snmp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140083" comment="perl-SNMP-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151710" comment="perl-SNMP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140084" comment="snmp-mibs-5.7.3-4.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151711" comment="snmp-mibs is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5722</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5722" source="CVE"/>
    <description>
    buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5722.html">CVE-2015-5722</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 954983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 954983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5722">SUSE bug 944066</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5745</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5745" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5745.html">CVE-2015-5745</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5745">SUSE bug 940929</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5788</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5788" source="CVE"/>
    <description>
    The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5788.html">CVE-2015-5788</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5788">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5794</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5794" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5794" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5794.html">CVE-2015-5794</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5794">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5801</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5801" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5801" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5801.html">CVE-2015-5801</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5801">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5809</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5809" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5809" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5809.html">CVE-2015-5809</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5809">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5822</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5822" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5822" source="CVE"/>
    <description>
    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5822.html">CVE-2015-5822</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5822">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5928</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5928" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5928" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5928.html">CVE-2015-5928</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5928">SUSE bug 971460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139884" comment="libjavascriptcoregtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151774" comment="libjavascriptcoregtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139885" comment="libjavascriptcoregtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151775" comment="libjavascriptcoregtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139886" comment="libwebkitgtk-1_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151776" comment="libwebkitgtk-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139887" comment="libwebkitgtk-3_0-0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151777" comment="libwebkitgtk-3_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139888" comment="libwebkitgtk-devel-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151778" comment="libwebkitgtk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139889" comment="libwebkitgtk2-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151779" comment="libwebkitgtk2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139890" comment="libwebkitgtk3-lang-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151780" comment="libwebkitgtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139891" comment="typelib-1_0-JavaScriptCore-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151781" comment="typelib-1_0-JavaScriptCore-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139892" comment="typelib-1_0-WebKit-1_0-2.4.11-2.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151782" comment="typelib-1_0-WebKit-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20155969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-5969</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-5969" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5969" source="CVE"/>
    <description>
    The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise (SLE) 12.1 and openSUSE Leap 42.1 allows local users to discover database credentials by listing a process and its arguments.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-5969.html">CVE-2015-5969</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5969">SUSE bug 957174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5969">SUSE bug 957174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5969">SUSE bug 957174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5969">SUSE bug 957174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5969">SUSE bug 957174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5969">SUSE bug 957174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5969">SUSE bug 957174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5969">SUSE bug 957174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5969">SUSE bug 957174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5969">SUSE bug 957174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-5969">SUSE bug 957174</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6031</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6031" source="CVE"/>
    <description>
    Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka MiniUPnPc) before 1.9.20150917 allows remote UPNP servers to cause a denial of service (application crash) and possibly execute arbitrary code via an "oversized" XML element name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6031.html">CVE-2015-6031</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6031">SUSE bug 950759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6031">SUSE bug 950759</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139934" comment="libminiupnpc10-1.9-6.14 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152166" comment="libminiupnpc10 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6241</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6241" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6241" source="CVE"/>
    <description>
    The proto_tree_add_bytes_item function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a failure to locate a number within a string, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6241.html">CVE-2015-6241</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6241">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6241">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6241">SUSE bug 941500</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6242</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6242" source="CVE"/>
    <description>
    The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly consider a certain case of multiple realloc operations that restore a memory chunk to its original size, which allows remote attackers to cause a denial of service (incorrect free operation and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6242.html">CVE-2015-6242</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6242">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6242">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6242">SUSE bug 941500</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6243</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6243" source="CVE"/>
    <description>
    The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6243.html">CVE-2015-6243</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6243">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6243">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6243">SUSE bug 941500</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6244</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6244" source="CVE"/>
    <description>
    The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in packet data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6244.html">CVE-2015-6244</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6244">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6244">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6244">SUSE bug 941500</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6245</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6245" source="CVE"/>
    <description>
    epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6245.html">CVE-2015-6245</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6245">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6245">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6245">SUSE bug 941500</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6246</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6246" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6246" source="CVE"/>
    <description>
    The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6246.html">CVE-2015-6246</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6246">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6246">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6246">SUSE bug 941500</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6247</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6247" source="CVE"/>
    <description>
    The dissect_openflow_tablemod_v5 function in epan/dissectors/packet-openflow_v5.c in the OpenFlow dissector in Wireshark 1.12.x before 1.12.7 does not validate a certain offset value, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6247.html">CVE-2015-6247</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6247">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6247">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6247">SUSE bug 941500</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6248</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6248" source="CVE"/>
    <description>
    The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6248.html">CVE-2015-6248</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6248">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6248">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6248">SUSE bug 941500</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6249</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6249" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6249" source="CVE"/>
    <description>
    The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a table for both IPv4 and IPv6 addresses, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6249.html">CVE-2015-6249</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6249">SUSE bug 941500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6249">SUSE bug 941500</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6251</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6251" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6251" source="CVE"/>
    <description>
    Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6251.html">CVE-2015-6251</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6251">SUSE bug 941794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6251">SUSE bug 941794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6251">SUSE bug 941794</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139559" comment="gnutls-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139560" comment="libgnutls-devel-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139561" comment="libgnutls-openssl27-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139562" comment="libgnutls28-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139563" comment="libgnutls28-32bit-3.2.15-7.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156360" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6360</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6360" source="CVE"/>
    <description>
    The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6360.html">CVE-2015-6360</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6360">SUSE bug 957376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6360">SUSE bug 957376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6360">SUSE bug 957376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6360">SUSE bug 957376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6360">SUSE bug 957376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6360">SUSE bug 957376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140103" comment="libsrtp1-1.5.4-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153037" comment="libsrtp1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6563</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6563" source="CVE"/>
    <description>
    The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6563.html">CVE-2015-6563</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 948086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6563">SUSE bug 1074631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6564</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6564" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6564.html">CVE-2015-6564</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 942850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 948086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 943006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 1074631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6564">SUSE bug 1074631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6749</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6749" source="CVE"/>
    <description>
    Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6749.html">CVE-2015-6749</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6749">SUSE bug 943795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6749">SUSE bug 943795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6749">SUSE bug 943795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6749">SUSE bug 943795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6749">SUSE bug 943795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6749">SUSE bug 943795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6749">SUSE bug 943795</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6749">SUSE bug 943795</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140395" comment="vorbis-tools-1.4.0-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151128" comment="vorbis-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140396" comment="vorbis-tools-lang-1.4.0-20.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151129" comment="vorbis-tools-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6815</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6815" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6815.html">CVE-2015-6815</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6815">SUSE bug 944697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6815">SUSE bug 944697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6815">SUSE bug 944697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6815">SUSE bug 944697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6815">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6815">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6815">SUSE bug 944697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6815">SUSE bug 944697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6815">SUSE bug 944697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6815">SUSE bug 944697</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6831</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6831" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6831" source="CVE"/>
    <description>
    Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6831.html">CVE-2015-6831</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 945188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6831">SUSE bug 942291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6832</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6832" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6832" source="CVE"/>
    <description>
    Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute arbitrary code via crafted serialized data that triggers misuse of an array field.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6832.html">CVE-2015-6832</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6832">SUSE bug 942293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6832">SUSE bug 945189</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6833</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6833" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6833" source="CVE"/>
    <description>
    Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to arbitrary files via a .. (dot dot) in a ZIP archive entry that is mishandled during an extractTo call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6833.html">CVE-2015-6833</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6833">SUSE bug 942296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6833">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6834</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6834" source="CVE"/>
    <description>
    Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6834.html">CVE-2015-6834</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6834">SUSE bug 945403</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6834">SUSE bug 945403</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6834">SUSE bug 945403</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6834">SUSE bug 945403</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6834">SUSE bug 1015191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6834">SUSE bug 1015191</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6835" source="CVE"/>
    <description>
    The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6835.html">CVE-2015-6835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6835">SUSE bug 945402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6835">SUSE bug 945402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6835">SUSE bug 945402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6835">SUSE bug 945402</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6836" source="CVE"/>
    <description>
    The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a "type confusion" in the serialize_function_call function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6836.html">CVE-2015-6836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6836">SUSE bug 945428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6836">SUSE bug 945428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6836">SUSE bug 945428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6836">SUSE bug 945428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6836">SUSE bug 945428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6836">SUSE bug 945428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6836">SUSE bug 945428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6836">SUSE bug 945428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6836">SUSE bug 945428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6836">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6837" source="CVE"/>
    <description>
    The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation during initial error checking, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6838.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6837.html">CVE-2015-6837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6837">SUSE bug 945412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6838</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6838" source="CVE"/>
    <description>
    The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation after the principal argument loop, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6837.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6838.html">CVE-2015-6838</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6838">SUSE bug 945412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6855</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6855" source="CVE"/>
    <description>
    hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6855.html">CVE-2015-6855</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 945404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 945404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 945404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 945404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 945404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 965156</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 965156</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 965156</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 965156</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 965156</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 945404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6855">SUSE bug 945404</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20156908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-6908</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-6908" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6908" source="CVE"/>
    <description>
    The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-6908.html">CVE-2015-6908</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-6908">SUSE bug 945582</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139914" comment="libldap-2_4-2-2.4.44-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152789" comment="libldap-2_4-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139915" comment="libldap-2_4-2-32bit-2.4.44-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152790" comment="libldap-2_4-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139916" comment="libldap-data-2.4.44-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154130" comment="libldap-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139917" comment="openldap2-2.4.44-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152657" comment="openldap2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139918" comment="openldap2-client-2.4.44-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152796" comment="openldap2-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139919" comment="openldap2-devel-2.4.44-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152797" comment="openldap2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7174</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7174" source="CVE"/>
    <description>
    The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7174.html">CVE-2015-7174</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7174">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7175</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7175" source="CVE"/>
    <description>
    The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7175.html">CVE-2015-7175</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7175">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7176</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7176" source="CVE"/>
    <description>
    The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7176.html">CVE-2015-7176</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7176">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7177</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7177" source="CVE"/>
    <description>
    The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7177.html">CVE-2015-7177</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7177">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7178</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7178" source="CVE"/>
    <description>
    The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, mishandles shader access, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted (1) OpenGL or (2) WebGL content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7178.html">CVE-2015-7178</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7178">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7179</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7179" source="CVE"/>
    <description>
    The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted (1) OpenGL or (2) WebGL content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7179.html">CVE-2015-7179</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7179">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7180</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7180" source="CVE"/>
    <description>
    The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 misinterprets the return value of a function call, which might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7180.html">CVE-2015-7180</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7180">SUSE bug 947003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7181</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7181" source="CVE"/>
    <description>
    The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restricts access to an unspecified data structure, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data, related to a "use-after-poison" issue.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7181.html">CVE-2015-7181</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7181">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7182</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7182" source="CVE"/>
    <description>
    Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted OCTET STRING data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7182.html">CVE-2015-7182</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7182">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7183</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7183" source="CVE"/>
    <description>
    Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7183.html">CVE-2015-7183</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7183">SUSE bug 952810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7183">SUSE bug 962977</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140246" comment="mozilla-nspr-4.12-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152084" comment="mozilla-nspr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140247" comment="mozilla-nspr-devel-4.12-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152085" comment="mozilla-nspr-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7184</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7184" source="CVE"/>
    <description>
    The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7184.html">CVE-2015-7184</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7184">SUSE bug 950686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7184">SUSE bug 950686</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7185</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7185" source="CVE"/>
    <description>
    Mozilla Firefox before 42.0 on Android does not ensure that the address bar is restored upon fullscreen-mode exit, which allows remote attackers to spoof the address bar via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7185.html">CVE-2015-7185</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7185">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7186</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7186" source="CVE"/>
    <description>
    Mozilla Firefox before 42.0 on Android allows user-assisted remote attackers to bypass the Same Origin Policy and trigger (1) a download or (2) cached profile-data reading via a file: URL in a saved HTML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7186.html">CVE-2015-7186</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7186">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7187</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7187" source="CVE"/>
    <description>
    The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7187.html">CVE-2015-7187</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7187">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7188</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7188" source="CVE"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the Same Origin Policy for an IP address origin, and conduct cross-site scripting (XSS) attacks, by appending whitespace characters to an IP address string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7188.html">CVE-2015-7188</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7188">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7189</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7189" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7189" source="CVE"/>
    <description>
    Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via vectors involving a CANVAS element and crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7189.html">CVE-2015-7189</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7189">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7190</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7190" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7190" source="CVE"/>
    <description>
    The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML documents via a crafted application.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7190.html">CVE-2015-7190</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7190">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7191" source="CVE"/>
    <description>
    Mozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows attackers to conduct cross-site scripting (XSS) attacks via vectors involving an intent: URL and fallback navigation, aka "Universal XSS (UXSS)."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7191.html">CVE-2015-7191</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7191">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7192</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7192" source="CVE"/>
    <description>
    The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with the implementation of the TABLE element, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using an NSAccessibilityIndexAttribute value to reference a row index.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7192.html">CVE-2015-7192</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7192">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7193</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7193" source="CVE"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack of a preflight-request step.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7193.html">CVE-2015-7193</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7193">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7194</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7194" source="CVE"/>
    <description>
    Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7194.html">CVE-2015-7194</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7194">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7195</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7195" source="CVE"/>
    <description>
    The URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped characters in hostnames within Location headers, which allows remote attackers to obtain sensitive information via vectors involving a redirect.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7195.html">CVE-2015-7195</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7195">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7196</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7196" source="CVE"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service (incorrect garbage collection and application crash) or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript wrapper.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7196.html">CVE-2015-7196</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7196">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7197</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7197" source="CVE"/>
    <description>
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7197.html">CVE-2015-7197</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7197">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7198</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7198" source="CVE"/>
    <description>
    Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted texture data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7198.html">CVE-2015-7198</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7198">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7199</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7199" source="CVE"/>
    <description>
    The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted SVG document.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7199.html">CVE-2015-7199</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7199">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7200</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7200" source="CVE"/>
    <description>
    The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7200.html">CVE-2015-7200</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7200">SUSE bug 952810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7201</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7201" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7201.html">CVE-2015-7201</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7201">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7202</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7202" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7202.html">CVE-2015-7202</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7202">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7203</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7203" source="CVE"/>
    <description>
    Buffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes/gfxDWriteFontList.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted font-family name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7203.html">CVE-2015-7203</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7203">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7204</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7204" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7204" source="CVE"/>
    <description>
    Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which allows remote attackers to execute arbitrary code via crafted JavaScript variable assignments.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7204.html">CVE-2015-7204</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7204">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7205</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7205" source="CVE"/>
    <description>
    Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a crafted WebRTC RTP packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7205.html">CVE-2015-7205</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7205">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7207</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7207" source="CVE"/>
    <description>
    Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls, a related issue to CVE-2015-1300.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7207.html">CVE-2015-7207</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7207">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7208</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7208" source="CVE"/>
    <description>
    Mozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7208.html">CVE-2015-7208</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7208">SUSE bug 959277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7208">SUSE bug 963637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7208">SUSE bug 963637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7208">SUSE bug 963637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7208">SUSE bug 963637</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7210" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering attempted use of a data channel that has been closed by a WebRTC function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7210.html">CVE-2015-7210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7210">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7211</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7211" source="CVE"/>
    <description>
    Mozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows remote attackers to spoof web sites via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7211.html">CVE-2015-7211</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7211">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7212</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7212" source="CVE"/>
    <description>
    Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering a graphics operation that requires a large texture allocation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7212.html">CVE-2015-7212</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7212">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7213</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7213" source="CVE"/>
    <description>
    Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7213.html">CVE-2015-7213</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7213">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7214</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7214" source="CVE"/>
    <description>
    Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7214.html">CVE-2015-7214</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7214">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7215</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7215" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7215" source="CVE"/>
    <description>
    The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure after a rethrow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7215.html">CVE-2015-7215</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7215">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7216</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7216" source="CVE"/>
    <description>
    The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7216.html">CVE-2015-7216</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7216">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7217</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7217" source="CVE"/>
    <description>
    The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted Truevision TGA image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7217.html">CVE-2015-7217</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7217">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7218</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7218" source="CVE"/>
    <description>
    The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a single-byte header frame that triggers incorrect memory allocation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7218.html">CVE-2015-7218</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7218">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7219</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7219" source="CVE"/>
    <description>
    The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a malformed PushPromise frame that triggers decompressed-buffer length miscalculation and incorrect memory allocation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7219.html">CVE-2015-7219</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7219">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7220</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7220" source="CVE"/>
    <description>
    Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7220.html">CVE-2015-7220</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7220">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7221</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7221" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7221" source="CVE"/>
    <description>
    Buffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a deque size change.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7221.html">CVE-2015-7221</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7221">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7222</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7222" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7222" source="CVE"/>
    <description>
    Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect memory allocation and application crash) via an MP4 video file with crafted covr metadata that triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7222.html">CVE-2015-7222</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7222">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7223</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7223" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7223" source="CVE"/>
    <description>
    The WebExtension APIs in Mozilla Firefox before 43.0 allow remote attackers to gain privileges, and possibly obtain sensitive information or conduct cross-site scripting (XSS) attacks, via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7223.html">CVE-2015-7223</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7223">SUSE bug 959277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157236" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7236</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7236" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7236" source="CVE"/>
    <description>
    Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMAP_CALLIT code.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7236.html">CVE-2015-7236</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7236">SUSE bug 946204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7236">SUSE bug 946204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7236">SUSE bug 946204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7236">SUSE bug 946204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7236">SUSE bug 946204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7236">SUSE bug 946204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7236">SUSE bug 946204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140350" comment="rpcbind-0.2.3-2.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153045" comment="rpcbind is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7295</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7295" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7295" source="CVE"/>
    <description>
    hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7295.html">CVE-2015-7295</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7295">SUSE bug 947159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7295">SUSE bug 947159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7295">SUSE bug 947159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7295">SUSE bug 947159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7295">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7295">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7295">SUSE bug 947159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7295">SUSE bug 947159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7295">SUSE bug 947159</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7311</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7311" source="CVE"/>
    <description>
    libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device model, which allows local guest users to write to a read-only disk image.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7311.html">CVE-2015-7311</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7311">SUSE bug 947165</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157497" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7497</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7497" source="CVE"/>
    <description>
    Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7497.html">CVE-2015-7497</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7497">SUSE bug 957106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7497">SUSE bug 957106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7497">SUSE bug 957106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7497">SUSE bug 957106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7497">SUSE bug 957106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7497">SUSE bug 957106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7497">SUSE bug 959469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7497">SUSE bug 957106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7497">SUSE bug 957106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7497">SUSE bug 957106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7497">SUSE bug 957106</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7498</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7498" source="CVE"/>
    <description>
    Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7498.html">CVE-2015-7498</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7498">SUSE bug 957107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7498">SUSE bug 957107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7498">SUSE bug 957107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7498">SUSE bug 957107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7498">SUSE bug 957107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7498">SUSE bug 957107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7498">SUSE bug 959469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7498">SUSE bug 957107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7498">SUSE bug 957107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7498">SUSE bug 957107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7498">SUSE bug 957107</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7499</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7499" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7499" source="CVE"/>
    <description>
    Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7499.html">CVE-2015-7499</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7499">SUSE bug 957109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7499">SUSE bug 957109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7499">SUSE bug 957109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7499">SUSE bug 957109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7499">SUSE bug 957109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7499">SUSE bug 959469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7499">SUSE bug 957109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7499">SUSE bug 957109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7499">SUSE bug 957109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7499">SUSE bug 957109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7500</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7500" source="CVE"/>
    <description>
    The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7500.html">CVE-2015-7500</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7500">SUSE bug 957110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7500">SUSE bug 957110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7500">SUSE bug 957110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7500">SUSE bug 957110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7500">SUSE bug 957110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7500">SUSE bug 959469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7500">SUSE bug 957110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7500">SUSE bug 957110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7500">SUSE bug 957110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7500">SUSE bug 957110</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7504</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7504" source="CVE"/>
    <description>
    Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7504.html">CVE-2015-7504</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7504">SUSE bug 956411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7504">SUSE bug 956411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7504">SUSE bug 956411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7504">SUSE bug 956411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7504">SUSE bug 956411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7504">SUSE bug 956411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7504">SUSE bug 956411</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7511</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7511" source="CVE"/>
    <description>
    Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7511.html">CVE-2015-7511</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7511">SUSE bug 965902</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139859" comment="libgcrypt-devel-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151920" comment="libgcrypt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139860" comment="libgcrypt20-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139861" comment="libgcrypt20-32bit-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7512</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7512" source="CVE"/>
    <description>
    Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7512.html">CVE-2015-7512</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 957162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 957162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 957162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 957162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 957162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 957162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 957162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 962360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 957162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 957162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 962360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 962360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 962360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 962360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7512">SUSE bug 957162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7542</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7542" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7542.html">CVE-2015-7542</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7542">SUSE bug 958331</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169671" comment="gwenhywfar-4.9.0beta-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169672" comment="gwenhywfar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169673" comment="gwenhywfar-devel-4.9.0beta-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169674" comment="gwenhywfar-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169675" comment="gwenhywfar-lang-4.9.0beta-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169676" comment="gwenhywfar-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169677" comment="gwenhywfar-tools-4.9.0beta-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169678" comment="gwenhywfar-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169679" comment="libgwengui-gtk2-0-4.9.0beta-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169680" comment="libgwengui-gtk2-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169681" comment="libgwengui-qt4-0-4.9.0beta-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169682" comment="libgwengui-qt4-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169683" comment="libgwenhywfar60-4.9.0beta-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169684" comment="libgwenhywfar60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169685" comment="libgwenhywfar60-plugins-4.9.0beta-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169686" comment="libgwenhywfar60-plugins is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7545</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7545" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7545" source="CVE"/>
    <description>
    The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7545.html">CVE-2015-7545</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7545">SUSE bug 948969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7545">SUSE bug 948969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7545">SUSE bug 948969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7545">SUSE bug 973177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7545">SUSE bug 973177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7545">SUSE bug 978391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7545">SUSE bug 978391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140242" comment="mercurial-3.8.3-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153633" comment="mercurial is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140243" comment="mercurial-lang-3.8.3-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153634" comment="mercurial-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7547</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7547" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7547.html">CVE-2015-7547</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 847227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 969216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 969216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 969216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 969241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 967061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 969241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 969241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 986086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 969241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 969241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 961721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 1077097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 969241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 1077097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 1077097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 1077097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 1077097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 1077097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 1077097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 1077097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7547">SUSE bug 1077097</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7549</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7549" source="CVE"/>
    <description>
    The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7549.html">CVE-2015-7549</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7549">SUSE bug 958917</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7551</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7551" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7551" source="CVE"/>
    <description>
    The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library.  NOTE: this vulnerability exists because of a CVE-2009-5147 regression.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7551.html">CVE-2015-7551</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 939860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 939860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 939860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7551">SUSE bug 959495</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154826" comment="libruby2_1-2_1-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152217" comment="libruby2_1-2_1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150587" comment="libruby2_2-2_2-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153052" comment="libruby2_2-2_2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150588" comment="libruby2_3-2_3-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154131" comment="libruby2_3-2_3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154827" comment="ruby2.1-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152218" comment="ruby2.1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154828" comment="ruby2.1-devel-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152219" comment="ruby2.1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154829" comment="ruby2.1-devel-extra-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154837" comment="ruby2.1-devel-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154830" comment="ruby2.1-doc-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154839" comment="ruby2.1-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154831" comment="ruby2.1-doc-ri-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154841" comment="ruby2.1-doc-ri is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154832" comment="ruby2.1-stdlib-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152220" comment="ruby2.1-stdlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150589" comment="ruby2.2-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153053" comment="ruby2.2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150590" comment="ruby2.2-devel-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153054" comment="ruby2.2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150591" comment="ruby2.2-devel-extra-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153055" comment="ruby2.2-devel-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150592" comment="ruby2.2-doc-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153056" comment="ruby2.2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150593" comment="ruby2.2-doc-ri-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153057" comment="ruby2.2-doc-ri is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150594" comment="ruby2.2-stdlib-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153058" comment="ruby2.2-stdlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150595" comment="ruby2.2-tk-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153059" comment="ruby2.2-tk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150596" comment="ruby2.3-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154132" comment="ruby2.3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150597" comment="ruby2.3-devel-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154133" comment="ruby2.3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150598" comment="ruby2.3-devel-extra-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154134" comment="ruby2.3-devel-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150599" comment="ruby2.3-doc-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154135" comment="ruby2.3-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150600" comment="ruby2.3-doc-ri-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154136" comment="ruby2.3-doc-ri is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150601" comment="ruby2.3-stdlib-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154137" comment="ruby2.3-stdlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150602" comment="ruby2.3-tk-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154138" comment="ruby2.3-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7552</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7552" source="CVE"/>
    <description>
    Heap-based buffer overflow in the gdk_pixbuf_flip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7552.html">CVE-2015-7552</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7552">SUSE bug 958963</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139466" comment="gdk-pixbuf-devel-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151614" comment="gdk-pixbuf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139467" comment="gdk-pixbuf-lang-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139468" comment="gdk-pixbuf-query-loaders-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139469" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151617" comment="gdk-pixbuf-query-loaders-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139470" comment="libgdk_pixbuf-2_0-0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139471" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151619" comment="libgdk_pixbuf-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139472" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7554</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7554" source="CVE"/>
    <description>
    The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7554.html">CVE-2015-7554</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7554">SUSE bug 960341</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169670" comment="libtiff-devel-32bit-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7555</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7555" source="CVE"/>
    <description>
    Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and logical screen width fields in a GIF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7555.html">CVE-2015-7555</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7555">SUSE bug 960319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7555">SUSE bug 960319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7555">SUSE bug 960319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7555">SUSE bug 960319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7555">SUSE bug 960319</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139485" comment="giflib-devel-5.0.5-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153063" comment="giflib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139486" comment="libgif6-5.0.5-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153066" comment="libgif6 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7560</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7560" source="CVE"/>
    <description>
    The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7560.html">CVE-2015-7560</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7560">SUSE bug 968222</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7575</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7575" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575" source="CVE"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7575.html">CVE-2015-7575</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 962743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 963937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 967521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 959888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 967521</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 981087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 960996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7575">SUSE bug 961357</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139932" comment="libmbedtls9-1.3.17-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152973" comment="libmbedtls9 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7673</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7673" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7673" source="CVE"/>
    <description>
    io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7673.html">CVE-2015-7673</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7673">SUSE bug 948790</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139466" comment="gdk-pixbuf-devel-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151614" comment="gdk-pixbuf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139467" comment="gdk-pixbuf-lang-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139468" comment="gdk-pixbuf-query-loaders-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139469" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151617" comment="gdk-pixbuf-query-loaders-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139470" comment="libgdk_pixbuf-2_0-0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139471" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151619" comment="libgdk_pixbuf-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139472" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7674</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7674" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7674" source="CVE"/>
    <description>
    Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7674.html">CVE-2015-7674</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7674">SUSE bug 948791</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139466" comment="gdk-pixbuf-devel-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151614" comment="gdk-pixbuf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139467" comment="gdk-pixbuf-lang-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139468" comment="gdk-pixbuf-query-loaders-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139469" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151617" comment="gdk-pixbuf-query-loaders-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139470" comment="libgdk_pixbuf-2_0-0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139471" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151619" comment="libgdk_pixbuf-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139472" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7691</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7691" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7691" source="CVE"/>
    <description>
    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations.  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7691.html">CVE-2015-7691</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7691">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7691">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7691">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7691">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7691">SUSE bug 1010964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7692</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7692" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7692" source="CVE"/>
    <description>
    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7692.html">CVE-2015-7692</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7692">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7692">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7692">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7692">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7692">SUSE bug 1010964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7700</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7700" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7700" source="CVE"/>
    <description>
    Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7700.html">CVE-2015-7700</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7700">SUSE bug 1056770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7700">SUSE bug 1056770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7700">SUSE bug 1056770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7700">SUSE bug 1056770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7700">SUSE bug 1056770</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169687" comment="pngcrush-1.7.85-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169688" comment="pngcrush is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7701</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7701" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7701" source="CVE"/>
    <description>
    Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7701.html">CVE-2015-7701</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7701">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7702</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7702" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7702" source="CVE"/>
    <description>
    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7702.html">CVE-2015-7702</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7702">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7702">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7702">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7702">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7702">SUSE bug 1010964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7703</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7703" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7703" source="CVE"/>
    <description>
    The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7703.html">CVE-2015-7703</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 943221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 943221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 943221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 943218</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 943221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 943218</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 943221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 943219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 943221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 943216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7703">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7704</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7704" source="CVE"/>
    <description>
    The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7704.html">CVE-2015-7704</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7704">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7705</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7705" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7705" source="CVE"/>
    <description>
    The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7705.html">CVE-2015-7705</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 952611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7705">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7747</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7747" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7747" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7747.html">CVE-2015-7747</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7747">SUSE bug 949399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7747">SUSE bug 949399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7747">SUSE bug 949399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7747">SUSE bug 949399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7747">SUSE bug 949399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7747">SUSE bug 949399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7747">SUSE bug 949399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7747">SUSE bug 949399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139270" comment="audiofile-devel-0.3.6-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139271" comment="libaudiofile1-0.3.6-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7803</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7803" source="CVE"/>
    <description>
    The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7803.html">CVE-2015-7803</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7803">SUSE bug 949961</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7805</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7805" source="CVE"/>
    <description>
    Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7805.html">CVE-2015-7805</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7805">SUSE bug 953516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7805">SUSE bug 953516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7805">SUSE bug 953516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7805">SUSE bug 953516</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119287" comment="libsndfile-devel-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119271" comment="libsndfile1-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119272" comment="libsndfile1-32bit-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7830" source="CVE"/>
    <description>
    The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote attackers to cause a denial of service (incorrect free and application crash) via a crafted packet that triggers interface-filter copying.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7830.html">CVE-2015-7830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7830">SUSE bug 950437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7830">SUSE bug 950437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7830">SUSE bug 950437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7830">SUSE bug 950437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7830">SUSE bug 950437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7830">SUSE bug 950437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7830">SUSE bug 950437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7830">SUSE bug 960382</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7830">SUSE bug 950437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7830">SUSE bug 950437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7830">SUSE bug 950437</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7833</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7833" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7833" source="CVE"/>
    <description>
    The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux (RHEL) 7.1 allows physically proximate attackers to cause a denial of service (panic) via a nonzero bInterfaceNumber value in a USB device descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7833.html">CVE-2015-7833</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7833">SUSE bug 950998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7835" source="CVE"/>
    <description>
    The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7835.html">CVE-2015-7835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 940929</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 947159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 950367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7835">SUSE bug 950367</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7848</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7848" source="CVE"/>
    <description>
    An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7848.html">CVE-2015-7848</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7848">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157849" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7849</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7849" source="CVE"/>
    <description>
    Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7849.html">CVE-2015-7849</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7849">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7850</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7850" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7850" source="CVE"/>
    <description>
    ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7850.html">CVE-2015-7850</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7850">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7851</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7851" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7851" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7851.html">CVE-2015-7851</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7851">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7852</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7852" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7852" source="CVE"/>
    <description>
    ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7852.html">CVE-2015-7852</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7852">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7853</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7853" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7853" source="CVE"/>
    <description>
    The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7853.html">CVE-2015-7853</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7853">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157854" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7854</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7854" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7854" source="CVE"/>
    <description>
    Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7854.html">CVE-2015-7854</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7854">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7855</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7855" source="CVE"/>
    <description>
    The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7855.html">CVE-2015-7855</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7855">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157871" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7871</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7871" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7871" source="CVE"/>
    <description>
    Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7871.html">CVE-2015-7871</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 952606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 952606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 952606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 952606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 1010964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7871">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7884</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7884" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7884" source="CVE"/>
    <description>
    The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7884.html">CVE-2015-7884</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7884">SUSE bug 951626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7884">SUSE bug 951626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7884">SUSE bug 951626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7884">SUSE bug 951626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7884">SUSE bug 951626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7884">SUSE bug 951626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7884">SUSE bug 951626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7884">SUSE bug 951626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7884">SUSE bug 951626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7884">SUSE bug 951626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7884">SUSE bug 951626</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7885</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7885" source="CVE"/>
    <description>
    The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7885.html">CVE-2015-7885</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7885">SUSE bug 951627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7885">SUSE bug 951627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7885">SUSE bug 951627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7885">SUSE bug 951627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7885">SUSE bug 951627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7885">SUSE bug 951627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7885">SUSE bug 951627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7885">SUSE bug 951627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7885">SUSE bug 951627</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7941</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7941" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7941" source="CVE"/>
    <description>
    libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7941.html">CVE-2015-7941</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7941">SUSE bug 951734</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7942</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7942" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942" source="CVE"/>
    <description>
    The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7942.html">CVE-2015-7942</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7942">SUSE bug 951735</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7969</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7969" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7969" source="CVE"/>
    <description>
    Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service (memory consumption) via a large number of "teardowns" of domains with the vcpu pointer array allocated using the (1) XEN_DOMCTL_max_vcpus hypercall or the xenoprofile state vcpu pointer array allocated using the (2) XENOPROF_get_buffer or (3) XENOPROF_set_passive hypercall.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7969.html">CVE-2015-7969</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7969">SUSE bug 950705</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7970</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7970" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7970" source="CVE"/>
    <description>
    The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service (CPU consumption and possibly reboot) via crafted memory contents that triggers a "time-consuming linear scan," related to Populate-on-Demand.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7970.html">CVE-2015-7970</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7970">SUSE bug 950704</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7971</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7971" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7971" source="CVE"/>
    <description>
    Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted (1) HYPERCALL_xenoprof_op hypercalls, which are not properly handled in the do_xenoprof_op function in common/xenoprof.c, or (2) HYPERVISOR_xenpmu_op hypercalls, which are not properly handled in the do_xenpmu_op function in arch/x86/cpu/vpmu.c.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7971.html">CVE-2015-7971</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7971">SUSE bug 950706</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7972</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7972" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7972" source="CVE"/>
    <description>
    The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand (PoD) system, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors related to "heavy memory pressure."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7972.html">CVE-2015-7972</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7972">SUSE bug 951845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7972">SUSE bug 951845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7972">SUSE bug 951845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7972">SUSE bug 951845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7972">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7972">SUSE bug 951845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7972">SUSE bug 950704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7972">SUSE bug 951845</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7973</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7973" source="CVE"/>
    <description>
    NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7973.html">CVE-2015-7973</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7973">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7973">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7973">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7973">SUSE bug 975578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7973">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7973">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7973">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7973">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7973">SUSE bug 962995</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7974</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7974" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7974" source="CVE"/>
    <description>
    NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7974.html">CVE-2015-7974</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7974">SUSE bug 962960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7974">SUSE bug 962960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7974">SUSE bug 962960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7974">SUSE bug 962960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7974">SUSE bug 975578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7974">SUSE bug 962960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7974">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7974">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7974">SUSE bug 962960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7974">SUSE bug 962960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7975</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7975" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7975" source="CVE"/>
    <description>
    The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7975.html">CVE-2015-7975</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7975">SUSE bug 962988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7975">SUSE bug 962988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7975">SUSE bug 962988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7975">SUSE bug 975578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7975">SUSE bug 962988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7975">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7975">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7975">SUSE bug 962988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7975">SUSE bug 962988</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7976</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7976" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7976" source="CVE"/>
    <description>
    The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7976.html">CVE-2015-7976</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7976">SUSE bug 962802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7976">SUSE bug 962802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7976">SUSE bug 962802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7976">SUSE bug 962802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7976">SUSE bug 975578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7976">SUSE bug 962802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7976">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7976">SUSE bug 962802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7976">SUSE bug 962802</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7977</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7977" source="CVE"/>
    <description>
    ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7977.html">CVE-2015-7977</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7977">SUSE bug 962970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7977">SUSE bug 962970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7977">SUSE bug 962970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7977">SUSE bug 962970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7977">SUSE bug 975578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7977">SUSE bug 962970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7977">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7977">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7977">SUSE bug 962970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7977">SUSE bug 962970</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7978</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7978" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7978" source="CVE"/>
    <description>
    NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7978.html">CVE-2015-7978</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 962970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 963000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 963000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 962970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 963000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 963000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 975578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 963000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 963000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7978">SUSE bug 963000</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7979</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7979" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7979" source="CVE"/>
    <description>
    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7979.html">CVE-2015-7979</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 962784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 962784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 962784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 962784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 975578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 962784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 962995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 962784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 962784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7979">SUSE bug 982065</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7981</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7981" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7981" source="CVE"/>
    <description>
    The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7981.html">CVE-2015-7981</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7981">SUSE bug 952051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7981">SUSE bug 952051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7981">SUSE bug 952051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7981">SUSE bug 952051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7981">SUSE bug 952051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7981">SUSE bug 952051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7981">SUSE bug 963937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7981">SUSE bug 960402</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139967" comment="libpng12-0-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139968" comment="libpng12-0-32bit-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139969" comment="libpng12-devel-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20157995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-7995</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-7995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7995" source="CVE"/>
    <description>
    The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-7995.html">CVE-2015-7995</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-7995">SUSE bug 952474</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155736" comment="libxslt-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155743" comment="libxslt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155737" comment="libxslt-devel-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155744" comment="libxslt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155738" comment="libxslt-devel-32bit-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155745" comment="libxslt-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155739" comment="libxslt-python-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155746" comment="libxslt-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155740" comment="libxslt-tools-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155741" comment="libxslt1-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155742" comment="libxslt1-32bit-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155749" comment="libxslt1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8000</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8000" source="CVE"/>
    <description>
    db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8000.html">CVE-2015-8000</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 944066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8000">SUSE bug 958861</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8010</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8010" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8010.html">CVE-2015-8010</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8010">SUSE bug 952777</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147097" comment="icinga-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153105" comment="icinga is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147098" comment="icinga-devel-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153106" comment="icinga-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147099" comment="icinga-doc-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153107" comment="icinga-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147100" comment="icinga-idoutils-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153108" comment="icinga-idoutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147101" comment="icinga-idoutils-mysql-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153109" comment="icinga-idoutils-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147102" comment="icinga-idoutils-oracle-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153110" comment="icinga-idoutils-oracle is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147103" comment="icinga-idoutils-pgsql-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153111" comment="icinga-idoutils-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147104" comment="icinga-plugins-downtimes-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153112" comment="icinga-plugins-downtimes is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147105" comment="icinga-plugins-eventhandlers-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153113" comment="icinga-plugins-eventhandlers is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147106" comment="icinga-www-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153114" comment="icinga-www is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147107" comment="icinga-www-config-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153115" comment="icinga-www-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147108" comment="monitoring-tools-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151784" comment="monitoring-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8025</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8025" source="CVE"/>
    <description>
    driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8025.html">CVE-2015-8025</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8025">SUSE bug 952062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8025">SUSE bug 952062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8025">SUSE bug 952062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8025">SUSE bug 952062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8025">SUSE bug 952062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8025">SUSE bug 952062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8025">SUSE bug 952062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8025">SUSE bug 952062</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140421" comment="xscreensaver-5.33-4.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153124" comment="xscreensaver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140422" comment="xscreensaver-data-5.33-4.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153125" comment="xscreensaver-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140423" comment="xscreensaver-data-extra-5.33-4.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153126" comment="xscreensaver-data-extra is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8035</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8035" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035" source="CVE"/>
    <description>
    The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8035.html">CVE-2015-8035</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 954429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 1088279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 1088279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8035">SUSE bug 1088279</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8041</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041" source="CVE"/>
    <description>
    Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8041.html">CVE-2015-8041</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8041">SUSE bug 937419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8041">SUSE bug 937419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8041">SUSE bug 937419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8041">SUSE bug 937419</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140402" comment="wpa_supplicant-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140403" comment="wpa_supplicant-gui-2.2-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8075</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8075" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8075.html">CVE-2015-8075</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8075">SUSE bug 953519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8075">SUSE bug 953519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8075">SUSE bug 953519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8075">SUSE bug 953519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8075">SUSE bug 953519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8075">SUSE bug 953519</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119287" comment="libsndfile-devel-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119271" comment="libsndfile1-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009119272" comment="libsndfile1-32bit-1.0.25-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8077</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8077" source="CVE"/>
    <description>
    Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the start_octet variable.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8077.html">CVE-2015-8077</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 981670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8077">SUSE bug 954200</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139363" comment="cyradm-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151342" comment="cyradm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139364" comment="cyrus-imapd-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151343" comment="cyrus-imapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139365" comment="perl-Cyrus-IMAP-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151344" comment="perl-Cyrus-IMAP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139366" comment="perl-Cyrus-SIEVE-managesieve-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151345" comment="perl-Cyrus-SIEVE-managesieve is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8078</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8078" source="CVE"/>
    <description>
    Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the section_offset variable.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8076.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8078.html">CVE-2015-8078</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 981670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8078">SUSE bug 954201</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139363" comment="cyradm-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151342" comment="cyradm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139364" comment="cyrus-imapd-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151343" comment="cyrus-imapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139365" comment="perl-Cyrus-IMAP-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151344" comment="perl-Cyrus-IMAP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139366" comment="perl-Cyrus-SIEVE-managesieve-2.4.18-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151345" comment="perl-Cyrus-SIEVE-managesieve is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8079</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8079" source="CVE"/>
    <description>
    qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8079.html">CVE-2015-8079</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8079">SUSE bug 954210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8079">SUSE bug 954210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8079">SUSE bug 954210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8079">SUSE bug 954210</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139699" comment="libQt5WebKit5-5.6.1-1.31 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152364" comment="libQt5WebKit5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139700" comment="libQt5WebKit5-devel-5.6.1-1.31 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152366" comment="libQt5WebKit5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139701" comment="libQt5WebKit5-imports-5.6.1-1.31 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152368" comment="libQt5WebKit5-imports is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139702" comment="libQt5WebKitWidgets-devel-5.6.1-1.31 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152369" comment="libQt5WebKitWidgets-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139703" comment="libQt5WebKitWidgets5-5.6.1-1.31 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152372" comment="libQt5WebKitWidgets5 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8104</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8104" source="CVE"/>
    <description>
    The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8104.html">CVE-2015-8104</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 953527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 962977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8104">SUSE bug 954404</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8126</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8126" source="CVE"/>
    <description>
    Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8126.html">CVE-2015-8126</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 958198</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 962743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 963937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 960402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 954980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 958198</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8126">SUSE bug 969333</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139967" comment="libpng12-0-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139968" comment="libpng12-0-32bit-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139969" comment="libpng12-devel-1.2.50-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117932" comment="libpng16-16-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117933" comment="libpng16-16-32bit-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117936" comment="libpng16-compat-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009117937" comment="libpng16-devel-1.6.8-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8138</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8138" source="CVE"/>
    <description>
    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8138.html">CVE-2015-8138</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 963002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 963002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 963002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 963002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 975578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 963002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 963002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 963002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 974668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 951608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8138">SUSE bug 951608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8139</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8139" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8139" source="CVE"/>
    <description>
    ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8139.html">CVE-2015-8139</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8139">SUSE bug 962997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8139">SUSE bug 975578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8139">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8139">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8139">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8139">SUSE bug 1010964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8140</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8140" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8140" source="CVE"/>
    <description>
    The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8140.html">CVE-2015-8140</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8140">SUSE bug 962994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8140">SUSE bug 975578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8140">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8140">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8140">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8140">SUSE bug 1010964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8158</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8158" source="CVE"/>
    <description>
    The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8158.html">CVE-2015-8158</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8158">SUSE bug 962966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8158">SUSE bug 962966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8158">SUSE bug 962966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8158">SUSE bug 975578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8158">SUSE bug 962966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8158">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8158">SUSE bug 962966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8158">SUSE bug 962966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8158">SUSE bug 962966</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8216</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8216" source="CVE"/>
    <description>
    The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted MJPEG data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8216.html">CVE-2015-8216</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8216">SUSE bug 955346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8216">SUSE bug 955346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8216">SUSE bug 955346</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8217</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8217" source="CVE"/>
    <description>
    The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted High Efficiency Video Coding (HEVC) data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8217.html">CVE-2015-8217</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8217">SUSE bug 955347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8217">SUSE bug 955347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8217">SUSE bug 955347</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8218</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8218" source="CVE"/>
    <description>
    The decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not validate uncompressed runs, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted CCITT FAX data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8218.html">CVE-2015-8218</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8218">SUSE bug 955348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8218">SUSE bug 955348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8218">SUSE bug 955348</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8219</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8219" source="CVE"/>
    <description>
    The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8219.html">CVE-2015-8219</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8219">SUSE bug 955350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8219">SUSE bug 955350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8219">SUSE bug 955350</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8241</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8241" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8241" source="CVE"/>
    <description>
    The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8241.html">CVE-2015-8241</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 956018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 956018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 956018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 956018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 956018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 956018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 959469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 956018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 956018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 956018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 956018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8241">SUSE bug 956018</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8242</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8242" source="CVE"/>
    <description>
    The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8242.html">CVE-2015-8242</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 956021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 956021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 956021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 956021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 956021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 956021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 959469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 956021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 956021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 956021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 956021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8242">SUSE bug 956021</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8317</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8317" source="CVE"/>
    <description>
    The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8317.html">CVE-2015-8317</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8317">SUSE bug 956260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8317">SUSE bug 956260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8317">SUSE bug 956260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8317">SUSE bug 956260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8317">SUSE bug 956260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8317">SUSE bug 956260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8317">SUSE bug 959469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8317">SUSE bug 956260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8317">SUSE bug 956260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8317">SUSE bug 956260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8317">SUSE bug 956260</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8325</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8325" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8325" source="CVE"/>
    <description>
    The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8325.html">CVE-2015-8325</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 1016709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8325">SUSE bug 975865</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8327</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8327" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8327" source="CVE"/>
    <description>
    Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8327.html">CVE-2015-8327</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 1027197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8327">SUSE bug 957531</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8339</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8339" source="CVE"/>
    <description>
    The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domain, which might allow guest OS administrators to cause a denial of service (host crash) via unspecified vectors related to domain teardown.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8339.html">CVE-2015-8339</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8339">SUSE bug 956408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8340</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8340" source="CVE"/>
    <description>
    The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEM_exchange error handling.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8340.html">CVE-2015-8340</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8340">SUSE bug 956408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8341</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8341" source="CVE"/>
    <description>
    The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8341.html">CVE-2015-8341</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8341">SUSE bug 956409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8341">SUSE bug 956409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8341">SUSE bug 956409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8341">SUSE bug 956409</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8345</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8345" source="CVE"/>
    <description>
    The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop) via vectors involving the command block list.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8345.html">CVE-2015-8345</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8345">SUSE bug 956832</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8363</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8363" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8363" source="CVE"/>
    <description>
    The jpeg2000_read_main_headers function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service (out-of-bounds heap-memory access) or possibly have unspecified other impact via a crafted image with two or more of these markers.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8363.html">CVE-2015-8363</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8363">SUSE bug 957114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8363">SUSE bug 957114</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8364</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8364" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8364" source="CVE"/>
    <description>
    Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service (out-of-bounds heap-memory access) or possibly have unspecified other impact via crafted image dimensions in Indeo Video Interactive data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8364.html">CVE-2015-8364</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8364">SUSE bug 957115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8364">SUSE bug 957115</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8365</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8365" source="CVE"/>
    <description>
    The smka_decode_frame function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with the number of channels, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Smacker data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8365.html">CVE-2015-8365</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8365">SUSE bug 957116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8365">SUSE bug 957116</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8367</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8367" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8367.html">CVE-2015-8367</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 1006704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 1006717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8367">SUSE bug 957517</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140032" comment="libraw-devel-0.17.1-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151901" comment="libraw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140033" comment="libraw15-0.17.1-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154115" comment="libraw15 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158370" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8370</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8370" source="CVE"/>
    <description>
    Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an "Off-by-two" or "Out of bounds overwrite" memory error.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8370.html">CVE-2015-8370</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8370">SUSE bug 956631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139575" comment="grub2-2.02~beta2-87.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153175" comment="grub2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139576" comment="grub2-i386-pc-2.02~beta2-87.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153178" comment="grub2-i386-pc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139577" comment="grub2-snapper-plugin-2.02~beta2-87.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153179" comment="grub2-snapper-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139578" comment="grub2-systemd-sleep-plugin-2.02~beta2-87.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154139" comment="grub2-systemd-sleep-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139579" comment="grub2-x86_64-efi-2.02~beta2-87.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153180" comment="grub2-x86_64-efi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139580" comment="grub2-x86_64-xen-2.02~beta2-87.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153181" comment="grub2-x86_64-xen is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8380</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8380" source="CVE"/>
    <description>
    The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8380.html">CVE-2015-8380</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8380">SUSE bug 957566</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8381</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8381" source="CVE"/>
    <description>
    The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\k'R')|((?'R')))H'Rk'Rf)|s(?'R'))))/ and /(?J:(?|(:(?|(?'R')(\z(?|(?'R')(\k'R')|((?'R')))k'R')|((?'R')))H'Ak'Rf)|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8381.html">CVE-2015-8381</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8381">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8381">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8381">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8381">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8381">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8381">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8381">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8381">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8382</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8382" source="CVE"/>
    <description>
    The match function in pcre_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcdefghi)abc)|((*ACCEPT)))/ pattern and related patterns involving (*ACCEPT), which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (partially initialized memory and application crash) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-2547.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8382.html">CVE-2015-8382</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8382">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8382">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8382">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8382">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8382">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8382">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8383</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8383" source="CVE"/>
    <description>
    PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8383.html">CVE-2015-8383</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8383">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8383">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8383">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8383">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8383">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8383">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8384</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8384" source="CVE"/>
    <description>
    PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8384.html">CVE-2015-8384</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8384">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8384">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8384">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8384">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8384">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8384">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8384">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8384">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8385</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8385" source="CVE"/>
    <description>
    PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8385.html">CVE-2015-8385</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8385">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8385">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8385">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8385">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8385">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8385">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8386</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8386" source="CVE"/>
    <description>
    PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8386.html">CVE-2015-8386</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8386">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8386">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8386">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8386">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8386">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8386">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8387</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8387" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8387" source="CVE"/>
    <description>
    PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8387.html">CVE-2015-8387</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8387">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8387">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8387">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8387">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8387">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8387">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8388</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8388" source="CVE"/>
    <description>
    PCRE before 8.38 mishandles the /(?=di(?&lt;=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8388.html">CVE-2015-8388</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8388">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8388">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8388">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8388">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8388">SUSE bug 936227</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8388">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8388">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8388">SUSE bug 936227</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8389</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8389" source="CVE"/>
    <description>
    PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (infinite recursion) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8389.html">CVE-2015-8389</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8389">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8389">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8389">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8389">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8389">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8389">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8390</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8390" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8390" source="CVE"/>
    <description>
    PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8390.html">CVE-2015-8390</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8390">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8390">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8390">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8390">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8390">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8390">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8391</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8391" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8391" source="CVE"/>
    <description>
    The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8391.html">CVE-2015-8391</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8391">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8391">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8391">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8391">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8391">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8391">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8392</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8392" source="CVE"/>
    <description>
    PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of service (unintended recursion and buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8395.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8392.html">CVE-2015-8392</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8392">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8392">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8392">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8392">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8392">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8392">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8392">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8392">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8393</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8393" source="CVE"/>
    <description>
    pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8393.html">CVE-2015-8393</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8393">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8393">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8393">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8393">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8393">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8393">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8394</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8394" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8394" source="CVE"/>
    <description>
    PCRE before 8.38 mishandles the (?(&lt;digits&gt;) and (?(R&lt;digits&gt;) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8394.html">CVE-2015-8394</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8394">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8394">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8394">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8394">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8394">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8394">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8395</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8395" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8395" source="CVE"/>
    <description>
    PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8384 and CVE-2015-8392.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8395.html">CVE-2015-8395</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8395">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8395">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8395">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8395">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8395">SUSE bug 958373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8395">SUSE bug 906574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8395">SUSE bug 957598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8395">SUSE bug 958373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8400</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8400" source="CVE"/>
    <description>
    The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8400.html">CVE-2015-8400</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8400">SUSE bug 957748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8400">SUSE bug 957748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8400">SUSE bug 957748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8400">SUSE bug 957748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8400">SUSE bug 957748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8400">SUSE bug 957748</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144696" comment="shellinabox-2.20-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153182" comment="shellinabox is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8467</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8467" source="CVE"/>
    <description>
    The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during creation of machine accounts, which allows remote authenticated users to bypass intended access restrictions by leveraging the existence of a domain with both a Samba DC and a Windows DC, a similar issue to CVE-2015-2535.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8467.html">CVE-2015-8467</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8467">SUSE bug 958585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8467">SUSE bug 958585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8467">SUSE bug 958585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8467">SUSE bug 958585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8467">SUSE bug 958585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8467">SUSE bug 958585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8467">SUSE bug 958585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8467">SUSE bug 958585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8467">SUSE bug 958585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8467">SUSE bug 958585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8467">SUSE bug 958585</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8504</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8504" source="CVE"/>
    <description>
    Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8504.html">CVE-2015-8504</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8504">SUSE bug 958493</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8540</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8540" source="CVE"/>
    <description>
    Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8540.html">CVE-2015-8540</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 963937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8540">SUSE bug 958791</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150688" comment="libpng12-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153098" comment="libpng12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150689" comment="libpng12-0-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150690" comment="libpng12-0-32bit-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150691" comment="libpng12-compat-devel-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153099" comment="libpng12-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150692" comment="libpng12-compat-devel-32bit-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153100" comment="libpng12-compat-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150693" comment="libpng12-devel-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150694" comment="libpng12-devel-32bit-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153101" comment="libpng12-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154499" comment="libpng15-1.5.22-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153131" comment="libpng15 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154500" comment="libpng15-15-1.5.22-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153132" comment="libpng15-15 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154501" comment="libpng15-15-32bit-1.5.22-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153133" comment="libpng15-15-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8543</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8543" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8543" source="CVE"/>
    <description>
    The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8543.html">CVE-2015-8543</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 963994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 963994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 963994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 963994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 923755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 963994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 969522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 958886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8543">SUSE bug 1052256</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8550</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8550" source="CVE"/>
    <description>
    Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8550.html">CVE-2015-8550</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8550">SUSE bug 957988</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8554</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8554" source="CVE"/>
    <description>
    Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a "write path."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8554.html">CVE-2015-8554</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8554">SUSE bug 958007</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8555</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8555" source="CVE"/>
    <description>
    Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8555.html">CVE-2015-8555</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8555">SUSE bug 958009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8558</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8558" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8558" source="CVE"/>
    <description>
    The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8558.html">CVE-2015-8558</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 976109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 976111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8558">SUSE bug 959006</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8560</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8560" source="CVE"/>
    <description>
    Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8560.html">CVE-2015-8560</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 1027197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8560">SUSE bug 957531</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139356" comment="cups-filters-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151947" comment="cups-filters is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139357" comment="cups-filters-cups-browsed-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151948" comment="cups-filters-cups-browsed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139358" comment="cups-filters-foomatic-rip-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151949" comment="cups-filters-foomatic-rip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139359" comment="cups-filters-ghostscript-1.8.2-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151950" comment="cups-filters-ghostscript is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8567</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8567" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8567" source="CVE"/>
    <description>
    Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8567.html">CVE-2015-8567</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8567">SUSE bug 959386</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8568</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8568" source="CVE"/>
    <description>
    Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8568.html">CVE-2015-8568</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959387</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8568">SUSE bug 959386</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8605</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8605" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8605" source="CVE"/>
    <description>
    ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8605.html">CVE-2015-8605</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8605">SUSE bug 961305</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139383" comment="dhcp-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151310" comment="dhcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139384" comment="dhcp-client-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151311" comment="dhcp-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139385" comment="dhcp-doc-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151312" comment="dhcp-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139386" comment="dhcp-relay-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151313" comment="dhcp-relay is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139387" comment="dhcp-server-4.3.3-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151314" comment="dhcp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8613</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8613" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8613" source="CVE"/>
    <description>
    Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8613.html">CVE-2015-8613</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8613">SUSE bug 961358</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8613">SUSE bug 961556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8613">SUSE bug 961358</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8613">SUSE bug 961556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8613">SUSE bug 961556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8613">SUSE bug 961358</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8613">SUSE bug 961358</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8613">SUSE bug 961358</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158614" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8614</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8614" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8614" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8614.html">CVE-2015-8614</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8614">SUSE bug 959993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8614">SUSE bug 959993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8614">SUSE bug 959993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8614">SUSE bug 959993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8614">SUSE bug 960566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8614">SUSE bug 959993</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139314" comment="claws-mail-3.13.2-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151767" comment="claws-mail is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139315" comment="claws-mail-lang-3.13.2-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151768" comment="claws-mail-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8615</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8615" source="CVE"/>
    <description>
    The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of changes to the callback method (HVM_PARAM_CALLBACK_IRQ).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8615.html">CVE-2015-8615</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8619</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8619" source="CVE"/>
    <description>
    The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8619.html">CVE-2015-8619</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8619">SUSE bug 960334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8619">SUSE bug 960334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8619">SUSE bug 960334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8619">SUSE bug 960334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8619">SUSE bug 965269</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8619">SUSE bug 965269</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8619">SUSE bug 960334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8619">SUSE bug 965269</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8619">SUSE bug 965269</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8629</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8629" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8629" source="CVE"/>
    <description>
    The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted string.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8629.html">CVE-2015-8629</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8629">SUSE bug 963968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8629">SUSE bug 963968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8629">SUSE bug 963968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8629">SUSE bug 963968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8629">SUSE bug 963968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8629">SUSE bug 963968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8629">SUSE bug 770172</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8630</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8630" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8630" source="CVE"/>
    <description>
    The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8630.html">CVE-2015-8630</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8630">SUSE bug 963964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8630">SUSE bug 963964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8630">SUSE bug 963964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8630">SUSE bug 963964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8630">SUSE bug 963964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8631</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8631" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8631" source="CVE"/>
    <description>
    Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL principal name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8631.html">CVE-2015-8631</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8631">SUSE bug 963975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8631">SUSE bug 963975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8631">SUSE bug 963975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8631">SUSE bug 963975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8631">SUSE bug 963975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8631">SUSE bug 963975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8631">SUSE bug 963975</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8661</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8661" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8661" source="CVE"/>
    <description>
    The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted H.264 data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8661.html">CVE-2015-8661</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8661">SUSE bug 960385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8661">SUSE bug 960385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8661">SUSE bug 960385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8661">SUSE bug 960385</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8662</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8662" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8662" source="CVE"/>
    <description>
    The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8662.html">CVE-2015-8662</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8662">SUSE bug 960384</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8662">SUSE bug 960384</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8662">SUSE bug 960384</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8662">SUSE bug 960384</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8663</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8663" source="CVE"/>
    <description>
    The ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failure, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .mov file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8663.html">CVE-2015-8663</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8663">SUSE bug 960383</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8663">SUSE bug 960383</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8663">SUSE bug 960383</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8663">SUSE bug 960383</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8688</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8688" source="CVE"/>
    <description>
    Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8688.html">CVE-2015-8688</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8688">SUSE bug 960668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8688">SUSE bug 960668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8688">SUSE bug 1014976</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144699" comment="mcabber-1.0.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154140" comment="mcabber is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144700" comment="mcabber-devel-1.0.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154141" comment="mcabber-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147477" comment="python3-sleekxmpp-1.3.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154142" comment="python3-sleekxmpp is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8704</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8704" source="CVE"/>
    <description>
    apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8704.html">CVE-2015-8704</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8704">SUSE bug 962189</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158708" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8708</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8708" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8708" source="CVE"/>
    <description>
    Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8708.html">CVE-2015-8708</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8708">SUSE bug 960566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8708">SUSE bug 960566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8708">SUSE bug 960566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8708">SUSE bug 959993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8708">SUSE bug 960566</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139314" comment="claws-mail-3.13.2-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151767" comment="claws-mail is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139315" comment="claws-mail-lang-3.13.2-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151768" comment="claws-mail-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158709" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8709</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8709" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8709" source="CVE"/>
    <description>
    ** DISPUTED ** kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call.  NOTE: the vendor states "there is no kernel bug here."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8709.html">CVE-2015-8709</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 959709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 960563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8709">SUSE bug 1010933</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148375" comment="kernel-debug-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148376" comment="kernel-debug-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148377" comment="kernel-debug-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148379" comment="kernel-default-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148383" comment="kernel-docs-html-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148384" comment="kernel-docs-pdf-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148386" comment="kernel-obs-build-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148387" comment="kernel-obs-qa-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148389" comment="kernel-source-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148391" comment="kernel-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148392" comment="kernel-vanilla-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148393" comment="kernel-vanilla-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8710</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8710" source="CVE"/>
    <description>
    The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8710.html">CVE-2015-8710</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8710">SUSE bug 960674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8710">SUSE bug 960674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8710">SUSE bug 960674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8710">SUSE bug 960674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8710">SUSE bug 960674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8710">SUSE bug 960674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8710">SUSE bug 960674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8710">SUSE bug 960674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8710">SUSE bug 960674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8710">SUSE bug 960674</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8711</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8711" source="CVE"/>
    <description>
    epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8711.html">CVE-2015-8711</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8711">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8718</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8718" source="CVE"/>
    <description>
    Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Match MSG/RES packets for async NLM" option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8718.html">CVE-2015-8718</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8718">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8720</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8720" source="CVE"/>
    <description>
    The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8720.html">CVE-2015-8720</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8720">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8721</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8721" source="CVE"/>
    <description>
    Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet with zlib compression.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8721.html">CVE-2015-8721</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8721">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8722</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8722" source="CVE"/>
    <description>
    epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8722.html">CVE-2015-8722</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8722">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8723</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8723" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8723" source="CVE"/>
    <description>
    The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8723.html">CVE-2015-8723</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8723">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8724</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8724" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8724" source="CVE"/>
    <description>
    The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not verify the WPA broadcast key length, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8724.html">CVE-2015-8724</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8724">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8725</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8725" source="CVE"/>
    <description>
    The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8725.html">CVE-2015-8725</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8725">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158726" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8726</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8726" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8726" source="CVE"/>
    <description>
    wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8726.html">CVE-2015-8726</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8726">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158727" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8727</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8727" source="CVE"/>
    <description>
    The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not properly maintain request-key data, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8727.html">CVE-2015-8727</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8727">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8728</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8728" source="CVE"/>
    <description>
    The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/packet-gsm_a_common.c in the GSM A dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly uses the tvb_bcd_dig_to_wmem_packet_str function, which allows remote attackers to cause a denial of service (buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8728.html">CVE-2015-8728</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8728">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8729</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8729" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8729" source="CVE"/>
    <description>
    The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presence of a '\0' character at the end of a date string, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8729.html">CVE-2015-8729</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8729">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8730</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8730" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8730" source="CVE"/>
    <description>
    epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8730.html">CVE-2015-8730</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8730">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8731</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8731" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8731" source="CVE"/>
    <description>
    The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not reject unknown TLV types, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8731.html">CVE-2015-8731</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8731">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8732</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8732" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8732" source="CVE"/>
    <description>
    The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the Total Profile Number field, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8732.html">CVE-2015-8732</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8732">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8733</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8733" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8733" source="CVE"/>
    <description>
    The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8733.html">CVE-2015-8733</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8733">SUSE bug 960382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8734</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8734" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8734" source="CVE"/>
    <description>
    The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8734.html">CVE-2015-8734</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8735</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8735" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8735" source="CVE"/>
    <description>
    The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (invalid write operation and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8735.html">CVE-2015-8735</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8736</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8736" source="CVE"/>
    <description>
    The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8736.html">CVE-2015-8736</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8737</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8737" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8737" source="CVE"/>
    <description>
    The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8737.html">CVE-2015-8737</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8738</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8738" source="CVE"/>
    <description>
    The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8738.html">CVE-2015-8738</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8739</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8739" source="CVE"/>
    <description>
    The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8739.html">CVE-2015-8739</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8740</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8740" source="CVE"/>
    <description>
    The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8740.html">CVE-2015-8740</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8741</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8741" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8741" source="CVE"/>
    <description>
    The dissect_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8741.html">CVE-2015-8741</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8742</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8742" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8742" source="CVE"/>
    <description>
    The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8742.html">CVE-2015-8742</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8743</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8743" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8743" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8743.html">CVE-2015-8743</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8743">SUSE bug 960725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8743">SUSE bug 960726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8743">SUSE bug 960725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8743">SUSE bug 960726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8743">SUSE bug 960726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8743">SUSE bug 960725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8743">SUSE bug 960726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8743">SUSE bug 960726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8743">SUSE bug 960725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8743">SUSE bug 960726</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8744</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8744" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8744" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8744.html">CVE-2015-8744</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8744">SUSE bug 960835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8744">SUSE bug 960836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8744">SUSE bug 960835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8744">SUSE bug 960836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8744">SUSE bug 960836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8744">SUSE bug 960835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8744">SUSE bug 960836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8744">SUSE bug 960835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8744">SUSE bug 960836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8744">SUSE bug 960835</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8745</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8745" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8745.html">CVE-2015-8745</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8745">SUSE bug 960707</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8776</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8776" source="CVE"/>
    <description>
    The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8776.html">CVE-2015-8776</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8776">SUSE bug 962736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8776">SUSE bug 962736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8776">SUSE bug 962736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8776">SUSE bug 962736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8776">SUSE bug 962736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8776">SUSE bug 962736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8776">SUSE bug 962736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8776">SUSE bug 986086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8776">SUSE bug 962736</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8777</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8777" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8777" source="CVE"/>
    <description>
    The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8777.html">CVE-2015-8777</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8777">SUSE bug 950944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8777">SUSE bug 962735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8777">SUSE bug 950944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8777">SUSE bug 962735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8777">SUSE bug 950944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8777">SUSE bug 950944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8777">SUSE bug 950944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8777">SUSE bug 950944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8777">SUSE bug 962735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8777">SUSE bug 962735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8777">SUSE bug 950944</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8778</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8778" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8778" source="CVE"/>
    <description>
    Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8778.html">CVE-2015-8778</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8778">SUSE bug 962737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8778">SUSE bug 962737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8778">SUSE bug 962737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8778">SUSE bug 962737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8778">SUSE bug 962737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8778">SUSE bug 962737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8778">SUSE bug 962737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8778">SUSE bug 986086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8778">SUSE bug 962737</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8779</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8779" source="CVE"/>
    <description>
    Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8779.html">CVE-2015-8779</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 962739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 962739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 962739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 962739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 962739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 965453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 965453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 965453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 962739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 965453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 965453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 962739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8779">SUSE bug 986086</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158781" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8781</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8781" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8781" source="CVE"/>
    <description>
    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8781.html">CVE-2015-8781</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8781">SUSE bug 964213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8781">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8781">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8781">SUSE bug 964213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8781">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8781">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8781">SUSE bug 964213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8781">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8781">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8781">SUSE bug 964225</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8782</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8782" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8782" source="CVE"/>
    <description>
    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8782.html">CVE-2015-8782</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8782">SUSE bug 964213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8782">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8782">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8782">SUSE bug 964213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8782">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8782">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8782">SUSE bug 964213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8782">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8782">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8782">SUSE bug 964225</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158783" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8783</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8783" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8783" source="CVE"/>
    <description>
    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8783.html">CVE-2015-8783</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8783">SUSE bug 964213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8783">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8783">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8783">SUSE bug 964213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8783">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8783">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8783">SUSE bug 964213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8783">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8783">SUSE bug 964225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8783">SUSE bug 964225</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8803</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8803" source="CVE"/>
    <description>
    The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8803.html">CVE-2015-8803</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8803">SUSE bug 964845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8803">SUSE bug 964845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8803">SUSE bug 964845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8803">SUSE bug 964845</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139868" comment="libhogweed2-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153222" comment="libhogweed2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139869" comment="libhogweed2-32bit-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153223" comment="libhogweed2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139870" comment="libnettle-devel-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153225" comment="libnettle-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139871" comment="libnettle4-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153227" comment="libnettle4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139872" comment="libnettle4-32bit-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153228" comment="libnettle4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8804</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8804" source="CVE"/>
    <description>
    x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8804.html">CVE-2015-8804</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8804">SUSE bug 964847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8804">SUSE bug 964847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8804">SUSE bug 964847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8804">SUSE bug 964847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139868" comment="libhogweed2-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153222" comment="libhogweed2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139869" comment="libhogweed2-32bit-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153223" comment="libhogweed2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139870" comment="libnettle-devel-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153225" comment="libnettle-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139871" comment="libnettle4-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153227" comment="libnettle4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139872" comment="libnettle4-32bit-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153228" comment="libnettle4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8805</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8805" source="CVE"/>
    <description>
    The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8805.html">CVE-2015-8805</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8805">SUSE bug 964849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8805">SUSE bug 964849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8805">SUSE bug 964849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8805">SUSE bug 964849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139868" comment="libhogweed2-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153222" comment="libhogweed2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139869" comment="libhogweed2-32bit-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153223" comment="libhogweed2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139870" comment="libnettle-devel-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153225" comment="libnettle-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139871" comment="libnettle4-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153227" comment="libnettle4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139872" comment="libnettle4-32bit-2.7.1-9.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153228" comment="libnettle4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8812</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8812" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8812" source="CVE"/>
    <description>
    drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8812.html">CVE-2015-8812</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8812">SUSE bug 966437</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8835" source="CVE"/>
    <description>
    The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, which allows remote attackers to cause a denial of service (NULL pointer dereference, type confusion, and application crash) or possibly execute arbitrary code via crafted serialized data representing a numerically indexed _cookies array, related to the SoapClient::__call method in ext/soap/soap.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8835.html">CVE-2015-8835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8835">SUSE bug 973351</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8838</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8838" source="CVE"/>
    <description>
    ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8838.html">CVE-2015-8838</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8838">SUSE bug 973792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8838">SUSE bug 973792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8838">SUSE bug 973792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8838">SUSE bug 973792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8838">SUSE bug 973792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8838">SUSE bug 973792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8838">SUSE bug 973792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8838">SUSE bug 973792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8838">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8838">SUSE bug 973792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8838">SUSE bug 973792</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8853</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8853" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8853" source="CVE"/>
    <description>
    The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service (infinite loop) via crafted utf-8 data, as demonstrated by "a\x80."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8853.html">CVE-2015-8853</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 976584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 976584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 976584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 976584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 976584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 976584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 997948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 997950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 976584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 997948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 997950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8853">SUSE bug 976584</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140286" comment="perl-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140287" comment="perl-32bit-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140288" comment="perl-base-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140289" comment="perl-doc-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8866</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8866" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8866" source="CVE"/>
    <description>
    ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE) attacks via a crafted XML document, a related issue to CVE-2015-5161.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8866.html">CVE-2015-8866</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8866">SUSE bug 976996</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8867</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8867" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8867" source="CVE"/>
    <description>
    The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RAND_pseudo_bytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8867.html">CVE-2015-8867</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8867">SUSE bug 977005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8867">SUSE bug 977005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8867">SUSE bug 977005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8867">SUSE bug 977005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8867">SUSE bug 977005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8867">SUSE bug 977005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8867">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158869" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8869</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8869" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8869" source="CVE"/>
    <description>
    OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8869.html">CVE-2015-8869</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8869">SUSE bug 977990</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140260" comment="ocaml-4.03.0-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153244" comment="ocaml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140261" comment="ocaml-compiler-libs-4.03.0-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153245" comment="ocaml-compiler-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140262" comment="ocaml-runtime-4.03.0-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153251" comment="ocaml-runtime is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158871" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8871</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8871" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8871" source="CVE"/>
    <description>
    Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8871.html">CVE-2015-8871</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8871">SUSE bug 979907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8871">SUSE bug 979907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8871">SUSE bug 979907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8871">SUSE bug 979907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8871">SUSE bug 979907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8871">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8871">SUSE bug 1007744</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162027" comment="libopenjp2-7-2.1.0-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162028" comment="libopenjp2-7-32bit-2.1.0-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162029" comment="openjpeg2-2.1.0-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162030" comment="openjpeg2-devel-2.1.0-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158872" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8872</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8872" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8872" source="CVE"/>
    <description>
    The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memory read and crash) by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8872.html">CVE-2015-8872</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8872">SUSE bug 980364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8872">SUSE bug 980364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8872">SUSE bug 980364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8872">SUSE bug 980364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8872">SUSE bug 980364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8872">SUSE bug 980364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8872">SUSE bug 980364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8872">SUSE bug 980364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8872">SUSE bug 980364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8872">SUSE bug 980364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139391" comment="dosfstools-3.0.26-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153254" comment="dosfstools is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158873" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8873</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8873" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8873" source="CVE"/>
    <description>
    Stack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service (segmentation fault) via recursive method calls.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8873.html">CVE-2015-8873</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8873">SUSE bug 980373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8873">SUSE bug 980373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8873">SUSE bug 980373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8873">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8873">SUSE bug 980373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8873">SUSE bug 980373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8873">SUSE bug 980373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158874" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8874</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8874" source="CVE"/>
    <description>
    Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8874.html">CVE-2015-8874</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8874">SUSE bug 980375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8874">SUSE bug 980375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8874">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8874">SUSE bug 980375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8874">SUSE bug 980375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8874">SUSE bug 980375</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158876" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8876</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8876" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8876" source="CVE"/>
    <description>
    Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8876.html">CVE-2015-8876</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8876">SUSE bug 981049</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8876">SUSE bug 981049</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8876">SUSE bug 981049</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8876">SUSE bug 981049</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8876">SUSE bug 981049</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8876">SUSE bug 1019550</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158877" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8877</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8877" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8877" source="CVE"/>
    <description>
    The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8877.html">CVE-2015-8877</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8877">SUSE bug 981061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8877">SUSE bug 981061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8877">SUSE bug 981061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8877">SUSE bug 981061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158879" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8879</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8879" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8879" source="CVE"/>
    <description>
    The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8879.html">CVE-2015-8879</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8879">SUSE bug 981050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8879">SUSE bug 981050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8879">SUSE bug 981050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8879">SUSE bug 981050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8894</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8894" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8894" source="CVE"/>
    <description>
    Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via a crafted tga file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8894.html">CVE-2015-8894</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8894">SUSE bug 983523</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8895</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8895" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8895" source="CVE"/>
    <description>
    Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a crafted length value, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8895.html">CVE-2015-8895</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8895">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8895">SUSE bug 983527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8895">SUSE bug 983527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8895">SUSE bug 983527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8895">SUSE bug 983527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8895">SUSE bug 983527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8895">SUSE bug 983527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8895">SUSE bug 983527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8895">SUSE bug 983527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8895">SUSE bug 983527</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8896</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8896" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8896" source="CVE"/>
    <description>
    Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8896.html">CVE-2015-8896</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8896">SUSE bug 983533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8897</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8897" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8897" source="CVE"/>
    <description>
    The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (application crash) via a crafted png file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8897.html">CVE-2015-8897</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8897">SUSE bug 983739</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8898</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8898" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8898" source="CVE"/>
    <description>
    The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8898.html">CVE-2015-8898</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 982969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983746</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8898">SUSE bug 983746</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8899</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8899" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8899" source="CVE"/>
    <description>
    Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8899.html">CVE-2015-8899</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8899">SUSE bug 983273</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146254" comment="dnsmasq-2.71-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146255" comment="dnsmasq-utils-2.71-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153255" comment="dnsmasq-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8900</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8900" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8900" source="CVE"/>
    <description>
    The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8900.html">CVE-2015-8900</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8900">SUSE bug 983232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8900">SUSE bug 983232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8900">SUSE bug 983232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8900">SUSE bug 983232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8900">SUSE bug 983232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8900">SUSE bug 983232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8900">SUSE bug 983232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8900">SUSE bug 983232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8900">SUSE bug 983232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8900">SUSE bug 983232</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8901</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8901" source="CVE"/>
    <description>
    ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8901.html">CVE-2015-8901</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8901">SUSE bug 983234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8901">SUSE bug 983234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8901">SUSE bug 983234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8901">SUSE bug 983234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8901">SUSE bug 983234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8901">SUSE bug 983234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8901">SUSE bug 983234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8901">SUSE bug 983234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8901">SUSE bug 983234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8901">SUSE bug 983234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8901">SUSE bug 983234</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8902</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8902" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8902" source="CVE"/>
    <description>
    The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted PDB file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8902.html">CVE-2015-8902</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8902">SUSE bug 983253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8902">SUSE bug 983253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8902">SUSE bug 983253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8902">SUSE bug 983253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8902">SUSE bug 983253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8902">SUSE bug 983253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8902">SUSE bug 983253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8902">SUSE bug 983253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8902">SUSE bug 983253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8902">SUSE bug 983253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8902">SUSE bug 1052711</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8903</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8903" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8903" source="CVE"/>
    <description>
    The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted VICAR file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8903.html">CVE-2015-8903</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8903">SUSE bug 983259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8903">SUSE bug 983259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8903">SUSE bug 983259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8903">SUSE bug 983259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8903">SUSE bug 983259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8903">SUSE bug 983259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8903">SUSE bug 983259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8903">SUSE bug 983259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8903">SUSE bug 983259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8903">SUSE bug 983259</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158918" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8918</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8918" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8918" source="CVE"/>
    <description>
    The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted cab files, related to "overlapping memcpy."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8918.html">CVE-2015-8918</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8918">SUSE bug 985698</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158919" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8919</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8919" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8919" source="CVE"/>
    <description>
    The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap) via a crafted (1) lzh or (2) lha file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8919.html">CVE-2015-8919</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8919">SUSE bug 985697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8919">SUSE bug 985697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8919">SUSE bug 985697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8919">SUSE bug 985697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8919">SUSE bug 985697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8919">SUSE bug 985697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8919">SUSE bug 985697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8919">SUSE bug 985697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8919">SUSE bug 985697</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158920" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8920</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8920" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8920" source="CVE"/>
    <description>
    The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8920.html">CVE-2015-8920</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8920">SUSE bug 985675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8920">SUSE bug 985675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8920">SUSE bug 985675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8920">SUSE bug 985675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8920">SUSE bug 985675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8920">SUSE bug 985675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8920">SUSE bug 985675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8920">SUSE bug 985675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8920">SUSE bug 985675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8920">SUSE bug 985675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8920">SUSE bug 985675</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158921" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8921</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8921" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8921" source="CVE"/>
    <description>
    The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8921.html">CVE-2015-8921</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8921">SUSE bug 985682</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8922</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8922" source="CVE"/>
    <description>
    The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8922.html">CVE-2015-8922</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8922">SUSE bug 985685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8922">SUSE bug 985685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8922">SUSE bug 985685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8922">SUSE bug 985685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8922">SUSE bug 985685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8922">SUSE bug 985685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8922">SUSE bug 985685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8922">SUSE bug 985685</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8923</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8923" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8923" source="CVE"/>
    <description>
    The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8923.html">CVE-2015-8923</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8923">SUSE bug 985703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8923">SUSE bug 985703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8923">SUSE bug 985703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8923">SUSE bug 985703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8923">SUSE bug 985703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8923">SUSE bug 985703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8923">SUSE bug 985703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8923">SUSE bug 985703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8923">SUSE bug 985703</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158924" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8924</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8924" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8924" source="CVE"/>
    <description>
    The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8924.html">CVE-2015-8924</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8924">SUSE bug 985609</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158925" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8925</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8925" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8925" source="CVE"/>
    <description>
    The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8925.html">CVE-2015-8925</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8925">SUSE bug 985706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8925">SUSE bug 985706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8925">SUSE bug 985706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8925">SUSE bug 985706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8925">SUSE bug 985706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8925">SUSE bug 985706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8925">SUSE bug 985706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8925">SUSE bug 985706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8925">SUSE bug 985706</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8926</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8926" source="CVE"/>
    <description>
    The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8926.html">CVE-2015-8926</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8926">SUSE bug 985704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8926">SUSE bug 985704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8926">SUSE bug 985704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8926">SUSE bug 985704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8926">SUSE bug 985704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8926">SUSE bug 985704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8926">SUSE bug 985704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8926">SUSE bug 985704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8926">SUSE bug 985704</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8928</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8928" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8928" source="CVE"/>
    <description>
    The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8928.html">CVE-2015-8928</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8928">SUSE bug 985679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8928">SUSE bug 985679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8928">SUSE bug 985679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8928">SUSE bug 985679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8928">SUSE bug 985679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8928">SUSE bug 985679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8928">SUSE bug 985679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8928">SUSE bug 985679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8928">SUSE bug 985679</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158929" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8929</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8929" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8929" source="CVE"/>
    <description>
    Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8929.html">CVE-2015-8929</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8929">SUSE bug 985669</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158930" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8930</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8930" source="CVE"/>
    <description>
    bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8930.html">CVE-2015-8930</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8930">SUSE bug 985700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8930">SUSE bug 985700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8930">SUSE bug 985700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8930">SUSE bug 985700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8930">SUSE bug 985700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8930">SUSE bug 985700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8930">SUSE bug 985700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8930">SUSE bug 985700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8930">SUSE bug 985700</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8931</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8931" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8931" source="CVE"/>
    <description>
    Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8931.html">CVE-2015-8931</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8931">SUSE bug 985689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8931">SUSE bug 985689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8931">SUSE bug 985689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8931">SUSE bug 985689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8931">SUSE bug 985689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8931">SUSE bug 985689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8931">SUSE bug 985689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8931">SUSE bug 985689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8931">SUSE bug 985689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8931">SUSE bug 985689</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8932</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8932" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8932" source="CVE"/>
    <description>
    The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8932.html">CVE-2015-8932</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8932">SUSE bug 985665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8932">SUSE bug 985665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8932">SUSE bug 985665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8932">SUSE bug 985665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8932">SUSE bug 985665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8932">SUSE bug 985665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8932">SUSE bug 985665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8932">SUSE bug 985665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8932">SUSE bug 985665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8932">SUSE bug 985665</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8933</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8933" source="CVE"/>
    <description>
    Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8933.html">CVE-2015-8933</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8933">SUSE bug 985688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8933">SUSE bug 985688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8933">SUSE bug 985688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8933">SUSE bug 985688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8933">SUSE bug 985688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8933">SUSE bug 985688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8933">SUSE bug 985688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8933">SUSE bug 985688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8933">SUSE bug 985688</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8934</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8934" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8934" source="CVE"/>
    <description>
    The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8934.html">CVE-2015-8934</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8934">SUSE bug 985673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8934">SUSE bug 985673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8934">SUSE bug 985673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8934">SUSE bug 985673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8934">SUSE bug 985673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8934">SUSE bug 985673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8934">SUSE bug 985673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8934">SUSE bug 985673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8934">SUSE bug 985673</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8935</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8935" source="CVE"/>
    <description>
    The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8935.html">CVE-2015-8935</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8935">SUSE bug 986004</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8936</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8936" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8936" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in squidGuard.cgi in squidGuard before 1.5 allows remote attackers to inject arbitrary web script or HTML via a blocked site link.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8936.html">CVE-2015-8936</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8936">SUSE bug 985612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8936">SUSE bug 985612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8936">SUSE bug 985612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8936">SUSE bug 985612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8936">SUSE bug 985612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8936">SUSE bug 985612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8936">SUSE bug 985612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8936">SUSE bug 1040287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8936">SUSE bug 985612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8936">SUSE bug 985612</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140362" comment="squidGuard-1.4-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153256" comment="squidGuard is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8947</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8947" source="CVE"/>
    <description>
    hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8947.html">CVE-2015-8947</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8947">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8947">SUSE bug 989564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8947">SUSE bug 989564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8947">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8947">SUSE bug 989564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8947">SUSE bug 989564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8947">SUSE bug 989564</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164015" comment="libreoffice-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164016" comment="libreoffice-base-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164017" comment="libreoffice-base-drivers-mysql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164018" comment="libreoffice-base-drivers-postgresql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153330" comment="libreoffice-base-drivers-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164019" comment="libreoffice-branding-upstream-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164020" comment="libreoffice-calc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164021" comment="libreoffice-calc-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164022" comment="libreoffice-draw-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164023" comment="libreoffice-filters-optional-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164024" comment="libreoffice-gdb-pretty-printers-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153331" comment="libreoffice-gdb-pretty-printers is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164025" comment="libreoffice-glade-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153332" comment="libreoffice-glade is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164026" comment="libreoffice-gnome-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164027" comment="libreoffice-gtk3-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164028" comment="libreoffice-icon-theme-breeze-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164029" comment="libreoffice-icon-theme-galaxy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164030" comment="libreoffice-icon-theme-hicontrast-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164031" comment="libreoffice-icon-theme-oxygen-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164032" comment="libreoffice-icon-theme-sifr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164033" comment="libreoffice-icon-theme-tango-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164034" comment="libreoffice-impress-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164035" comment="libreoffice-kde4-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164036" comment="libreoffice-l10n-af-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153334" comment="libreoffice-l10n-af is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164037" comment="libreoffice-l10n-ar-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164038" comment="libreoffice-l10n-as-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153336" comment="libreoffice-l10n-as is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164039" comment="libreoffice-l10n-bg-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164040" comment="libreoffice-l10n-bn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153338" comment="libreoffice-l10n-bn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164041" comment="libreoffice-l10n-br-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153339" comment="libreoffice-l10n-br is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164042" comment="libreoffice-l10n-ca-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164043" comment="libreoffice-l10n-cs-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164044" comment="libreoffice-l10n-cy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153341" comment="libreoffice-l10n-cy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164045" comment="libreoffice-l10n-da-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164046" comment="libreoffice-l10n-de-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164047" comment="libreoffice-l10n-dz-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153342" comment="libreoffice-l10n-dz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164048" comment="libreoffice-l10n-el-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164049" comment="libreoffice-l10n-en-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164050" comment="libreoffice-l10n-es-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164051" comment="libreoffice-l10n-et-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164052" comment="libreoffice-l10n-eu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153344" comment="libreoffice-l10n-eu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164053" comment="libreoffice-l10n-fa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164054" comment="libreoffice-l10n-fi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164055" comment="libreoffice-l10n-fr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164056" comment="libreoffice-l10n-ga-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153347" comment="libreoffice-l10n-ga is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164057" comment="libreoffice-l10n-gl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153348" comment="libreoffice-l10n-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164058" comment="libreoffice-l10n-gu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153349" comment="libreoffice-l10n-gu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164059" comment="libreoffice-l10n-he-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153350" comment="libreoffice-l10n-he is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164060" comment="libreoffice-l10n-hi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153351" comment="libreoffice-l10n-hi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164061" comment="libreoffice-l10n-hr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153352" comment="libreoffice-l10n-hr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164062" comment="libreoffice-l10n-hu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164063" comment="libreoffice-l10n-it-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164064" comment="libreoffice-l10n-ja-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164065" comment="libreoffice-l10n-kk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153353" comment="libreoffice-l10n-kk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164066" comment="libreoffice-l10n-kn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153354" comment="libreoffice-l10n-kn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164067" comment="libreoffice-l10n-ko-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164068" comment="libreoffice-l10n-lt-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164069" comment="libreoffice-l10n-lv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153357" comment="libreoffice-l10n-lv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164070" comment="libreoffice-l10n-mai-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153358" comment="libreoffice-l10n-mai is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164071" comment="libreoffice-l10n-ml-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153359" comment="libreoffice-l10n-ml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164072" comment="libreoffice-l10n-mr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153360" comment="libreoffice-l10n-mr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164073" comment="libreoffice-l10n-nb-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164074" comment="libreoffice-l10n-nl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164075" comment="libreoffice-l10n-nn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153363" comment="libreoffice-l10n-nn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164076" comment="libreoffice-l10n-nr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153364" comment="libreoffice-l10n-nr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164077" comment="libreoffice-l10n-nso-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153365" comment="libreoffice-l10n-nso is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164078" comment="libreoffice-l10n-or-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153366" comment="libreoffice-l10n-or is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164079" comment="libreoffice-l10n-pa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153367" comment="libreoffice-l10n-pa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164080" comment="libreoffice-l10n-pl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164081" comment="libreoffice-l10n-pt_BR-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164082" comment="libreoffice-l10n-pt_PT-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158759" comment="libreoffice-l10n-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164083" comment="libreoffice-l10n-ro-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153370" comment="libreoffice-l10n-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164084" comment="libreoffice-l10n-ru-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164085" comment="libreoffice-l10n-si-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153371" comment="libreoffice-l10n-si is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164086" comment="libreoffice-l10n-sk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164087" comment="libreoffice-l10n-sl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164088" comment="libreoffice-l10n-sr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153374" comment="libreoffice-l10n-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164089" comment="libreoffice-l10n-ss-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153375" comment="libreoffice-l10n-ss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164090" comment="libreoffice-l10n-st-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153376" comment="libreoffice-l10n-st is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164091" comment="libreoffice-l10n-sv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164092" comment="libreoffice-l10n-ta-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153378" comment="libreoffice-l10n-ta is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164093" comment="libreoffice-l10n-te-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153379" comment="libreoffice-l10n-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164094" comment="libreoffice-l10n-th-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153380" comment="libreoffice-l10n-th is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164095" comment="libreoffice-l10n-tn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153381" comment="libreoffice-l10n-tn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164096" comment="libreoffice-l10n-tr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153382" comment="libreoffice-l10n-tr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164097" comment="libreoffice-l10n-ts-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153383" comment="libreoffice-l10n-ts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164098" comment="libreoffice-l10n-uk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164099" comment="libreoffice-l10n-ve-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153385" comment="libreoffice-l10n-ve is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164100" comment="libreoffice-l10n-xh-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153386" comment="libreoffice-l10n-xh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164101" comment="libreoffice-l10n-zh_CN-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164102" comment="libreoffice-l10n-zh_TW-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164103" comment="libreoffice-l10n-zu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153389" comment="libreoffice-l10n-zu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164104" comment="libreoffice-mailmerge-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164105" comment="libreoffice-math-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164106" comment="libreoffice-officebean-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153390" comment="libreoffice-officebean is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164107" comment="libreoffice-pyuno-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164108" comment="libreoffice-sdk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153391" comment="libreoffice-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164109" comment="libreoffice-sdk-doc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153392" comment="libreoffice-sdk-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164110" comment="libreoffice-writer-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164111" comment="libreoffice-writer-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164112" comment="libreofficekit-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164113" comment="libreofficekit-devel-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153394" comment="libreofficekit-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8948</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8948" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8948" source="CVE"/>
    <description>
    idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8948.html">CVE-2015-8948</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 1014473</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 1014473</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 1014473</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8948">SUSE bug 990189</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139877" comment="libidn-devel-1.28-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152666" comment="libidn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139878" comment="libidn11-1.28-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152668" comment="libidn11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8957</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8957" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8957" source="CVE"/>
    <description>
    Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application crash) via a crafted SUN file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8957.html">CVE-2015-8957</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8957">SUSE bug 1000690</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8958</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8958" source="CVE"/>
    <description>
    coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted SUN file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8958.html">CVE-2015-8958</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1000691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8958">SUSE bug 1028079</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8959</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8959" source="CVE"/>
    <description>
    coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (CPU consumption) via a crafted DDS file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8959.html">CVE-2015-8959</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8959">SUSE bug 1000713</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8959">SUSE bug 1000713</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8959">SUSE bug 1000713</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8959">SUSE bug 1000713</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8959">SUSE bug 1000713</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8959">SUSE bug 1074610</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8964</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8964" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8964" source="CVE"/>
    <description>
    The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5 allows local users to obtain sensitive information from kernel memory by reading a tty data structure.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8964.html">CVE-2015-8964</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8964">SUSE bug 1010507</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8972</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8972" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8972" source="CVE"/>
    <description>
    Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8972.html">CVE-2015-8972</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8972">SUSE bug 1010143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8972">SUSE bug 1010143</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135936" comment="gnuchess-6.2.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153265" comment="gnuchess is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8980</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8980" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8980" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8980.html">CVE-2015-8980</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8980">SUSE bug 1020489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8980">SUSE bug 1021597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8980">SUSE bug 1020489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8980">SUSE bug 1021597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148040" comment="phpMyAdmin-4.4.15.10-31.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153097" comment="phpMyAdmin is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20158994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-8994</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-8994" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8994" source="CVE"/>
    <description>
    An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache enabled. With 5.x after 5.6.28 or 7.x after 7.0.13, the issue is resolved in a non-default configuration with the opcache.validate_permission=1 setting. The vulnerability details are as follows. In PHP SAPIs where PHP interpreters share a common parent process, Zend OpCache creates a shared memory object owned by the common parent during initialization. Child PHP processes inherit the SHM descriptor, using it to cache and retrieve compiled script bytecode ("opcode" in PHP jargon). Cache keys vary depending on configuration, but filename is a central key component, and compiled opcode can generally be run if a script's filename is known or can be guessed. Many common shared-hosting configurations change EUID in child processes to enforce privilege separation among hosted users (for example using mod_ruid2 for the Apache HTTP Server, or php-fpm user settings). In these scenarios, the default Zend OpCache behavior defeats script file permissions by sharing a single SHM cache among all child PHP processes. PHP scripts often contain sensitive information: Think of CMS configurations where reading or running another user's script usually means gaining privileges to the CMS database.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-8994.html">CVE-2015-8994</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-8994">SUSE bug 1027210</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150331" comment="apache2-mod_php5-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150944" comment="apache2-mod_php7-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150332" comment="php5-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150333" comment="php5-bcmath-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150334" comment="php5-bz2-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150335" comment="php5-calendar-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150336" comment="php5-ctype-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150337" comment="php5-curl-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150338" comment="php5-dba-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150339" comment="php5-devel-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150340" comment="php5-dom-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150341" comment="php5-enchant-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150342" comment="php5-exif-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150343" comment="php5-fastcgi-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150344" comment="php5-fileinfo-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150345" comment="php5-firebird-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150346" comment="php5-fpm-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150347" comment="php5-ftp-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150348" comment="php5-gd-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150349" comment="php5-gettext-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150350" comment="php5-gmp-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150351" comment="php5-iconv-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150352" comment="php5-imap-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150353" comment="php5-intl-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150354" comment="php5-json-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150355" comment="php5-ldap-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150356" comment="php5-mbstring-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150357" comment="php5-mcrypt-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150358" comment="php5-mssql-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150359" comment="php5-mysql-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150360" comment="php5-odbc-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150361" comment="php5-opcache-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150362" comment="php5-openssl-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150363" comment="php5-pcntl-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150364" comment="php5-pdo-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150365" comment="php5-pear-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150366" comment="php5-pgsql-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150367" comment="php5-phar-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150368" comment="php5-posix-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150369" comment="php5-pspell-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150370" comment="php5-readline-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150371" comment="php5-shmop-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150372" comment="php5-snmp-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150373" comment="php5-soap-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150374" comment="php5-sockets-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150375" comment="php5-sqlite-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150376" comment="php5-suhosin-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150377" comment="php5-sysvmsg-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150378" comment="php5-sysvsem-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150379" comment="php5-sysvshm-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150380" comment="php5-tidy-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150381" comment="php5-tokenizer-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150382" comment="php5-wddx-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150383" comment="php5-xmlreader-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150384" comment="php5-xmlrpc-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150385" comment="php5-xmlwriter-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150386" comment="php5-xsl-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150387" comment="php5-zip-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150388" comment="php5-zlib-5.5.14-77.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150945" comment="php7-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150946" comment="php7-bcmath-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150947" comment="php7-bz2-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150948" comment="php7-calendar-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150949" comment="php7-ctype-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150950" comment="php7-curl-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150951" comment="php7-dba-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150952" comment="php7-devel-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150953" comment="php7-dom-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150954" comment="php7-enchant-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150955" comment="php7-exif-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150956" comment="php7-fastcgi-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150957" comment="php7-fileinfo-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150958" comment="php7-firebird-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150959" comment="php7-fpm-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150960" comment="php7-ftp-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150961" comment="php7-gd-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150962" comment="php7-gettext-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150963" comment="php7-gmp-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150964" comment="php7-iconv-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150965" comment="php7-imap-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150966" comment="php7-intl-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150967" comment="php7-json-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150968" comment="php7-ldap-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150969" comment="php7-mbstring-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150970" comment="php7-mcrypt-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150971" comment="php7-mysql-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150972" comment="php7-odbc-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150973" comment="php7-opcache-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150974" comment="php7-openssl-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150975" comment="php7-pcntl-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150976" comment="php7-pdo-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150977" comment="php7-pear-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150978" comment="php7-pear-Archive_Tar-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150979" comment="php7-pgsql-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150980" comment="php7-phar-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150981" comment="php7-posix-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150982" comment="php7-pspell-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150983" comment="php7-readline-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150984" comment="php7-shmop-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150985" comment="php7-snmp-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150986" comment="php7-soap-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150987" comment="php7-sockets-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150988" comment="php7-sqlite-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150989" comment="php7-sysvmsg-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150990" comment="php7-sysvsem-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150991" comment="php7-sysvshm-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150992" comment="php7-tidy-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150993" comment="php7-tokenizer-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150994" comment="php7-wddx-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150995" comment="php7-xmlreader-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150996" comment="php7-xmlrpc-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150997" comment="php7-xmlwriter-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150998" comment="php7-xsl-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150999" comment="php7-zip-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009151000" comment="php7-zlib-7.0.7-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20159019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2015-9019</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2015-9019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9019" source="CVE"/>
    <description>
    In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2015-9019.html">CVE-2015-9019</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2015-9019">SUSE bug 934119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155736" comment="libxslt-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155743" comment="libxslt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155737" comment="libxslt-devel-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155744" comment="libxslt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155738" comment="libxslt-devel-32bit-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155745" comment="libxslt-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155739" comment="libxslt-python-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155746" comment="libxslt-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155740" comment="libxslt-tools-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155741" comment="libxslt1-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155742" comment="libxslt1-32bit-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155749" comment="libxslt1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0402</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0402" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0402" source="CVE"/>
    <description>
    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0402.html">CVE-2016-0402</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0402">SUSE bug 962743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0402">SUSE bug 963937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0402">SUSE bug 960402</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0448</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0448" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0448" source="CVE"/>
    <description>
    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0448.html">CVE-2016-0448</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0448">SUSE bug 962743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0448">SUSE bug 963937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0448">SUSE bug 960402</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0466</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0466" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0466" source="CVE"/>
    <description>
    Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0466.html">CVE-2016-0466</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0466">SUSE bug 962743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0466">SUSE bug 963937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0466">SUSE bug 960402</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0475</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0475" source="CVE"/>
    <description>
    Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0475.html">CVE-2016-0475</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0475">SUSE bug 962743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0475">SUSE bug 963937</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0483" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a heap-based buffer overflow in the readImage function, which allows remote attackers to execute arbitrary code via crafted image data.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0483.html">CVE-2016-0483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0483">SUSE bug 962743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0483">SUSE bug 963937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0483">SUSE bug 960402</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0494</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494" source="CVE"/>
    <description>
    Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0494.html">CVE-2016-0494</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0494">SUSE bug 962743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0494">SUSE bug 963937</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0505</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0505" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0505.html">CVE-2016-0505</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 980904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0505">SUSE bug 962931</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0546</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0546" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0546.html">CVE-2016-0546</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 980904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0546">SUSE bug 962817</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0596</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0596" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0596" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0596.html">CVE-2016-0596</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 980904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0596">SUSE bug 962936</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0597</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0597" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0597.html">CVE-2016-0597</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 980904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0597">SUSE bug 962938</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0598</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0598" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0598" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0598.html">CVE-2016-0598</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 980904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0598">SUSE bug 962942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0600" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0600.html">CVE-2016-0600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 980904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0600">SUSE bug 962943</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160606" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0606</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0606" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0606" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrity via unknown vectors related to encryption.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0606.html">CVE-2016-0606</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 980904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0606">SUSE bug 962947</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0608</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0608" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0608" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to UDF.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0608.html">CVE-2016-0608</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 980904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0608">SUSE bug 962948</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0609</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0609" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0609" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to privileges.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0609.html">CVE-2016-0609</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 980904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0609">SUSE bug 962952</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0616</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0616" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0616" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0616.html">CVE-2016-0616</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962934</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962935</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962949</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 980904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0616">SUSE bug 962941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0617</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0617" source="CVE"/>
    <description>
    Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0617.html">CVE-2016-0617</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0617">SUSE bug 965794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0617">SUSE bug 965794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0617">SUSE bug 965794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0617">SUSE bug 965794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0617">SUSE bug 965794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0617">SUSE bug 965794</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0636</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0636" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Hotspot sub-component.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0636.html">CVE-2016-0636</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 979252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0636">SUSE bug 972468</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0640</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0640" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0640" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0640.html">CVE-2016-0640</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0640">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0640">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0640">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0640">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0640">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0640">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0640">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0641</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0641" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect confidentiality and availability via vectors related to MyISAM.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0641.html">CVE-2016-0641</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0641">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0641">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0641">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0641">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0641">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0641">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0641">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0642</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0642" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0642.html">CVE-2016-0642</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0642">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0642">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0642">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0642">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0642">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0642">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0642">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0643</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0643" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0643" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect confidentiality via vectors related to DML.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0643.html">CVE-2016-0643</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0643">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0643">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0643">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0643">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0643">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0643">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0643">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0644</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0644" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0644" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DDL.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0644.html">CVE-2016-0644</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0644">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0644">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0644">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0644">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0644">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0644">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0644">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0646</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0646" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0646" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0646.html">CVE-2016-0646</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0646">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0646">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0646">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0646">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0646">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0646">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0646">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0647</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0647" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0647" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to FTS.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0647.html">CVE-2016-0647</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0647">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0647">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0647">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0647">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0647">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0647">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0647">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0648</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0648" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0648" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to PS.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0648.html">CVE-2016-0648</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0648">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0648">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0648">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0648">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0648">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0648">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0648">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0649</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0649" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0649" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to PS.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0649.html">CVE-2016-0649</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0649">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0649">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0649">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0649">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0649">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0649">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0649">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0650</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0650" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0650" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to Replication.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0650.html">CVE-2016-0650</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0650">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0650">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0650">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0650">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0650">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0650">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0650">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0651</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0651" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0651" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0651.html">CVE-2016-0651</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0651">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0651">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0651">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0651">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0651">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0651">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0651">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0655</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0655" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0655" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0655.html">CVE-2016-0655</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0655">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0655">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0655">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0655">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0655">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0655">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0655">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0666</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0666" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0666" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to Security: Privileges.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0666.html">CVE-2016-0666</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0666">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0666">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0666">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0666">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0666">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0666">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0666">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0668</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0668" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0668" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0668.html">CVE-2016-0668</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0668">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0668">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0668">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0668">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0668">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0668">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0668">SUSE bug 980904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0678</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0678" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0678" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.18 allows local users to affect confidentiality, integrity, and availability via vectors related to Core.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0678.html">CVE-2016-0678</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0678">SUSE bug 976636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0678">SUSE bug 976636</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140392" comment="virtualbox-guest-kmp-default-5.1.4_k4.4.27_2-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140393" comment="virtualbox-guest-tools-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140394" comment="virtualbox-guest-x11-5.1.4-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0686</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0686" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0686.html">CVE-2016-0686</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0686">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0686">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0686">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0686">SUSE bug 979252</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0687</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0687" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0687" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0687.html">CVE-2016-0687</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0687">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0687">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0687">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0687">SUSE bug 979252</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0695</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0695" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0695" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0695.html">CVE-2016-0695</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0695">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0695">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0695">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0695">SUSE bug 979252</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0702</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0702" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" source="CVE"/>
    <description>
    The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a "CacheBleed" attack.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0702.html">CVE-2016-0702</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 971238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 971238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 971238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 971238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 990370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 1007806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 1007806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 1007806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0702">SUSE bug 968050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155255" comment="libcrypto41-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155219" comment="libcrypto41 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155256" comment="libcrypto41-32bit-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155220" comment="libcrypto41-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155257" comment="libressl-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152706" comment="libressl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155258" comment="libressl-devel-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152707" comment="libressl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155259" comment="libressl-devel-32bit-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152708" comment="libressl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155260" comment="libressl-devel-doc-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152709" comment="libressl-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155261" comment="libssl43-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155221" comment="libssl43 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155262" comment="libssl43-32bit-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155222" comment="libssl43-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155263" comment="libtls15-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155223" comment="libtls15 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155264" comment="libtls15-32bit-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155224" comment="libtls15-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0705</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0705" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" source="CVE"/>
    <description>
    Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0705.html">CVE-2016-0705</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 971238</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0705">SUSE bug 968047</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0706</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0706" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0706" source="CVE"/>
    <description>
    Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0706.html">CVE-2016-0706</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0706">SUSE bug 967815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0706">SUSE bug 967815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0706">SUSE bug 967815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0706">SUSE bug 967815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0706">SUSE bug 967815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0706">SUSE bug 967815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0706">SUSE bug 988489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0706">SUSE bug 967815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0706">SUSE bug 967815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0706">SUSE bug 967815</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140375" comment="tomcat-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140376" comment="tomcat-admin-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140377" comment="tomcat-el-3_0-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140378" comment="tomcat-jsp-2_3-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140379" comment="tomcat-lib-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140380" comment="tomcat-servlet-3_1-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140381" comment="tomcat-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0714</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0714" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0714" source="CVE"/>
    <description>
    The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0714.html">CVE-2016-0714</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0714">SUSE bug 967964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0714">SUSE bug 967964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0714">SUSE bug 967964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0714">SUSE bug 967964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0714">SUSE bug 967964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140375" comment="tomcat-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140376" comment="tomcat-admin-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140377" comment="tomcat-el-3_0-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140378" comment="tomcat-jsp-2_3-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140379" comment="tomcat-lib-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140380" comment="tomcat-servlet-3_1-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140381" comment="tomcat-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0718</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0718" source="CVE"/>
    <description>
    Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0718.html">CVE-2016-0718</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 979441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0718">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139435" comment="expat-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139436" comment="libexpat-devel-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139437" comment="libexpat1-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139438" comment="libexpat1-32bit-2.1.0-17.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0723</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0723" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0723" source="CVE"/>
    <description>
    Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0723.html">CVE-2016-0723</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0723">SUSE bug 961500</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0728</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0728" source="CVE"/>
    <description>
    The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0728.html">CVE-2016-0728</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 963994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 963994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 963994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 963994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 923755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 963994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0728">SUSE bug 962075</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0729</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0729" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0729" source="CVE"/>
    <description>
    Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0729.html">CVE-2016-0729</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0729">SUSE bug 966822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0729">SUSE bug 966822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0729">SUSE bug 966822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0729">SUSE bug 966822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0729">SUSE bug 966822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0729">SUSE bug 966822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0729">SUSE bug 966822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0729">SUSE bug 966822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0729">SUSE bug 966822</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140229" comment="libxerces-c-3_1-3.1.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151260" comment="libxerces-c-3_1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0736</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0736" source="CVE"/>
    <description>
    In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0736.html">CVE-2016-0736</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1033513</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0736">SUSE bug 1016712</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150428" comment="apache2-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150429" comment="apache2-devel-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150430" comment="apache2-doc-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150431" comment="apache2-event-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153274" comment="apache2-event is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150432" comment="apache2-example-pages-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150433" comment="apache2-prefork-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150434" comment="apache2-utils-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150435" comment="apache2-worker-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153275" comment="apache2-worker is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0739</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0739" source="CVE"/>
    <description>
    libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0739.html">CVE-2016-0739</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 965875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0739">SUSE bug 967026</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140104" comment="libssh-devel-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151771" comment="libssh-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140105" comment="libssh4-0.6.3-11.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151772" comment="libssh4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0740</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0740" source="CVE"/>
    <description>
    Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0740.html">CVE-2016-0740</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0740">SUSE bug 965579</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140309" comment="python-Pillow-2.9.0-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152140" comment="python-Pillow is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140310" comment="python-Pillow-tk-2.9.0-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153279" comment="python-Pillow-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0749</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0749" source="CVE"/>
    <description>
    The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0749.html">CVE-2016-0749</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0749">SUSE bug 982385</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140097" comment="libspice-server1-0.12.7-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0755</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0755" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0755" source="CVE"/>
    <description>
    The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0755.html">CVE-2016-0755</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0755">SUSE bug 962983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0755">SUSE bug 962983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0755">SUSE bug 962983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0755">SUSE bug 962983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0755">SUSE bug 962983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0755">SUSE bug 962983</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0758</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0758" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0758" source="CVE"/>
    <description>
    Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0758.html">CVE-2016-0758</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 980856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 980856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 980856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 980856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 980856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 980856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 980856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 980856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 980856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 980856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0758">SUSE bug 979867</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0762</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0762" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0762" source="CVE"/>
    <description>
    The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default configuration includes the LockOutRealm which makes exploitation of this vulnerability harder.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0762.html">CVE-2016-0762</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0762">SUSE bug 1007854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0762">SUSE bug 1007854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0762">SUSE bug 1007854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0762">SUSE bug 1007854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0762">SUSE bug 1007854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142899" comment="apache-commons-dbcp-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153286" comment="apache-commons-dbcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142900" comment="apache-commons-dbcp-javadoc-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153287" comment="apache-commons-dbcp-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142901" comment="apache-commons-pool2-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153288" comment="apache-commons-pool2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142902" comment="apache-commons-pool2-javadoc-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153289" comment="apache-commons-pool2-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142923" comment="tomcat-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142924" comment="tomcat-admin-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142925" comment="tomcat-docs-webapp-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142926" comment="tomcat-el-3_0-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142927" comment="tomcat-embed-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142928" comment="tomcat-javadoc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142929" comment="tomcat-jsp-2_3-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142930" comment="tomcat-jsvc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142931" comment="tomcat-lib-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142932" comment="tomcat-servlet-3_1-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142933" comment="tomcat-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160763" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0763</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0763" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0763" source="CVE"/>
    <description>
    The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0763.html">CVE-2016-0763</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0763">SUSE bug 967966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0763">SUSE bug 967966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0763">SUSE bug 967966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0763">SUSE bug 967966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0763">SUSE bug 967966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0763">SUSE bug 967966</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140375" comment="tomcat-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140376" comment="tomcat-admin-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140377" comment="tomcat-el-3_0-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140378" comment="tomcat-jsp-2_3-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140379" comment="tomcat-lib-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140380" comment="tomcat-servlet-3_1-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140381" comment="tomcat-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0764</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0764" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0764" source="CVE"/>
    <description>
    Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0764.html">CVE-2016-0764</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0764">SUSE bug 974072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0764">SUSE bug 974072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0764">SUSE bug 974072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0764">SUSE bug 974072</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139178" comment="NetworkManager-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152685" comment="NetworkManager is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139179" comment="NetworkManager-devel-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152686" comment="NetworkManager-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139180" comment="NetworkManager-lang-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152687" comment="NetworkManager-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139181" comment="libnm-glib-vpn1-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152688" comment="libnm-glib-vpn1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139182" comment="libnm-glib4-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152689" comment="libnm-glib4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139183" comment="libnm-util2-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152690" comment="libnm-util2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139184" comment="libnm0-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152691" comment="libnm0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139185" comment="typelib-1_0-NM-1_0-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152692" comment="typelib-1_0-NM-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139186" comment="typelib-1_0-NMClient-1_0-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152693" comment="typelib-1_0-NMClient-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139187" comment="typelib-1_0-NetworkManager-1_0-1.0.12-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152694" comment="typelib-1_0-NetworkManager-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0766</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0766" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0766" source="CVE"/>
    <description>
    PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0766.html">CVE-2016-0766</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0766">SUSE bug 978323</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0771</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0771" source="CVE"/>
    <description>
    The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0771.html">CVE-2016-0771</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0771">SUSE bug 968223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0771">SUSE bug 968223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0771">SUSE bug 968223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0771">SUSE bug 968223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0771">SUSE bug 968223</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0772</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0772" source="CVE"/>
    <description>
    The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0772.html">CVE-2016-0772</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0772">SUSE bug 984751</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140306" comment="python-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140307" comment="python-curses-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151914" comment="python-curses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140311" comment="python-doc-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153293" comment="python-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140308" comment="python-gdbm-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151915" comment="python-gdbm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140317" comment="python3-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140318" comment="python3-curses-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140319" comment="python3-dbm-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140328" comment="python3-doc-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152174" comment="python3-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140320" comment="python3-tk-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151919" comment="python3-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0773</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0773" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0773" source="CVE"/>
    <description>
    PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0773.html">CVE-2016-0773</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 966436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 978323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 983246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 983246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 983246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 983246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 983246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 983246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0773">SUSE bug 986409</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140301" comment="postgresql93-docs-9.3.11-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0775</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0775" source="CVE"/>
    <description>
    Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0775.html">CVE-2016-0775</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0775">SUSE bug 965582</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140309" comment="python-Pillow-2.9.0-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152140" comment="python-Pillow is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140310" comment="python-Pillow-tk-2.9.0-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153279" comment="python-Pillow-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0777</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0777" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0777" source="CVE"/>
    <description>
    The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0777.html">CVE-2016-0777</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0777">SUSE bug 961642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0777">SUSE bug 961642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0777">SUSE bug 961642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0777">SUSE bug 961642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0777">SUSE bug 961642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0777">SUSE bug 961642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0777">SUSE bug 961642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0777">SUSE bug 961642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0777">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0777">SUSE bug 1087412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0777">SUSE bug 1087412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0778</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0778" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0778" source="CVE"/>
    <description>
    The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0778.html">CVE-2016-0778</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0778">SUSE bug 961645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0778">SUSE bug 961645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0778">SUSE bug 961645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0778">SUSE bug 961645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0778">SUSE bug 961645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0778">SUSE bug 961645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0778">SUSE bug 961645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0778">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0778">SUSE bug 1087412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0778">SUSE bug 1087412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0787</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0787" source="CVE"/>
    <description>
    The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0787.html">CVE-2016-0787</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 968174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 968174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 968174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 968174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 974691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0787">SUSE bug 967026</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009124591" comment="libssh2-1-1.4.3-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152658" comment="libssh2-1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0794</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0794" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0794" source="CVE"/>
    <description>
    The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LotusWordPro (lwp) document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0794.html">CVE-2016-0794</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0794">SUSE bug 967014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0794">SUSE bug 967014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0794">SUSE bug 967014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0794">SUSE bug 967015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0794">SUSE bug 967014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0794">SUSE bug 967014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0794">SUSE bug 967014</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0795</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0795" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0795" source="CVE"/>
    <description>
    LibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LwpTocSuperLayout record in a LotusWordPro (lwp) document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0795.html">CVE-2016-0795</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0795">SUSE bug 967015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0795">SUSE bug 967015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0795">SUSE bug 967014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0795">SUSE bug 967015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0795">SUSE bug 967015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0795">SUSE bug 967015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0795">SUSE bug 967015</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0797</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0797" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" source="CVE"/>
    <description>
    Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0797.html">CVE-2016-0797</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 968048</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0797">SUSE bug 990370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0798</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" source="CVE"/>
    <description>
    Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0798.html">CVE-2016-0798</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0798">SUSE bug 968265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0798">SUSE bug 968265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0798">SUSE bug 968265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0798">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0798">SUSE bug 968265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0798">SUSE bug 968265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0798">SUSE bug 968265</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0799</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" source="CVE"/>
    <description>
    The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0799.html">CVE-2016-0799</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 969517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 968374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 989345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 990370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0799">SUSE bug 991722</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20160800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-0800</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-0800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0800" source="CVE"/>
    <description>
    The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-0800.html">CVE-2016-0800</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 961377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 979060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 979060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 979060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 979060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-0800">SUSE bug 968888</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161000110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1000110</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1000110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000110" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1000110.html">CVE-2016-1000110</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1000110">SUSE bug 989523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1000110">SUSE bug 988484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1000110">SUSE bug 989523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1000110">SUSE bug 989523</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140317" comment="python3-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140318" comment="python3-curses-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140319" comment="python3-dbm-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140328" comment="python3-doc-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152174" comment="python3-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140320" comment="python3-tk-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151919" comment="python3-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10002</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10002" source="CVE"/>
    <description>
    Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10002.html">CVE-2016-10002</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10002">SUSE bug 1016168</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147322" comment="squid-3.5.21-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10003</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10003" source="CVE"/>
    <description>
    Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10003.html">CVE-2016-10003</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10003">SUSE bug 1016169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10003">SUSE bug 1016169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10003">SUSE bug 1016169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10003">SUSE bug 1016169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10003">SUSE bug 1016169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10003">SUSE bug 1016169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10003">SUSE bug 1016169</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147322" comment="squid-3.5.21-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10009</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009" source="CVE"/>
    <description>
    Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10009.html">CVE-2016-10009</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1087412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10009">SUSE bug 1087412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147999" comment="openssh-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148000" comment="openssh-askpass-gnome-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153167" comment="openssh-askpass-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148001" comment="openssh-cavs-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153168" comment="openssh-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148002" comment="openssh-fips-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153169" comment="openssh-fips is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148003" comment="openssh-helpers-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10010</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10010" source="CVE"/>
    <description>
    sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10010.html">CVE-2016-10010</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10010">SUSE bug 1016368</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147999" comment="openssh-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148000" comment="openssh-askpass-gnome-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153167" comment="openssh-askpass-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148001" comment="openssh-cavs-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153168" comment="openssh-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148002" comment="openssh-fips-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153169" comment="openssh-fips is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148003" comment="openssh-helpers-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10011</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10011" source="CVE"/>
    <description>
    authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10011.html">CVE-2016-10011</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1087412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10011">SUSE bug 1087412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147999" comment="openssh-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148000" comment="openssh-askpass-gnome-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153167" comment="openssh-askpass-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148001" comment="openssh-cavs-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153168" comment="openssh-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148002" comment="openssh-fips-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153169" comment="openssh-fips is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148003" comment="openssh-helpers-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10012</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10012" source="CVE"/>
    <description>
    The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10012.html">CVE-2016-10012</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1006166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1034031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1034031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1034031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1026634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1035742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1017870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1035742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1035742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1073044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1073044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1016370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1021751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10012">SUSE bug 1090629</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147999" comment="openssh-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148000" comment="openssh-askpass-gnome-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153167" comment="openssh-askpass-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148001" comment="openssh-cavs-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153168" comment="openssh-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148002" comment="openssh-fips-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153169" comment="openssh-fips is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148003" comment="openssh-helpers-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10013</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10013" source="CVE"/>
    <description>
    Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10013.html">CVE-2016-10013</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10013">SUSE bug 1016340</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146239" comment="xen-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146240" comment="xen-devel-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146241" comment="xen-doc-html-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146242" comment="xen-libs-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146243" comment="xen-libs-32bit-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146244" comment="xen-tools-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146245" comment="xen-tools-domU-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10024</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10024" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10024" source="CVE"/>
    <description>
    Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10024.html">CVE-2016-10024</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10024">SUSE bug 1014298</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146239" comment="xen-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146240" comment="xen-devel-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146241" comment="xen-doc-html-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146242" comment="xen-libs-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146243" comment="xen-libs-32bit-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146244" comment="xen-tools-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146245" comment="xen-tools-domU-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10025</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10025" source="CVE"/>
    <description>
    VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10025.html">CVE-2016-10025</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10025">SUSE bug 1014300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10025">SUSE bug 1014300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10025">SUSE bug 1014300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10025">SUSE bug 1014300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10025">SUSE bug 1014300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10025">SUSE bug 1014300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10025">SUSE bug 1014300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10025">SUSE bug 1014300</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146239" comment="xen-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146240" comment="xen-devel-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146241" comment="xen-doc-html-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146242" comment="xen-libs-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146243" comment="xen-libs-32bit-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146244" comment="xen-tools-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146245" comment="xen-tools-domU-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10028</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10028" source="CVE"/>
    <description>
    The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10028.html">CVE-2016-10028</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10028">SUSE bug 1017084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10028">SUSE bug 1017085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10028">SUSE bug 1017084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10028">SUSE bug 1017085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10028">SUSE bug 1017084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10028">SUSE bug 1017084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10028">SUSE bug 1017085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10028">SUSE bug 1017085</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10029</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10029" source="CVE"/>
    <description>
    The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout id in a VIRTIO_GPU_CMD_SET_SCANOUT command larger than num_scanouts.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10029.html">CVE-2016-10029</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10029">SUSE bug 1017081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10029">SUSE bug 1017082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10029">SUSE bug 1017081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10029">SUSE bug 1017082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10029">SUSE bug 1017081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10029">SUSE bug 1017081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10029">SUSE bug 1017082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10029">SUSE bug 1017082</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10046</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10046" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10046" source="CVE"/>
    <description>
    Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMagick before 6.9.5-5 allows remote attackers to cause a denial of service (application crash) via a crafted image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10046.html">CVE-2016-10046</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1016742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1016742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10046">SUSE bug 1017308</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10048</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10048" source="CVE"/>
    <description>
    Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10048.html">CVE-2016-10048</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10048">SUSE bug 1017310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10048">SUSE bug 1017310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10048">SUSE bug 1017310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10048">SUSE bug 1017310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10048">SUSE bug 1017310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10048">SUSE bug 1017310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10048">SUSE bug 1017310</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148189" comment="GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148190" comment="GraphicsMagick-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148191" comment="libGraphicsMagick++-Q16-12-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148192" comment="libGraphicsMagick++-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148193" comment="libGraphicsMagick-Q16-3-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148194" comment="libGraphicsMagick3-config-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148195" comment="libGraphicsMagickWand-Q16-2-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148196" comment="perl-GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10049</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10049" source="CVE"/>
    <description>
    Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10049.html">CVE-2016-10049</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10049">SUSE bug 1017311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10049">SUSE bug 1017311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10049">SUSE bug 1017311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10049">SUSE bug 1017311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10049">SUSE bug 1017311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10049">SUSE bug 1017311</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10050</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10050" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10050" source="CVE"/>
    <description>
    Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10050.html">CVE-2016-10050</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10050">SUSE bug 1017312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10050">SUSE bug 1017312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10050">SUSE bug 1017312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10050">SUSE bug 1017312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10050">SUSE bug 1017312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10050">SUSE bug 1017312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10050">SUSE bug 1017312</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148189" comment="GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148190" comment="GraphicsMagick-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148191" comment="libGraphicsMagick++-Q16-12-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148192" comment="libGraphicsMagick++-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148193" comment="libGraphicsMagick-Q16-3-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148194" comment="libGraphicsMagick3-config-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148195" comment="libGraphicsMagickWand-Q16-2-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148196" comment="perl-GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10051</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10051" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10051" source="CVE"/>
    <description>
    Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10051.html">CVE-2016-10051</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10051">SUSE bug 1017313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10051">SUSE bug 1017313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10051">SUSE bug 1017313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10051">SUSE bug 1017313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10051">SUSE bug 1017313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10051">SUSE bug 1017313</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148189" comment="GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148190" comment="GraphicsMagick-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148191" comment="libGraphicsMagick++-Q16-12-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148192" comment="libGraphicsMagick++-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148193" comment="libGraphicsMagick-Q16-3-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148194" comment="libGraphicsMagick3-config-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148195" comment="libGraphicsMagickWand-Q16-2-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148196" comment="perl-GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10052</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10052" source="CVE"/>
    <description>
    Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10052.html">CVE-2016-10052</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10052">SUSE bug 1017314</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10052">SUSE bug 1017314</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10052">SUSE bug 1017314</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10052">SUSE bug 1017314</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10052">SUSE bug 1017314</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10052">SUSE bug 1017314</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148189" comment="GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148190" comment="GraphicsMagick-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148191" comment="libGraphicsMagick++-Q16-12-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148192" comment="libGraphicsMagick++-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148193" comment="libGraphicsMagick-Q16-3-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148194" comment="libGraphicsMagick3-config-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148195" comment="libGraphicsMagickWand-Q16-2-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148196" comment="perl-GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610059" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10059</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10059" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10059" source="CVE"/>
    <description>
    Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service (application crash) or have unspecified other impact via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10059.html">CVE-2016-10059</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10059">SUSE bug 1017318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10059">SUSE bug 1017318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10059">SUSE bug 1017318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10059">SUSE bug 1017318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10059">SUSE bug 1017318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10059">SUSE bug 1017318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10059">SUSE bug 1017318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10059">SUSE bug 1017318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10059">SUSE bug 1017318</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10060</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10060" source="CVE"/>
    <description>
    The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10060.html">CVE-2016-10060</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10060">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10060">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10060">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10060">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10060">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10060">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10060">SUSE bug 1017319</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10061</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10061" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10061" source="CVE"/>
    <description>
    The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (crash) via a crafted image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10061.html">CVE-2016-10061</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10061">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10061">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10061">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10061">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10061">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10061">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10061">SUSE bug 1017319</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10062</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10062" source="CVE"/>
    <description>
    The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10062.html">CVE-2016-10062</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10062">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10062">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10062">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10062">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10062">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10062">SUSE bug 1017319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10062">SUSE bug 1017319</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10063</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10063" source="CVE"/>
    <description>
    Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file, related to extend validity.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10063.html">CVE-2016-10063</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10063">SUSE bug 1017320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10063">SUSE bug 1017320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10063">SUSE bug 1017320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10063">SUSE bug 1017320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10063">SUSE bug 1017320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10063">SUSE bug 1017320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10063">SUSE bug 1016589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10063">SUSE bug 1017320</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10064</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10064" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10064" source="CVE"/>
    <description>
    Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10064.html">CVE-2016-10064</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10064">SUSE bug 1017321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10064">SUSE bug 1017321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10064">SUSE bug 1017321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10064">SUSE bug 1017321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10064">SUSE bug 1017321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10064">SUSE bug 1016590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10064">SUSE bug 1017321</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10065</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10065" source="CVE"/>
    <description>
    The ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10065.html">CVE-2016-10065</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10065">SUSE bug 1017322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10065">SUSE bug 1017322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10065">SUSE bug 1017322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10065">SUSE bug 1017322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10065">SUSE bug 1016591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10065">SUSE bug 1017322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10065">SUSE bug 1017322</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10068</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10068" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10068" source="CVE"/>
    <description>
    The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10068.html">CVE-2016-10068</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10068">SUSE bug 1017324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10068">SUSE bug 1017324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10068">SUSE bug 1017324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10068">SUSE bug 1017324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10068">SUSE bug 1017324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10068">SUSE bug 1017324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10068">SUSE bug 1017324</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148189" comment="GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148190" comment="GraphicsMagick-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148191" comment="libGraphicsMagick++-Q16-12-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148192" comment="libGraphicsMagick++-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148193" comment="libGraphicsMagick-Q16-3-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148194" comment="libGraphicsMagick3-config-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148195" comment="libGraphicsMagickWand-Q16-2-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148196" comment="perl-GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10069</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10069" source="CVE"/>
    <description>
    coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10069.html">CVE-2016-10069</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10069">SUSE bug 1017325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10069">SUSE bug 1017325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10069">SUSE bug 1017325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10069">SUSE bug 1017325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10069">SUSE bug 1017325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10069">SUSE bug 1017325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10069">SUSE bug 1017325</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10070</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10070" source="CVE"/>
    <description>
    Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10070.html">CVE-2016-10070</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10070">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10070">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10070">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10070">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10070">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10070">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10070">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10070">SUSE bug 1017326</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148189" comment="GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148190" comment="GraphicsMagick-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148191" comment="libGraphicsMagick++-Q16-12-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148192" comment="libGraphicsMagick++-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148193" comment="libGraphicsMagick-Q16-3-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148194" comment="libGraphicsMagick3-config-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148195" comment="libGraphicsMagickWand-Q16-2-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148196" comment="perl-GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10071</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10071" source="CVE"/>
    <description>
    coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10071.html">CVE-2016-10071</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10071">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10071">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10071">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10071">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10071">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10071">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10071">SUSE bug 1017326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10071">SUSE bug 1017326</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10081</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10081" source="CVE"/>
    <description>
    /usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10081.html">CVE-2016-10081</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10081">SUSE bug 1017571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10081">SUSE bug 1017571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10081">SUSE bug 1017571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10081">SUSE bug 1017571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10081">SUSE bug 1017571</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162160" comment="shutter-0.93.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162161" comment="shutter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162162" comment="shutter-lang-0.93.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162163" comment="shutter-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10087</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10087" source="CVE"/>
    <description>
    The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10087.html">CVE-2016-10087</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10087">SUSE bug 1017646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10087">SUSE bug 1017646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10087">SUSE bug 1017646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10087">SUSE bug 1017646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10087">SUSE bug 1017646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10087">SUSE bug 1017646</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150688" comment="libpng12-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153098" comment="libpng12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150689" comment="libpng12-0-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151411" comment="libpng12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150690" comment="libpng12-0-32bit-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151412" comment="libpng12-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150691" comment="libpng12-compat-devel-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153099" comment="libpng12-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150692" comment="libpng12-compat-devel-32bit-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153100" comment="libpng12-compat-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150693" comment="libpng12-devel-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151413" comment="libpng12-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150694" comment="libpng12-devel-32bit-1.2.50-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153101" comment="libpng12-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154499" comment="libpng15-1.5.22-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153131" comment="libpng15 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154500" comment="libpng15-15-1.5.22-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153132" comment="libpng15-15 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154501" comment="libpng15-15-32bit-1.5.22-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153133" comment="libpng15-15-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150695" comment="libpng16-1.6.8-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153134" comment="libpng16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150696" comment="libpng16-16-1.6.8-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151414" comment="libpng16-16 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150697" comment="libpng16-16-32bit-1.6.8-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151415" comment="libpng16-16-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150698" comment="libpng16-compat-devel-1.6.8-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151416" comment="libpng16-compat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150699" comment="libpng16-compat-devel-32bit-1.6.8-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153135" comment="libpng16-compat-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150700" comment="libpng16-devel-1.6.8-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151417" comment="libpng16-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150701" comment="libpng16-devel-32bit-1.6.8-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153136" comment="libpng16-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150702" comment="libpng16-tools-1.6.8-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153137" comment="libpng16-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10095</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10095" source="CVE"/>
    <description>
    Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10095.html">CVE-2016-10095</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10095">SUSE bug 1017690</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169689" comment="libtiff-devel-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169670" comment="libtiff-devel-32bit-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169690" comment="libtiff5-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169691" comment="libtiff5-32bit-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169692" comment="tiff-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10109</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10109" source="CVE"/>
    <description>
    Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10109.html">CVE-2016-10109</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10109">SUSE bug 1017902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10109">SUSE bug 1017902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10109">SUSE bug 1017902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10109">SUSE bug 1017902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10109">SUSE bug 1017902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10109">SUSE bug 1017902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10109">SUSE bug 1017902</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147253" comment="libpcsclite1-1.8.17-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151385" comment="libpcsclite1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147254" comment="libpcsclite1-32bit-1.8.17-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153553" comment="libpcsclite1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147255" comment="libpcscspy0-1.8.17-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153554" comment="libpcscspy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147256" comment="libpcscspy0-32bit-1.8.17-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153555" comment="libpcscspy0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147257" comment="pcsc-lite-1.8.17-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151386" comment="pcsc-lite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147258" comment="pcsc-lite-devel-1.8.17-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153556" comment="pcsc-lite-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10128</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10128" source="CVE"/>
    <description>
    Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10128.html">CVE-2016-10128</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10128">SUSE bug 1019036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10128">SUSE bug 1019036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10128">SUSE bug 1019036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10128">SUSE bug 1019036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10128">SUSE bug 1019036</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148269" comment="libgit2-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153557" comment="libgit2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148270" comment="libgit2-24-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154200" comment="libgit2-24 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148537" comment="libgit2-24-32bit-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154201" comment="libgit2-24-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148538" comment="libgit2-devel-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153560" comment="libgit2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10129</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10129" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10129" source="CVE"/>
    <description>
    The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10129.html">CVE-2016-10129</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10129">SUSE bug 1019036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10129">SUSE bug 1019036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10129">SUSE bug 1019036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10129">SUSE bug 1019036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10129">SUSE bug 1019036</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148269" comment="libgit2-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153557" comment="libgit2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148270" comment="libgit2-24-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154200" comment="libgit2-24 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148537" comment="libgit2-24-32bit-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154201" comment="libgit2-24-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148538" comment="libgit2-devel-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153560" comment="libgit2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10130</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10130" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10130" source="CVE"/>
    <description>
    The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10130.html">CVE-2016-10130</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10130">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10130">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10130">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10130">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10130">SUSE bug 1019037</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148269" comment="libgit2-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153557" comment="libgit2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148270" comment="libgit2-24-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154200" comment="libgit2-24 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148537" comment="libgit2-24-32bit-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154201" comment="libgit2-24-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148538" comment="libgit2-devel-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153560" comment="libgit2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10132</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10132" source="CVE"/>
    <description>
    regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to regular expression compilation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10132.html">CVE-2016-10132</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10132">SUSE bug 1019877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10132">SUSE bug 1019877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10132">SUSE bug 1019877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10132">SUSE bug 1019877</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148045" comment="mupdf-1.10a-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148046" comment="mupdf-devel-static-1.10a-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10133</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10133" source="CVE"/>
    <description>
    Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers to have unspecified impact by leveraging an error when dropping extra arguments to lightweight functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10133.html">CVE-2016-10133</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10133">SUSE bug 1019877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10133">SUSE bug 1019877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10133">SUSE bug 1019877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10133">SUSE bug 1019877</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148045" comment="mupdf-1.10a-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148046" comment="mupdf-devel-static-1.10a-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10141</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10141" source="CVE"/>
    <description>
    An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requires a regular expression with nested repetition. A successful exploitation of this issue can lead to code execution or a denial of service (buffer overflow) condition.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10141.html">CVE-2016-10141</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10141">SUSE bug 1019877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10141">SUSE bug 1019877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10141">SUSE bug 1019877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10141">SUSE bug 1019877</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148045" comment="mupdf-1.10a-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148046" comment="mupdf-devel-static-1.10a-6.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10144</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10144" source="CVE"/>
    <description>
    coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10144.html">CVE-2016-10144</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10144">SUSE bug 1020433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10144">SUSE bug 1020433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10144">SUSE bug 1020433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10144">SUSE bug 1020433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10144">SUSE bug 1020433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10144">SUSE bug 1020433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10144">SUSE bug 1020433</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10145</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10145" source="CVE"/>
    <description>
    Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10145.html">CVE-2016-10145</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10145">SUSE bug 1020435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10145">SUSE bug 1020435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10145">SUSE bug 1020435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10145">SUSE bug 1020435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10145">SUSE bug 1020435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10145">SUSE bug 1020435</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10145">SUSE bug 1020435</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10146</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10146" source="CVE"/>
    <description>
    Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10146.html">CVE-2016-10146</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10146">SUSE bug 1020443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10146">SUSE bug 1020443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10146">SUSE bug 1020443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10146">SUSE bug 1020443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10146">SUSE bug 1020443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10146">SUSE bug 1020443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10146">SUSE bug 1020443</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10146">SUSE bug 1020443</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148189" comment="GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148190" comment="GraphicsMagick-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148191" comment="libGraphicsMagick++-Q16-12-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148192" comment="libGraphicsMagick++-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148193" comment="libGraphicsMagick-Q16-3-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148194" comment="libGraphicsMagick3-config-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148195" comment="libGraphicsMagickWand-Q16-2-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148196" comment="perl-GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10155</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10155" source="CVE"/>
    <description>
    Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10155.html">CVE-2016-10155</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1024183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1024183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1024183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1024183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1024183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1024183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1024183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10155">SUSE bug 1021129</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10156</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10156" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10156" source="CVE"/>
    <description>
    A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10156.html">CVE-2016-10156</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10156">SUSE bug 1020601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10156">SUSE bug 1020601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10156">SUSE bug 1020601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10156">SUSE bug 1020601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10156">SUSE bug 1021969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10156">SUSE bug 1086936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10156">SUSE bug 1086936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10156">SUSE bug 1086936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10156">SUSE bug 1086936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10156">SUSE bug 1086936</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147787" comment="libsystemd0-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147788" comment="libsystemd0-32bit-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147789" comment="libsystemd0-mini-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154202" comment="libsystemd0-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147790" comment="libudev-devel-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151690" comment="libudev-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147791" comment="libudev-mini-devel-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152578" comment="libudev-mini-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147792" comment="libudev-mini1-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152579" comment="libudev-mini1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147793" comment="libudev1-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147794" comment="libudev1-32bit-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147795" comment="nss-myhostname-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152580" comment="nss-myhostname is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147796" comment="nss-myhostname-32bit-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152581" comment="nss-myhostname-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147797" comment="nss-mymachines-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154203" comment="nss-mymachines is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147798" comment="systemd-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147799" comment="systemd-32bit-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147800" comment="systemd-bash-completion-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151695" comment="systemd-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147801" comment="systemd-devel-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152582" comment="systemd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147802" comment="systemd-logger-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151696" comment="systemd-logger is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147803" comment="systemd-mini-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152584" comment="systemd-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147804" comment="systemd-mini-bash-completion-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154204" comment="systemd-mini-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147805" comment="systemd-mini-devel-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152585" comment="systemd-mini-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147806" comment="systemd-mini-sysvinit-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152586" comment="systemd-mini-sysvinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147807" comment="systemd-sysvinit-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147808" comment="udev-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147809" comment="udev-mini-228-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152587" comment="udev-mini is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610158" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10158</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10158" source="CVE"/>
    <description>
    The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (application crash) via crafted EXIF data that triggers an attempt to divide the minimum representable negative integer by -1.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10158.html">CVE-2016-10158</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10158">SUSE bug 1022219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10158">SUSE bug 1022219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10158">SUSE bug 1022219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10158">SUSE bug 1022219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10158">SUSE bug 1022219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10158">SUSE bug 1022219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10158">SUSE bug 1022219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10158">SUSE bug 1022219</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610159" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10159</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10159" source="CVE"/>
    <description>
    Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10159.html">CVE-2016-10159</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10159">SUSE bug 1022255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10159">SUSE bug 1022255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10159">SUSE bug 1022255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10159">SUSE bug 1022255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10159">SUSE bug 1022255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10159">SUSE bug 1022255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10159">SUSE bug 1048094</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10160</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10160" source="CVE"/>
    <description>
    Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10160.html">CVE-2016-10160</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10160">SUSE bug 1022257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10160">SUSE bug 1022257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10160">SUSE bug 1022257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10160">SUSE bug 1022257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10160">SUSE bug 1022257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10160">SUSE bug 1022257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10160">SUSE bug 1048094</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10161</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10161" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10161" source="CVE"/>
    <description>
    The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10161.html">CVE-2016-10161</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10161">SUSE bug 1022260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10161">SUSE bug 1022260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10161">SUSE bug 1022260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10161">SUSE bug 1022260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10161">SUSE bug 1022260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10161">SUSE bug 1022260</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10161">SUSE bug 1022260</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610162" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10162</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10162" source="CVE"/>
    <description>
    The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10162.html">CVE-2016-10162</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10162">SUSE bug 1022262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10162">SUSE bug 1022262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10162">SUSE bug 1022262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10162">SUSE bug 1022262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10162">SUSE bug 1022262</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10163</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10163" source="CVE"/>
    <description>
    Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) by repeatedly creating a decode context.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10163.html">CVE-2016-10163</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10163">SUSE bug 1021616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10163">SUSE bug 1021616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10163">SUSE bug 1021616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10163">SUSE bug 1021616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10163">SUSE bug 1021616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10163">SUSE bug 1021616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10163">SUSE bug 1021616</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10164</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10164" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10164" source="CVE"/>
    <description>
    Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via (1) the number of extensions or (2) their concatenated length in a crafted XPM file, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10164.html">CVE-2016-10164</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10164">SUSE bug 1021315</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148927" comment="libXpm-3.5.11-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153563" comment="libXpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148928" comment="libXpm-devel-3.5.11-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153564" comment="libXpm-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148929" comment="libXpm-devel-32bit-3.5.11-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153565" comment="libXpm-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148930" comment="libXpm-tools-3.5.11-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153566" comment="libXpm-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148931" comment="libXpm4-3.5.11-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153567" comment="libXpm4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148932" comment="libXpm4-32bit-3.5.11-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153568" comment="libXpm4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10165</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10165" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10165" source="CVE"/>
    <description>
    The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10165.html">CVE-2016-10165</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10165">SUSE bug 1021364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10165">SUSE bug 1021364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10165">SUSE bug 1021364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10165">SUSE bug 1021364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10165">SUSE bug 1021364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10165">SUSE bug 1021364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10165">SUSE bug 1021364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10165">SUSE bug 1064069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10165">SUSE bug 1021364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10165">SUSE bug 1064069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10165">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10166</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10166" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10166" source="CVE"/>
    <description>
    Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10166.html">CVE-2016-10166</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10166">SUSE bug 1022263</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146236" comment="gd-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146237" comment="gd-32bit-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146238" comment="gd-devel-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153569" comment="gd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10167</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10167" source="CVE"/>
    <description>
    The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10167.html">CVE-2016-10167</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10167">SUSE bug 1022264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146236" comment="gd-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146237" comment="gd-32bit-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146238" comment="gd-devel-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153569" comment="gd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10168</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10168" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10168" source="CVE"/>
    <description>
    Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10168.html">CVE-2016-10168</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10168">SUSE bug 1022265</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146236" comment="gd-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146237" comment="gd-32bit-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146238" comment="gd-devel-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153569" comment="gd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10173</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10173" source="CVE"/>
    <description>
    Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10173.html">CVE-2016-10173</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10173">SUSE bug 1021740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10173">SUSE bug 1021740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10173">SUSE bug 1021740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10173">SUSE bug 1021740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10173">SUSE bug 1021740</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148315" comment="ruby2.1-rubygem-minitar-0.5.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154209" comment="ruby2.1-rubygem-minitar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148316" comment="ruby2.1-rubygem-minitar-doc-0.5.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154210" comment="ruby2.1-rubygem-minitar-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148317" comment="rubygem-minitar-0.5.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154211" comment="rubygem-minitar is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610189" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10189</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10189" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10189" source="CVE"/>
    <description>
    BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10189.html">CVE-2016-10189</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10189">SUSE bug 1022498</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10189">SUSE bug 1022498</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10189">SUSE bug 1022498</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149465" comment="bitlbee-3.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153570" comment="bitlbee is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149466" comment="bitlbee-devel-3.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154212" comment="bitlbee-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149467" comment="bitlbee-doc-3.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153571" comment="bitlbee-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610190" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10190</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10190" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10190" source="CVE"/>
    <description>
    Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10190.html">CVE-2016-10190</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10190">SUSE bug 1022920</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154853" comment="ffmpeg-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156206" comment="ffmpeg2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156207" comment="ffmpeg2-devel-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154854" comment="libavcodec-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156208" comment="libavcodec56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156209" comment="libavcodec56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154855" comment="libavcodec57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154856" comment="libavcodec57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154857" comment="libavdevice-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156210" comment="libavdevice56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156211" comment="libavdevice56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154858" comment="libavdevice57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154859" comment="libavdevice57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154860" comment="libavfilter-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156212" comment="libavfilter5-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156213" comment="libavfilter5-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154861" comment="libavfilter6-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154862" comment="libavfilter6-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154863" comment="libavformat-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156214" comment="libavformat56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156215" comment="libavformat56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154864" comment="libavformat57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154865" comment="libavformat57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154866" comment="libavresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156216" comment="libavresample2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156217" comment="libavresample2-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154867" comment="libavresample3-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154868" comment="libavresample3-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154869" comment="libavutil-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156218" comment="libavutil54-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156219" comment="libavutil54-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154870" comment="libavutil55-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154871" comment="libavutil55-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154872" comment="libpostproc-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156220" comment="libpostproc53-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156221" comment="libpostproc53-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154873" comment="libpostproc54-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154874" comment="libpostproc54-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154875" comment="libswresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156222" comment="libswresample1-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156223" comment="libswresample1-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154876" comment="libswresample2-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154877" comment="libswresample2-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154878" comment="libswscale-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156224" comment="libswscale3-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156225" comment="libswscale3-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154879" comment="libswscale4-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154880" comment="libswscale4-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10191" source="CVE"/>
    <description>
    Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10191.html">CVE-2016-10191</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10191">SUSE bug 1022921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10191">SUSE bug 1022921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10191">SUSE bug 1022921</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154853" comment="ffmpeg-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156206" comment="ffmpeg2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156207" comment="ffmpeg2-devel-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154854" comment="libavcodec-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156208" comment="libavcodec56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156209" comment="libavcodec56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154855" comment="libavcodec57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154856" comment="libavcodec57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154857" comment="libavdevice-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156210" comment="libavdevice56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156211" comment="libavdevice56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154858" comment="libavdevice57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154859" comment="libavdevice57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154860" comment="libavfilter-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156212" comment="libavfilter5-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156213" comment="libavfilter5-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154861" comment="libavfilter6-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154862" comment="libavfilter6-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154863" comment="libavformat-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156214" comment="libavformat56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156215" comment="libavformat56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154864" comment="libavformat57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154865" comment="libavformat57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154866" comment="libavresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156216" comment="libavresample2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156217" comment="libavresample2-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154867" comment="libavresample3-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154868" comment="libavresample3-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154869" comment="libavutil-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156218" comment="libavutil54-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156219" comment="libavutil54-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154870" comment="libavutil55-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154871" comment="libavutil55-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154872" comment="libpostproc-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156220" comment="libpostproc53-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156221" comment="libpostproc53-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154873" comment="libpostproc54-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154874" comment="libpostproc54-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154875" comment="libswresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156222" comment="libswresample1-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156223" comment="libswresample1-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154876" comment="libswresample2-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154877" comment="libswresample2-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154878" comment="libswscale-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156224" comment="libswscale3-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156225" comment="libswscale3-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154879" comment="libswscale4-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154880" comment="libswscale4-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10192</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10192" source="CVE"/>
    <description>
    Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10192.html">CVE-2016-10192</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10192">SUSE bug 1022922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10192">SUSE bug 1022922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10192">SUSE bug 1022922</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154853" comment="ffmpeg-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156206" comment="ffmpeg2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156207" comment="ffmpeg2-devel-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154854" comment="libavcodec-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156208" comment="libavcodec56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156209" comment="libavcodec56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154855" comment="libavcodec57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154856" comment="libavcodec57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154857" comment="libavdevice-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156210" comment="libavdevice56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156211" comment="libavdevice56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154858" comment="libavdevice57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154859" comment="libavdevice57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154860" comment="libavfilter-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156212" comment="libavfilter5-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156213" comment="libavfilter5-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154861" comment="libavfilter6-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154862" comment="libavfilter6-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154863" comment="libavformat-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156214" comment="libavformat56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156215" comment="libavformat56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154864" comment="libavformat57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154865" comment="libavformat57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154866" comment="libavresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156216" comment="libavresample2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156217" comment="libavresample2-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154867" comment="libavresample3-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154868" comment="libavresample3-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154869" comment="libavutil-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156218" comment="libavutil54-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156219" comment="libavutil54-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154870" comment="libavutil55-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154871" comment="libavutil55-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154872" comment="libpostproc-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156220" comment="libpostproc53-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156221" comment="libpostproc53-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154873" comment="libpostproc54-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154874" comment="libpostproc54-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154875" comment="libswresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156222" comment="libswresample1-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156223" comment="libswresample1-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154876" comment="libswresample2-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154877" comment="libswresample2-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154878" comment="libswscale-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156224" comment="libswscale3-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156225" comment="libswscale3-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154879" comment="libswscale4-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154880" comment="libswscale4-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10195</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10195" source="CVE"/>
    <description>
    The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10195.html">CVE-2016-10195</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1022917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1022917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1022917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1022917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1022917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1022917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1022917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1075618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1022917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1075618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1022917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10195">SUSE bug 1075618</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170187" comment="libevent-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170188" comment="libevent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170189" comment="libevent-2_0-5-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152209" comment="libevent-2_0-5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170190" comment="libevent-2_0-5-32bit-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170191" comment="libevent-2_0-5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170192" comment="libevent-devel-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170193" comment="libevent-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10196</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10196" source="CVE"/>
    <description>
    Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10196.html">CVE-2016-10196</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1022918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1022918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1022918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1022918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1022918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1022918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1022918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1022918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1022918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1075618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1022918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1075618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1022918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10196">SUSE bug 1075618</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170187" comment="libevent-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170188" comment="libevent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170189" comment="libevent-2_0-5-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152209" comment="libevent-2_0-5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170190" comment="libevent-2_0-5-32bit-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170191" comment="libevent-2_0-5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170192" comment="libevent-devel-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170193" comment="libevent-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10197</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10197" source="CVE"/>
    <description>
    The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10197.html">CVE-2016-10197</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1022919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1022919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1022919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1022919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1022919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1022919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1022919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1022919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1022919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1075618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1022919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1075618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1022919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10197">SUSE bug 1075618</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170187" comment="libevent-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170188" comment="libevent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170189" comment="libevent-2_0-5-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152209" comment="libevent-2_0-5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170190" comment="libevent-2_0-5-32bit-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170191" comment="libevent-2_0-5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170192" comment="libevent-devel-2.0.21-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170193" comment="libevent-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10198</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10198" source="CVE"/>
    <description>
    The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10198.html">CVE-2016-10198</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10198">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10198">SUSE bug 1024014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10198">SUSE bug 1024014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10198">SUSE bug 1024014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10198">SUSE bug 1024014</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154600" comment="gstreamer-plugins-good-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154601" comment="gstreamer-plugins-good-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153916" comment="gstreamer-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154602" comment="gstreamer-plugins-good-doc-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153917" comment="gstreamer-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154603" comment="gstreamer-plugins-good-extra-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153918" comment="gstreamer-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154604" comment="gstreamer-plugins-good-extra-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153919" comment="gstreamer-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154605" comment="gstreamer-plugins-good-lang-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10199</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10199" source="CVE"/>
    <description>
    The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted tag value.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10199.html">CVE-2016-10199</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10199">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10199">SUSE bug 1024017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10199">SUSE bug 1024017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10199">SUSE bug 1024017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10199">SUSE bug 1024017</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154600" comment="gstreamer-plugins-good-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154601" comment="gstreamer-plugins-good-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153916" comment="gstreamer-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154602" comment="gstreamer-plugins-good-doc-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153917" comment="gstreamer-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154603" comment="gstreamer-plugins-good-extra-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153918" comment="gstreamer-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154604" comment="gstreamer-plugins-good-extra-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153919" comment="gstreamer-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154605" comment="gstreamer-plugins-good-lang-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10200</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10200" source="CVE"/>
    <description>
    Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10200.html">CVE-2016-10200</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10200">SUSE bug 1028415</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150470" comment="kernel-debug-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150471" comment="kernel-debug-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150472" comment="kernel-debug-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150473" comment="kernel-default-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150474" comment="kernel-default-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150475" comment="kernel-default-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150476" comment="kernel-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150477" comment="kernel-docs-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150478" comment="kernel-docs-html-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150479" comment="kernel-docs-pdf-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150480" comment="kernel-macros-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150481" comment="kernel-obs-build-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150482" comment="kernel-obs-qa-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150483" comment="kernel-source-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150484" comment="kernel-source-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150485" comment="kernel-syms-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150486" comment="kernel-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150487" comment="kernel-vanilla-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150488" comment="kernel-vanilla-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10207</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10207" source="CVE"/>
    <description>
    The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10207.html">CVE-2016-10207</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10207">SUSE bug 1023012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10207">SUSE bug 1023012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10207">SUSE bug 1023012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10207">SUSE bug 1023012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10207">SUSE bug 1023012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10207">SUSE bug 1023012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10207">SUSE bug 1023012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10207">SUSE bug 1023012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10207">SUSE bug 1023012</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148327" comment="libXvnc-devel-1.6.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154213" comment="libXvnc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148328" comment="libXvnc1-1.6.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148329" comment="tigervnc-1.6.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148330" comment="xorg-x11-Xvnc-1.6.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10214</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10214" source="CVE"/>
    <description>
    Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10214.html">CVE-2016-10214</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10214">SUSE bug 1024244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10214">SUSE bug 1024244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10214">SUSE bug 1024244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10214">SUSE bug 1024244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10214">SUSE bug 1024244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10214">SUSE bug 1024244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10214">SUSE bug 1024244</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10220</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10220" source="CVE"/>
    <description>
    The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file that is mishandled in the PDF Transparency module.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10220.html">CVE-2016-10220</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10220">SUSE bug 1032120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10220">SUSE bug 1032120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10220">SUSE bug 1032120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10220">SUSE bug 1032120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10220">SUSE bug 1032120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10220">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10220">SUSE bug 1032120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10220">SUSE bug 1032120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10220">SUSE bug 1032120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10220">SUSE bug 1032120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10220">SUSE bug 1032120</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155158" comment="ghostscript-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155159" comment="ghostscript-devel-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151934" comment="ghostscript-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155160" comment="ghostscript-mini-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151935" comment="ghostscript-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155161" comment="ghostscript-mini-devel-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151936" comment="ghostscript-mini-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155162" comment="ghostscript-x11-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10221</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10221" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10221" source="CVE"/>
    <description>
    The count_entries function in pdf-layer.c in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10221.html">CVE-2016-10221</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10221">SUSE bug 1032140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10221">SUSE bug 1032140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10221">SUSE bug 1032140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10221">SUSE bug 1032140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10221">SUSE bug 1032140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10221">SUSE bug 1032140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10221">SUSE bug 1032140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10221">SUSE bug 1032140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167061" comment="mupdf-1.11-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167062" comment="mupdf-devel-static-1.11-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10251</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10251" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10251" source="CVE"/>
    <description>
    Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10251.html">CVE-2016-10251</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10251">SUSE bug 1029497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10251">SUSE bug 1029497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10251">SUSE bug 1029497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10251">SUSE bug 1029497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10251">SUSE bug 1029497</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154502" comment="jasper-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154503" comment="libjasper-devel-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154504" comment="libjasper1-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154505" comment="libjasper1-32bit-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10253</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10253" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10253" source="CVE"/>
    <description>
    An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10253.html">CVE-2016-10253</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10253">SUSE bug 1030062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10253">SUSE bug 1030062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10253">SUSE bug 1030062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10253">SUSE bug 1030062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10253">SUSE bug 1030062</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168069" comment="erlang-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168070" comment="erlang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168071" comment="erlang-debugger-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168072" comment="erlang-debugger is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168073" comment="erlang-debugger-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168074" comment="erlang-debugger-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168075" comment="erlang-dialyzer-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168076" comment="erlang-dialyzer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168077" comment="erlang-dialyzer-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168078" comment="erlang-dialyzer-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168079" comment="erlang-diameter-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168080" comment="erlang-diameter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168081" comment="erlang-diameter-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168082" comment="erlang-diameter-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168083" comment="erlang-doc-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168084" comment="erlang-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168085" comment="erlang-epmd-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168086" comment="erlang-epmd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168087" comment="erlang-et-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168088" comment="erlang-et is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168089" comment="erlang-et-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168090" comment="erlang-et-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168091" comment="erlang-gs-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168092" comment="erlang-gs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168093" comment="erlang-gs-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168094" comment="erlang-gs-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168095" comment="erlang-jinterface-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168096" comment="erlang-jinterface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168097" comment="erlang-jinterface-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168098" comment="erlang-jinterface-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168099" comment="erlang-observer-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168100" comment="erlang-observer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168101" comment="erlang-observer-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168102" comment="erlang-observer-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168103" comment="erlang-reltool-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168104" comment="erlang-reltool is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168105" comment="erlang-reltool-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168106" comment="erlang-reltool-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168107" comment="erlang-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168108" comment="erlang-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168109" comment="erlang-wx-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168110" comment="erlang-wx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168111" comment="erlang-wx-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168112" comment="erlang-wx-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10266</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10266" source="CVE"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10266.html">CVE-2016-10266</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10266">SUSE bug 1031263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10266">SUSE bug 1031263</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154745" comment="libtiff-devel-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154746" comment="libtiff-devel-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154747" comment="libtiff5-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154748" comment="libtiff5-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154749" comment="tiff-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10267</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10267" source="CVE"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10267.html">CVE-2016-10267</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10267">SUSE bug 1031262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10267">SUSE bug 1031262</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154745" comment="libtiff-devel-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154746" comment="libtiff-devel-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154747" comment="libtiff5-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154748" comment="libtiff5-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154749" comment="tiff-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10268</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10268" source="CVE"/>
    <description>
    tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10268.html">CVE-2016-10268</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10268">SUSE bug 1031255</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154745" comment="libtiff-devel-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154746" comment="libtiff-devel-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154747" comment="libtiff5-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154748" comment="libtiff5-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154749" comment="tiff-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10269</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10269" source="CVE"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10269.html">CVE-2016-10269</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10269">SUSE bug 1031254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10269">SUSE bug 1031254</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154745" comment="libtiff-devel-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154746" comment="libtiff-devel-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154747" comment="libtiff5-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154748" comment="libtiff5-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154749" comment="tiff-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10270</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10270" source="CVE"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10270.html">CVE-2016-10270</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10270">SUSE bug 1031250</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10270">SUSE bug 1031250</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154745" comment="libtiff-devel-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154746" comment="libtiff-devel-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154747" comment="libtiff5-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154748" comment="libtiff5-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154749" comment="tiff-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10271</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10271" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10271" source="CVE"/>
    <description>
    tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10271.html">CVE-2016-10271</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10271">SUSE bug 1031249</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154745" comment="libtiff-devel-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154746" comment="libtiff-devel-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154747" comment="libtiff5-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154748" comment="libtiff5-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154749" comment="tiff-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10272</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10272" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10272" source="CVE"/>
    <description>
    LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10272.html">CVE-2016-10272</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10272">SUSE bug 1031247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10272">SUSE bug 1031247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10272">SUSE bug 1031247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154745" comment="libtiff-devel-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154746" comment="libtiff-devel-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154747" comment="libtiff5-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154748" comment="libtiff5-32bit-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154749" comment="tiff-4.0.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10324</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10324" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10324" source="CVE"/>
    <description>
    In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10324.html">CVE-2016-10324</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10324">SUSE bug 1034574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10324">SUSE bug 1034574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10324">SUSE bug 1034574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10324">SUSE bug 1034574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10324">SUSE bug 1034574</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10324">SUSE bug 1034574</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154824" comment="libosip2-4.1.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154844" comment="libosip2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154825" comment="libosip2-devel-4.1.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154846" comment="libosip2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610325" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10325</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10325" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10325" source="CVE"/>
    <description>
    In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser2/osip_message_to_str.c, resulting in a remote DoS.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10325.html">CVE-2016-10325</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10325">SUSE bug 1034572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10325">SUSE bug 1034572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10325">SUSE bug 1034572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10325">SUSE bug 1034572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10325">SUSE bug 1034572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10325">SUSE bug 1034572</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154824" comment="libosip2-4.1.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154844" comment="libosip2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154825" comment="libosip2-devel-4.1.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154846" comment="libosip2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610326" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10326</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10326" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10326" source="CVE"/>
    <description>
    In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10326.html">CVE-2016-10326</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10326">SUSE bug 1034571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10326">SUSE bug 1034571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10326">SUSE bug 1034571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10326">SUSE bug 1034571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10326">SUSE bug 1034571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10326">SUSE bug 1034571</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154824" comment="libosip2-4.1.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154844" comment="libosip2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154825" comment="libosip2-devel-4.1.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154846" comment="libosip2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10327</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10327" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10327" source="CVE"/>
    <description>
    LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function in vcl/source/filter/wmf/enhwmf.cxx.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10327.html">CVE-2016-10327</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10327">SUSE bug 1034192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10327">SUSE bug 1034192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10327">SUSE bug 1034192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10327">SUSE bug 1034192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10327">SUSE bug 1034192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10327">SUSE bug 1034192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10327">SUSE bug 1034192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10327">SUSE bug 1034192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10327">SUSE bug 1034192</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158482" comment="libixion-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153320" comment="libixion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158483" comment="libixion-0_12-0-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158751" comment="libixion-0_12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158484" comment="libixion-devel-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153322" comment="libixion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158485" comment="libixion-python3-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153323" comment="libixion-python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158486" comment="libixion-tools-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153324" comment="libixion-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158487" comment="libmwaw-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158752" comment="libmwaw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158488" comment="libmwaw-0_3-3-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158753" comment="libmwaw-0_3-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158489" comment="libmwaw-devel-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158754" comment="libmwaw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158490" comment="libmwaw-devel-doc-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158755" comment="libmwaw-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158491" comment="libmwaw-tools-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158756" comment="libmwaw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158492" comment="liborcus-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153325" comment="liborcus is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158493" comment="liborcus-0_12-0-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158757" comment="liborcus-0_12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158494" comment="liborcus-devel-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153327" comment="liborcus-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158495" comment="liborcus-python3-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153328" comment="liborcus-python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158496" comment="liborcus-tools-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153329" comment="liborcus-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164015" comment="libreoffice-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164016" comment="libreoffice-base-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164017" comment="libreoffice-base-drivers-mysql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164018" comment="libreoffice-base-drivers-postgresql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153330" comment="libreoffice-base-drivers-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164019" comment="libreoffice-branding-upstream-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164020" comment="libreoffice-calc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164021" comment="libreoffice-calc-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164022" comment="libreoffice-draw-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164023" comment="libreoffice-filters-optional-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164024" comment="libreoffice-gdb-pretty-printers-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153331" comment="libreoffice-gdb-pretty-printers is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164025" comment="libreoffice-glade-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153332" comment="libreoffice-glade is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164026" comment="libreoffice-gnome-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164027" comment="libreoffice-gtk3-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164028" comment="libreoffice-icon-theme-breeze-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164029" comment="libreoffice-icon-theme-galaxy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164030" comment="libreoffice-icon-theme-hicontrast-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164031" comment="libreoffice-icon-theme-oxygen-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164032" comment="libreoffice-icon-theme-sifr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164033" comment="libreoffice-icon-theme-tango-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164034" comment="libreoffice-impress-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164035" comment="libreoffice-kde4-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164036" comment="libreoffice-l10n-af-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153334" comment="libreoffice-l10n-af is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164037" comment="libreoffice-l10n-ar-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164038" comment="libreoffice-l10n-as-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153336" comment="libreoffice-l10n-as is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164039" comment="libreoffice-l10n-bg-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164040" comment="libreoffice-l10n-bn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153338" comment="libreoffice-l10n-bn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164041" comment="libreoffice-l10n-br-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153339" comment="libreoffice-l10n-br is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164042" comment="libreoffice-l10n-ca-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164043" comment="libreoffice-l10n-cs-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164044" comment="libreoffice-l10n-cy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153341" comment="libreoffice-l10n-cy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164045" comment="libreoffice-l10n-da-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164046" comment="libreoffice-l10n-de-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164047" comment="libreoffice-l10n-dz-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153342" comment="libreoffice-l10n-dz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164048" comment="libreoffice-l10n-el-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164049" comment="libreoffice-l10n-en-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164050" comment="libreoffice-l10n-es-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164051" comment="libreoffice-l10n-et-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164052" comment="libreoffice-l10n-eu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153344" comment="libreoffice-l10n-eu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164053" comment="libreoffice-l10n-fa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164054" comment="libreoffice-l10n-fi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164055" comment="libreoffice-l10n-fr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164056" comment="libreoffice-l10n-ga-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153347" comment="libreoffice-l10n-ga is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164057" comment="libreoffice-l10n-gl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153348" comment="libreoffice-l10n-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164058" comment="libreoffice-l10n-gu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153349" comment="libreoffice-l10n-gu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164059" comment="libreoffice-l10n-he-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153350" comment="libreoffice-l10n-he is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164060" comment="libreoffice-l10n-hi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153351" comment="libreoffice-l10n-hi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164061" comment="libreoffice-l10n-hr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153352" comment="libreoffice-l10n-hr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164062" comment="libreoffice-l10n-hu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164063" comment="libreoffice-l10n-it-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164064" comment="libreoffice-l10n-ja-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164065" comment="libreoffice-l10n-kk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153353" comment="libreoffice-l10n-kk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164066" comment="libreoffice-l10n-kn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153354" comment="libreoffice-l10n-kn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164067" comment="libreoffice-l10n-ko-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164068" comment="libreoffice-l10n-lt-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164069" comment="libreoffice-l10n-lv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153357" comment="libreoffice-l10n-lv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164070" comment="libreoffice-l10n-mai-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153358" comment="libreoffice-l10n-mai is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164071" comment="libreoffice-l10n-ml-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153359" comment="libreoffice-l10n-ml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164072" comment="libreoffice-l10n-mr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153360" comment="libreoffice-l10n-mr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164073" comment="libreoffice-l10n-nb-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164074" comment="libreoffice-l10n-nl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164075" comment="libreoffice-l10n-nn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153363" comment="libreoffice-l10n-nn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164076" comment="libreoffice-l10n-nr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153364" comment="libreoffice-l10n-nr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164077" comment="libreoffice-l10n-nso-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153365" comment="libreoffice-l10n-nso is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164078" comment="libreoffice-l10n-or-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153366" comment="libreoffice-l10n-or is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164079" comment="libreoffice-l10n-pa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153367" comment="libreoffice-l10n-pa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164080" comment="libreoffice-l10n-pl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164081" comment="libreoffice-l10n-pt_BR-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164082" comment="libreoffice-l10n-pt_PT-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158759" comment="libreoffice-l10n-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164083" comment="libreoffice-l10n-ro-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153370" comment="libreoffice-l10n-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164084" comment="libreoffice-l10n-ru-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164085" comment="libreoffice-l10n-si-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153371" comment="libreoffice-l10n-si is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164086" comment="libreoffice-l10n-sk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164087" comment="libreoffice-l10n-sl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164088" comment="libreoffice-l10n-sr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153374" comment="libreoffice-l10n-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164089" comment="libreoffice-l10n-ss-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153375" comment="libreoffice-l10n-ss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164090" comment="libreoffice-l10n-st-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153376" comment="libreoffice-l10n-st is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164091" comment="libreoffice-l10n-sv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164092" comment="libreoffice-l10n-ta-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153378" comment="libreoffice-l10n-ta is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164093" comment="libreoffice-l10n-te-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153379" comment="libreoffice-l10n-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164094" comment="libreoffice-l10n-th-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153380" comment="libreoffice-l10n-th is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164095" comment="libreoffice-l10n-tn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153381" comment="libreoffice-l10n-tn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164096" comment="libreoffice-l10n-tr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153382" comment="libreoffice-l10n-tr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164097" comment="libreoffice-l10n-ts-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153383" comment="libreoffice-l10n-ts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164098" comment="libreoffice-l10n-uk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164099" comment="libreoffice-l10n-ve-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153385" comment="libreoffice-l10n-ve is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164100" comment="libreoffice-l10n-xh-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153386" comment="libreoffice-l10n-xh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164101" comment="libreoffice-l10n-zh_CN-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164102" comment="libreoffice-l10n-zh_TW-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164103" comment="libreoffice-l10n-zu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153389" comment="libreoffice-l10n-zu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164104" comment="libreoffice-mailmerge-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164105" comment="libreoffice-math-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164106" comment="libreoffice-officebean-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153390" comment="libreoffice-officebean is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164107" comment="libreoffice-pyuno-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164108" comment="libreoffice-sdk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153391" comment="libreoffice-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164109" comment="libreoffice-sdk-doc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153392" comment="libreoffice-sdk-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164110" comment="libreoffice-writer-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164111" comment="libreoffice-writer-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164112" comment="libreofficekit-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164113" comment="libreofficekit-devel-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153394" comment="libreofficekit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158596" comment="libstaroffice-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158762" comment="libstaroffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158597" comment="libstaroffice-0_0-0-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158763" comment="libstaroffice-0_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158598" comment="libstaroffice-devel-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158764" comment="libstaroffice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158599" comment="libstaroffice-devel-doc-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158765" comment="libstaroffice-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158600" comment="libstaroffice-tools-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158766" comment="libstaroffice-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158236" comment="libzmf-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158767" comment="libzmf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158237" comment="libzmf-0_0-0-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158768" comment="libzmf-0_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158601" comment="libzmf-devel-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158769" comment="libzmf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158602" comment="libzmf-devel-doc-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158770" comment="libzmf-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158603" comment="libzmf-tools-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158771" comment="libzmf-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158604" comment="myspell-af_NA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153406" comment="myspell-af_NA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158605" comment="myspell-af_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153407" comment="myspell-af_ZA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158606" comment="myspell-an-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153408" comment="myspell-an is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158607" comment="myspell-an_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153409" comment="myspell-an_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158608" comment="myspell-ar-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153410" comment="myspell-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158609" comment="myspell-ar_AE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153411" comment="myspell-ar_AE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158610" comment="myspell-ar_BH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153412" comment="myspell-ar_BH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158611" comment="myspell-ar_DZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153413" comment="myspell-ar_DZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158612" comment="myspell-ar_EG-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153414" comment="myspell-ar_EG is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158613" comment="myspell-ar_IQ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153415" comment="myspell-ar_IQ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158614" comment="myspell-ar_JO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153416" comment="myspell-ar_JO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158615" comment="myspell-ar_KW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153417" comment="myspell-ar_KW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158616" comment="myspell-ar_LB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153418" comment="myspell-ar_LB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158617" comment="myspell-ar_LY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153419" comment="myspell-ar_LY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158618" comment="myspell-ar_MA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153420" comment="myspell-ar_MA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158619" comment="myspell-ar_OM-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153421" comment="myspell-ar_OM is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158620" comment="myspell-ar_QA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153422" comment="myspell-ar_QA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158621" comment="myspell-ar_SA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153423" comment="myspell-ar_SA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158622" comment="myspell-ar_SD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153424" comment="myspell-ar_SD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158623" comment="myspell-ar_SY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153425" comment="myspell-ar_SY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158624" comment="myspell-ar_TN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153426" comment="myspell-ar_TN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158625" comment="myspell-ar_YE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153427" comment="myspell-ar_YE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158626" comment="myspell-be_BY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153428" comment="myspell-be_BY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158627" comment="myspell-bg_BG-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153429" comment="myspell-bg_BG is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158628" comment="myspell-bn_BD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153430" comment="myspell-bn_BD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158629" comment="myspell-bn_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153431" comment="myspell-bn_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158630" comment="myspell-bo-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158772" comment="myspell-bo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158631" comment="myspell-bo_CN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158773" comment="myspell-bo_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158632" comment="myspell-bo_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158774" comment="myspell-bo_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158633" comment="myspell-br_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153432" comment="myspell-br_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158634" comment="myspell-bs-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153433" comment="myspell-bs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158635" comment="myspell-bs_BA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153434" comment="myspell-bs_BA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158636" comment="myspell-ca-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153435" comment="myspell-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158637" comment="myspell-ca_AD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153436" comment="myspell-ca_AD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158638" comment="myspell-ca_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153437" comment="myspell-ca_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158639" comment="myspell-ca_ES_valencia-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153438" comment="myspell-ca_ES_valencia is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158640" comment="myspell-ca_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153439" comment="myspell-ca_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158641" comment="myspell-ca_IT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153440" comment="myspell-ca_IT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158642" comment="myspell-cs_CZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153441" comment="myspell-cs_CZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158643" comment="myspell-da_DK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153442" comment="myspell-da_DK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158644" comment="myspell-de-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153443" comment="myspell-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158645" comment="myspell-de_AT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153444" comment="myspell-de_AT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158646" comment="myspell-de_CH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153445" comment="myspell-de_CH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158647" comment="myspell-de_DE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153446" comment="myspell-de_DE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158648" comment="myspell-dictionaries-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153447" comment="myspell-dictionaries is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158649" comment="myspell-el_GR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153448" comment="myspell-el_GR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158650" comment="myspell-en-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153449" comment="myspell-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158651" comment="myspell-en_AU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153450" comment="myspell-en_AU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158652" comment="myspell-en_BS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153451" comment="myspell-en_BS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158653" comment="myspell-en_BZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153452" comment="myspell-en_BZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158654" comment="myspell-en_CA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153453" comment="myspell-en_CA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158655" comment="myspell-en_GB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153454" comment="myspell-en_GB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158656" comment="myspell-en_GH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153455" comment="myspell-en_GH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158657" comment="myspell-en_IE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153456" comment="myspell-en_IE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158658" comment="myspell-en_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153457" comment="myspell-en_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158659" comment="myspell-en_JM-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153458" comment="myspell-en_JM is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158660" comment="myspell-en_MW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153459" comment="myspell-en_MW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158661" comment="myspell-en_NA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153460" comment="myspell-en_NA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158662" comment="myspell-en_NZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153461" comment="myspell-en_NZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158663" comment="myspell-en_PH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153462" comment="myspell-en_PH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158664" comment="myspell-en_TT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153463" comment="myspell-en_TT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158665" comment="myspell-en_US-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153464" comment="myspell-en_US is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158666" comment="myspell-en_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153465" comment="myspell-en_ZA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158667" comment="myspell-en_ZW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153466" comment="myspell-en_ZW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158668" comment="myspell-es-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153467" comment="myspell-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158669" comment="myspell-es_AR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153468" comment="myspell-es_AR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158670" comment="myspell-es_BO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153469" comment="myspell-es_BO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158671" comment="myspell-es_CL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153470" comment="myspell-es_CL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158672" comment="myspell-es_CO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153471" comment="myspell-es_CO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158673" comment="myspell-es_CR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153472" comment="myspell-es_CR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158674" comment="myspell-es_CU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153473" comment="myspell-es_CU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158675" comment="myspell-es_DO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153474" comment="myspell-es_DO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158676" comment="myspell-es_EC-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153475" comment="myspell-es_EC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158677" comment="myspell-es_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153476" comment="myspell-es_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158678" comment="myspell-es_GT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153477" comment="myspell-es_GT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158679" comment="myspell-es_HN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153478" comment="myspell-es_HN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158680" comment="myspell-es_MX-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153479" comment="myspell-es_MX is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158681" comment="myspell-es_NI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153480" comment="myspell-es_NI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158682" comment="myspell-es_PA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153481" comment="myspell-es_PA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158683" comment="myspell-es_PE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153482" comment="myspell-es_PE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158684" comment="myspell-es_PR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153483" comment="myspell-es_PR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158685" comment="myspell-es_PY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153484" comment="myspell-es_PY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158686" comment="myspell-es_SV-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153485" comment="myspell-es_SV is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158687" comment="myspell-es_UY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153486" comment="myspell-es_UY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158688" comment="myspell-es_VE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153487" comment="myspell-es_VE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158689" comment="myspell-et_EE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153488" comment="myspell-et_EE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158690" comment="myspell-fr_BE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153489" comment="myspell-fr_BE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158691" comment="myspell-fr_CA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153490" comment="myspell-fr_CA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158692" comment="myspell-fr_CH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153491" comment="myspell-fr_CH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158693" comment="myspell-fr_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153492" comment="myspell-fr_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158694" comment="myspell-fr_LU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153493" comment="myspell-fr_LU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158695" comment="myspell-fr_MC-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153494" comment="myspell-fr_MC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158696" comment="myspell-gd_GB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153495" comment="myspell-gd_GB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158697" comment="myspell-gl-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153496" comment="myspell-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158698" comment="myspell-gl_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153497" comment="myspell-gl_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158699" comment="myspell-gu_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153498" comment="myspell-gu_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158700" comment="myspell-gug-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153499" comment="myspell-gug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158701" comment="myspell-gug_PY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153500" comment="myspell-gug_PY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158702" comment="myspell-he_IL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153501" comment="myspell-he_IL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158703" comment="myspell-hi_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153502" comment="myspell-hi_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158704" comment="myspell-hr_HR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153503" comment="myspell-hr_HR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158705" comment="myspell-hu_HU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153504" comment="myspell-hu_HU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158706" comment="myspell-is-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153505" comment="myspell-is is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158707" comment="myspell-is_IS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153506" comment="myspell-is_IS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158708" comment="myspell-it_IT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153507" comment="myspell-it_IT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158709" comment="myspell-kmr_Latn-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153508" comment="myspell-kmr_Latn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158710" comment="myspell-kmr_Latn_SY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153509" comment="myspell-kmr_Latn_SY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158711" comment="myspell-kmr_Latn_TR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153510" comment="myspell-kmr_Latn_TR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158712" comment="myspell-lightproof-en-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153511" comment="myspell-lightproof-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158713" comment="myspell-lightproof-hu_HU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153512" comment="myspell-lightproof-hu_HU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158714" comment="myspell-lightproof-pt_BR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153513" comment="myspell-lightproof-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158715" comment="myspell-lightproof-ru_RU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153514" comment="myspell-lightproof-ru_RU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158716" comment="myspell-lo_LA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153515" comment="myspell-lo_LA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158717" comment="myspell-lt_LT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153516" comment="myspell-lt_LT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158718" comment="myspell-lv_LV-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153517" comment="myspell-lv_LV is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158719" comment="myspell-nb_NO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153518" comment="myspell-nb_NO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158720" comment="myspell-ne_NP-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153519" comment="myspell-ne_NP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158721" comment="myspell-nl_BE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153520" comment="myspell-nl_BE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158722" comment="myspell-nl_NL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153521" comment="myspell-nl_NL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158723" comment="myspell-nn_NO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153522" comment="myspell-nn_NO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158724" comment="myspell-no-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153523" comment="myspell-no is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158725" comment="myspell-oc_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153524" comment="myspell-oc_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158726" comment="myspell-pl_PL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153525" comment="myspell-pl_PL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158727" comment="myspell-pt_AO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153526" comment="myspell-pt_AO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158728" comment="myspell-pt_BR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153527" comment="myspell-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158729" comment="myspell-pt_PT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153528" comment="myspell-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158730" comment="myspell-ro-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153529" comment="myspell-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158731" comment="myspell-ro_RO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153530" comment="myspell-ro_RO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158732" comment="myspell-ru_RU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153531" comment="myspell-ru_RU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158733" comment="myspell-si_LK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153532" comment="myspell-si_LK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158734" comment="myspell-sk_SK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153533" comment="myspell-sk_SK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158735" comment="myspell-sl_SI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153534" comment="myspell-sl_SI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158736" comment="myspell-sr-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153535" comment="myspell-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158737" comment="myspell-sr_CS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153536" comment="myspell-sr_CS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158738" comment="myspell-sr_Latn_CS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153537" comment="myspell-sr_Latn_CS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158739" comment="myspell-sr_Latn_RS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153538" comment="myspell-sr_Latn_RS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158740" comment="myspell-sr_RS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153539" comment="myspell-sr_RS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158741" comment="myspell-sv_FI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153540" comment="myspell-sv_FI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158742" comment="myspell-sv_SE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153541" comment="myspell-sv_SE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158743" comment="myspell-sw_TZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153542" comment="myspell-sw_TZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158744" comment="myspell-te-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153543" comment="myspell-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158745" comment="myspell-te_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153544" comment="myspell-te_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158746" comment="myspell-th_TH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153545" comment="myspell-th_TH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158747" comment="myspell-uk_UA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153546" comment="myspell-uk_UA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158748" comment="myspell-vi-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153547" comment="myspell-vi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158749" comment="myspell-vi_VN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153548" comment="myspell-vi_VN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158750" comment="myspell-zu_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153549" comment="myspell-zu_ZA is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10369</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10369" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10369" source="CVE"/>
    <description>
    unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10369.html">CVE-2016-10369</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10369">SUSE bug 1038127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10369">SUSE bug 1038127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10369">SUSE bug 1038127</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169910" comment="lxterminal-0.2.0-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169911" comment="lxterminal is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169912" comment="lxterminal-lang-0.2.0-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169913" comment="lxterminal-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10371</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10371" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10371" source="CVE"/>
    <description>
    The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10371.html">CVE-2016-10371</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10371">SUSE bug 1038438</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10371">SUSE bug 1038438</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10371">SUSE bug 1038438</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10371">SUSE bug 1038438</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10375</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10375" source="CVE"/>
    <description>
    Yodl before 3.07.01 has a Buffer Over-read in the queue_push function in queue/queuepush.c.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10375.html">CVE-2016-10375</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10375">SUSE bug 1040917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10375">SUSE bug 1040917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10375">SUSE bug 1040917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10375">SUSE bug 1040917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10375">SUSE bug 1040917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10375">SUSE bug 1040917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10375">SUSE bug 1040917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10375">SUSE bug 1040917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10375">SUSE bug 1040917</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10375">SUSE bug 1040917</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156740" comment="yodl-3.05.01-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156743" comment="yodl is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10376</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10376" source="CVE"/>
    <description>
    Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10376.html">CVE-2016-10376</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10376">SUSE bug 1041163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10376">SUSE bug 1041163</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156719" comment="gajim-0.16.7-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153192" comment="gajim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156720" comment="gajim-lang-0.16.7-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153193" comment="gajim-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610397" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10397</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10397" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10397" source="CVE"/>
    <description>
    In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:80#@good.example.com/ and evil.example.com:80?@good.example.com/ inputs to the parse_url function (implemented in the php_url_parse_ex function in ext/standard/url.c).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10397.html">CVE-2016-10397</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10397">SUSE bug 1047454</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163225" comment="apache2-mod_php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163059" comment="apache2-mod_php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163226" comment="php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163227" comment="php5-bcmath-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163228" comment="php5-bz2-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163229" comment="php5-calendar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163230" comment="php5-ctype-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163231" comment="php5-curl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163232" comment="php5-dba-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163233" comment="php5-devel-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163234" comment="php5-dom-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163235" comment="php5-enchant-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163236" comment="php5-exif-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163237" comment="php5-fastcgi-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163238" comment="php5-fileinfo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163239" comment="php5-firebird-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163240" comment="php5-fpm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163241" comment="php5-ftp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163242" comment="php5-gd-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163243" comment="php5-gettext-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163244" comment="php5-gmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163245" comment="php5-iconv-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163246" comment="php5-imap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163247" comment="php5-intl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163248" comment="php5-json-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163249" comment="php5-ldap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163250" comment="php5-mbstring-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163251" comment="php5-mcrypt-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163252" comment="php5-mssql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163253" comment="php5-mysql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163254" comment="php5-odbc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163255" comment="php5-opcache-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163256" comment="php5-openssl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163257" comment="php5-pcntl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163258" comment="php5-pdo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163259" comment="php5-pear-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163260" comment="php5-pgsql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163261" comment="php5-phar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163262" comment="php5-posix-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163263" comment="php5-pspell-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163264" comment="php5-readline-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163265" comment="php5-shmop-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163266" comment="php5-snmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163267" comment="php5-soap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163268" comment="php5-sockets-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163269" comment="php5-sqlite-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163270" comment="php5-suhosin-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163271" comment="php5-sysvmsg-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163272" comment="php5-sysvsem-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163273" comment="php5-sysvshm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163274" comment="php5-tidy-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163275" comment="php5-tokenizer-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163276" comment="php5-wddx-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163277" comment="php5-xmlreader-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163278" comment="php5-xmlrpc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163279" comment="php5-xmlwriter-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163280" comment="php5-xsl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163281" comment="php5-zip-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163282" comment="php5-zlib-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163060" comment="php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163061" comment="php7-bcmath-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163062" comment="php7-bz2-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163063" comment="php7-calendar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163064" comment="php7-ctype-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163065" comment="php7-curl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163066" comment="php7-dba-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163067" comment="php7-devel-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163068" comment="php7-dom-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163069" comment="php7-enchant-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163070" comment="php7-exif-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163071" comment="php7-fastcgi-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163072" comment="php7-fileinfo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163073" comment="php7-firebird-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163074" comment="php7-fpm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163075" comment="php7-ftp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163076" comment="php7-gd-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163077" comment="php7-gettext-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163078" comment="php7-gmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163079" comment="php7-iconv-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163080" comment="php7-imap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163081" comment="php7-intl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163082" comment="php7-json-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163083" comment="php7-ldap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163084" comment="php7-mbstring-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163085" comment="php7-mcrypt-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163086" comment="php7-mysql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163087" comment="php7-odbc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163088" comment="php7-opcache-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163089" comment="php7-openssl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163090" comment="php7-pcntl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163091" comment="php7-pdo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163092" comment="php7-pear-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163093" comment="php7-pear-Archive_Tar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163094" comment="php7-pgsql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163095" comment="php7-phar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163096" comment="php7-posix-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163097" comment="php7-pspell-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163098" comment="php7-readline-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163099" comment="php7-shmop-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163100" comment="php7-snmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163101" comment="php7-soap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163102" comment="php7-sockets-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163103" comment="php7-sqlite-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163104" comment="php7-sysvmsg-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163105" comment="php7-sysvsem-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163106" comment="php7-sysvshm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163107" comment="php7-tidy-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163108" comment="php7-tokenizer-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163109" comment="php7-wddx-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163110" comment="php7-xmlreader-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163111" comment="php7-xmlrpc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163112" comment="php7-xmlwriter-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163113" comment="php7-xsl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163114" comment="php7-zip-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163115" comment="php7-zlib-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10507</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10507" source="CVE"/>
    <description>
    Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10507.html">CVE-2016-10507</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10507">SUSE bug 1056421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10507">SUSE bug 1056421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10507">SUSE bug 1056421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10507">SUSE bug 1056421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10507">SUSE bug 1056421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10507">SUSE bug 1056421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10507">SUSE bug 1056421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10507">SUSE bug 1056421</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165203" comment="libopenjp2-7-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165204" comment="libopenjp2-7-32bit-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165205" comment="openjpeg2-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165206" comment="openjpeg2-devel-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201610517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-10517</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-10517" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10517" source="CVE"/>
    <description>
    networking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" because it lacks a check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack triggers an HTTP request to the Redis TCP port).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-10517.html">CVE-2016-10517</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10517">SUSE bug 1064980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-10517">SUSE bug 1064980</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166841" comment="redis-4.0.2-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152049" comment="redis is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161234" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1234</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1234" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1234" source="CVE"/>
    <description>
    Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1234.html">CVE-2016-1234</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 988770</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 988782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 988782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 989127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1234">SUSE bug 969727</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161237" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1237</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1237" source="CVE"/>
    <description>
    nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1237.html">CVE-2016-1237</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1237">SUSE bug 986570</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1238</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1238" source="CVE"/>
    <description>
    (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1238.html">CVE-2016-1238</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 988311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1238">SUSE bug 987887</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140286" comment="perl-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140287" comment="perl-32bit-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140288" comment="perl-base-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140289" comment="perl-doc-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1241</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1241" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1241" source="CVE"/>
    <description>
    Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1241.html">CVE-2016-1241</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1241">SUSE bug 1016817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1241">SUSE bug 1016885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1241">SUSE bug 1016885</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146246" comment="gnuhealth-3.0.5-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154214" comment="gnuhealth is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146247" comment="proteus-3.8.5-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154215" comment="proteus is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146248" comment="tryton-3.8.12-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154216" comment="tryton is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146249" comment="trytond-3.8.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154217" comment="trytond is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146250" comment="trytond_account-3.8.5-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154218" comment="trytond_account is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146251" comment="trytond_account_invoice-3.8.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154219" comment="trytond_account_invoice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146252" comment="trytond_stock-3.8.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154220" comment="trytond_stock is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146253" comment="trytond_stock_lot-3.8.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154221" comment="trytond_stock_lot is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1242</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1242" source="CVE"/>
    <description>
    file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1242.html">CVE-2016-1242</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1242">SUSE bug 1016817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1242">SUSE bug 1016886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1242">SUSE bug 1016886</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146246" comment="gnuhealth-3.0.5-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154214" comment="gnuhealth is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146247" comment="proteus-3.8.5-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154215" comment="proteus is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146248" comment="tryton-3.8.12-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154216" comment="tryton is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146249" comment="trytond-3.8.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154217" comment="trytond is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146250" comment="trytond_account-3.8.5-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154218" comment="trytond_account is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146251" comment="trytond_account_invoice-3.8.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154219" comment="trytond_account_invoice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146252" comment="trytond_stock-3.8.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154220" comment="trytond_stock is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146253" comment="trytond_stock_lot-3.8.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154221" comment="trytond_stock_lot is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161245" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1245</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1245" source="CVE"/>
    <description>
    It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1245.html">CVE-2016-1245</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1245">SUSE bug 1005258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1245">SUSE bug 1005258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1245">SUSE bug 1005258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1245">SUSE bug 1005258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1245">SUSE bug 1005258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1245">SUSE bug 1005258</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140348" comment="quagga-0.99.24.1-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151418" comment="quagga is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1246</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1246" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1246" source="CVE"/>
    <description>
    Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1246.html">CVE-2016-1246</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1246">SUSE bug 1002626</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147467" comment="perl-DBD-mysql-4.021-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153573" comment="perl-DBD-mysql is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161248" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1248</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1248" source="CVE"/>
    <description>
    vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1248.html">CVE-2016-1248</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1248">SUSE bug 1010685</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136377" comment="gvim-7.4.326-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151192" comment="gvim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136378" comment="vim-7.4.326-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136379" comment="vim-data-7.4.326-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1249</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1249" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1249" source="CVE"/>
    <description>
    The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service (out-of-bounds read) via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1249.html">CVE-2016-1249</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1249">SUSE bug 1010457</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147467" comment="perl-DBD-mysql-4.021-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153573" comment="perl-DBD-mysql is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1251</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1251" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1251" source="CVE"/>
    <description>
    There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1251.html">CVE-2016-1251</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1251">SUSE bug 1012546</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147467" comment="perl-DBD-mysql-4.021-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153573" comment="perl-DBD-mysql is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1254</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1254" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1254" source="CVE"/>
    <description>
    Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1254.html">CVE-2016-1254</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1254">SUSE bug 1016343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1254">SUSE bug 1016343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1254">SUSE bug 1016343</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1254">SUSE bug 1016343</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145998" comment="tor-0.2.8.12-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153574" comment="tor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1283</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1283" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1283" source="CVE"/>
    <description>
    The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'&lt;((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1283.html">CVE-2016-1283</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1283">SUSE bug 960837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1283">SUSE bug 960837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1283">SUSE bug 960837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1283">SUSE bug 960837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1283">SUSE bug 960837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1283">SUSE bug 960837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1283">SUSE bug 960837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1283">SUSE bug 960837</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1285</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1285" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1285" source="CVE"/>
    <description>
    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1285.html">CVE-2016-1285</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 978322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 978322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 978322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 978322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 978322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1285">SUSE bug 970072</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1286</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1286" source="CVE"/>
    <description>
    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1286.html">CVE-2016-1286</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 978322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 981200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1286">SUSE bug 970073</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1521</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1521" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1521" source="CVE"/>
    <description>
    The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1521.html">CVE-2016-1521</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1521">SUSE bug 965810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139569" comment="graphite2-devel-1.3.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153577" comment="graphite2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139570" comment="libgraphite2-3-1.3.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153578" comment="libgraphite2-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139571" comment="libgraphite2-3-32bit-1.3.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153579" comment="libgraphite2-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1523</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1523" source="CVE"/>
    <description>
    The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1523.html">CVE-2016-1523</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 967087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1523">SUSE bug 965810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139569" comment="graphite2-devel-1.3.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153577" comment="graphite2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139570" comment="libgraphite2-3-1.3.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153578" comment="libgraphite2-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139571" comment="libgraphite2-3-32bit-1.3.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153579" comment="libgraphite2-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1526</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1526" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1526" source="CVE"/>
    <description>
    The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1526.html">CVE-2016-1526</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 966438</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1526">SUSE bug 965810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139569" comment="graphite2-devel-1.3.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153577" comment="graphite2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139570" comment="libgraphite2-3-1.3.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153578" comment="libgraphite2-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139571" comment="libgraphite2-3-32bit-1.3.1-3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153579" comment="libgraphite2-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1531</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1531" source="CVE"/>
    <description>
    Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1531.html">CVE-2016-1531</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1531">SUSE bug 968844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1531">SUSE bug 968844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1531">SUSE bug 968844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1531">SUSE bug 968844</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162475" comment="exim-4.86.2-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153580" comment="exim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162476" comment="eximon-4.86.2-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153581" comment="eximon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162477" comment="eximstats-html-4.86.2-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153582" comment="eximstats-html is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1541</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1541" source="CVE"/>
    <description>
    Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1541.html">CVE-2016-1541</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1541">SUSE bug 979005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1541">SUSE bug 979005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1541">SUSE bug 979005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1544</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1544" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1544" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1544.html">CVE-2016-1544</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1544">SUSE bug 966514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1544">SUSE bug 966514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1544">SUSE bug 966514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1544">SUSE bug 966514</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139953" comment="libnghttp2-14-1.3.4-3.22 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153583" comment="libnghttp2-14 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1546</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1546" source="CVE"/>
    <description>
    The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service (stream-processing outage) via modified flow-control windows.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1546.html">CVE-2016-1546</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1546">SUSE bug 980370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1546">SUSE bug 980370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1546">SUSE bug 980370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1547</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1547" source="CVE"/>
    <description>
    An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1547.html">CVE-2016-1547</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 962784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1547">SUSE bug 977459</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1548</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1548" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1548" source="CVE"/>
    <description>
    An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-&gt;dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1548.html">CVE-2016-1548</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1548">SUSE bug 977461</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1549</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1549" source="CVE"/>
    <description>
    A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1549.html">CVE-2016-1549</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 977451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1549">SUSE bug 1083424</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1550</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1550" source="CVE"/>
    <description>
    An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1550.html">CVE-2016-1550</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1550">SUSE bug 977464</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1551</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1551" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1551" source="CVE"/>
    <description>
    ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, any packet with a source ip address of a reference clock (127.127.1.1 for example) that reaches the receive() function will match that reference clock's peer record and will be treated as a trusted peer. Any system that lacks the typical martian packet filtering which would block these packets is in danger of having its time controlled by an attacker.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1551.html">CVE-2016-1551</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1551">SUSE bug 977450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1568</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1568" source="CVE"/>
    <description>
    Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1568.html">CVE-2016-1568</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1568">SUSE bug 961332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1568">SUSE bug 961333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1568">SUSE bug 961332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1568">SUSE bug 961332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1568">SUSE bug 961333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1568">SUSE bug 961332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1568">SUSE bug 961332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1568">SUSE bug 961332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1568">SUSE bug 961333</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1570</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1570" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1570" source="CVE"/>
    <description>
    The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1570.html">CVE-2016-1570</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1570">SUSE bug 960861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1570">SUSE bug 960861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1570">SUSE bug 960861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1570">SUSE bug 960861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1570">SUSE bug 960861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1570">SUSE bug 960861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1570">SUSE bug 960861</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1571</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1571" source="CVE"/>
    <description>
    The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1571.html">CVE-2016-1571</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1571">SUSE bug 960861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1571">SUSE bug 960862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1571">SUSE bug 960861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1571">SUSE bug 960862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1571">SUSE bug 960862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1571">SUSE bug 960862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1571">SUSE bug 960862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1571">SUSE bug 960862</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1571">SUSE bug 960862</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1577</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1577" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1577" source="CVE"/>
    <description>
    Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1577.html">CVE-2016-1577</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1577">SUSE bug 968373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1577">SUSE bug 968373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1577">SUSE bug 968373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1577">SUSE bug 968373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1583</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1583" source="CVE"/>
    <description>
    The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1583.html">CVE-2016-1583</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983143</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 983144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1583">SUSE bug 1052256</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1601</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1601" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1601" source="CVE"/>
    <description>
    yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1601.html">CVE-2016-1601</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 973639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 973639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 973639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 973639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1601">SUSE bug 974220</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140426" comment="yast2-users-3.1.58-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153590" comment="yast2-users is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1714</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1714" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1714" source="CVE"/>
    <description>
    The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1714.html">CVE-2016-1714</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1714">SUSE bug 961691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1714">SUSE bug 961692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1714">SUSE bug 961691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1714">SUSE bug 961691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1714">SUSE bug 961692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1714">SUSE bug 961692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1714">SUSE bug 961691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1714">SUSE bug 961692</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161762" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1762</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1762" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1762" source="CVE"/>
    <description>
    The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1762.html">CVE-2016-1762</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1762">SUSE bug 981040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1762">SUSE bug 981040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1762">SUSE bug 981040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1762">SUSE bug 981040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1762">SUSE bug 981040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1762">SUSE bug 981040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1762">SUSE bug 981040</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1833</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1833" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1833" source="CVE"/>
    <description>
    The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1833.html">CVE-2016-1833</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1833">SUSE bug 981108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1833">SUSE bug 981108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1833">SUSE bug 981108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1833">SUSE bug 981108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1833">SUSE bug 981108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1833">SUSE bug 981108</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1834</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1834" source="CVE"/>
    <description>
    Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1834.html">CVE-2016-1834</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1834">SUSE bug 981041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1834">SUSE bug 981041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1834">SUSE bug 981041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1834">SUSE bug 981041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1834">SUSE bug 981041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1834">SUSE bug 981041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1834">SUSE bug 981041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1834">SUSE bug 981041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1834">SUSE bug 981041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1834">SUSE bug 981041</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835" source="CVE"/>
    <description>
    Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1835.html">CVE-2016-1835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1835">SUSE bug 981109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1835">SUSE bug 981109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1835">SUSE bug 981109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1835">SUSE bug 981109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1835">SUSE bug 981109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1836" source="CVE"/>
    <description>
    Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1836.html">CVE-2016-1836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1836">SUSE bug 981110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1836">SUSE bug 981110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1836">SUSE bug 981110</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1837" source="CVE"/>
    <description>
    Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1837.html">CVE-2016-1837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1837">SUSE bug 981111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1837">SUSE bug 981111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1837">SUSE bug 981111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1837">SUSE bug 981111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1837">SUSE bug 981111</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1838</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838" source="CVE"/>
    <description>
    The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1838.html">CVE-2016-1838</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1838">SUSE bug 981112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1838">SUSE bug 981112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1838">SUSE bug 981112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1838">SUSE bug 981112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1838">SUSE bug 981112</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1839</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1839" source="CVE"/>
    <description>
    The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1839.html">CVE-2016-1839</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 981114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 981114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 963963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 981114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 981114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 981114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 981114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 981114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 1039069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1839">SUSE bug 1039661</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156703" comment="libxml2-2.9.4-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156707" comment="libxml2-devel-32bit-2.9.4-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156708" comment="libxml2-doc-2.9.4-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1840</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1840" source="CVE"/>
    <description>
    Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1840.html">CVE-2016-1840</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1840">SUSE bug 981115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1840">SUSE bug 981115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1840">SUSE bug 981115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1840">SUSE bug 981115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1840">SUSE bug 981115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1840">SUSE bug 981115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1840">SUSE bug 981115</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1856</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1856" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1856" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1857.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1856.html">CVE-2016-1856</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139893" comment="libjavascriptcoregtk-4_0-18-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139894" comment="libwebkit2gtk-4_0-37-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139895" comment="libwebkit2gtk3-lang-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139896" comment="typelib-1_0-JavaScriptCore-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139897" comment="typelib-1_0-WebKit2-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139898" comment="webkit2gtk-4_0-injected-bundles-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1857</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1857" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1857" source="CVE"/>
    <description>
    WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1856.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1857.html">CVE-2016-1857</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139893" comment="libjavascriptcoregtk-4_0-18-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139894" comment="libwebkit2gtk-4_0-37-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139895" comment="libwebkit2gtk3-lang-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139896" comment="typelib-1_0-JavaScriptCore-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139897" comment="typelib-1_0-WebKit2-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139898" comment="webkit2gtk-4_0-injected-bundles-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1867</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1867" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1867" source="CVE"/>
    <description>
    The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1867.html">CVE-2016-1867</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1867">SUSE bug 961886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1867">SUSE bug 961886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1867">SUSE bug 961886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1867">SUSE bug 961886</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1897</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1897" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1897" source="CVE"/>
    <description>
    FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1897.html">CVE-2016-1897</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1897">SUSE bug 961937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1897">SUSE bug 961937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1897">SUSE bug 961937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1897">SUSE bug 961937</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1898</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1898" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1898" source="CVE"/>
    <description>
    FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1898.html">CVE-2016-1898</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1898">SUSE bug 961937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1898">SUSE bug 961937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1898">SUSE bug 961937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1898">SUSE bug 961937</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139773" comment="libavcodec57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139774" comment="libavformat57-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139775" comment="libavutil55-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139776" comment="libswresample2-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139777" comment="libswscale4-3.1.3-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1903</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1903" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1903" source="CVE"/>
    <description>
    The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1903.html">CVE-2016-1903</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1903">SUSE bug 962057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1903">SUSE bug 962057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1903">SUSE bug 962057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1903">SUSE bug 962057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1903">SUSE bug 962057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1903">SUSE bug 962057</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1908</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1908" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1908" source="CVE"/>
    <description>
    The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1908.html">CVE-2016-1908</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 1001712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 1005738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 962313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 1087412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1908">SUSE bug 1087412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1922</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1922" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'current_cpu' remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1922.html">CVE-2016-1922</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1922">SUSE bug 962320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1922">SUSE bug 962321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1922">SUSE bug 962320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1922">SUSE bug 962320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1922">SUSE bug 962320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1922">SUSE bug 962321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1922">SUSE bug 962321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1922">SUSE bug 962320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1922">SUSE bug 962321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1922">SUSE bug 962320</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161930" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1930</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1930" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1930.html">CVE-2016-1930</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1930">SUSE bug 963632</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1931</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1931" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1931" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to uninitialized memory encountered during brotli data compression, and other vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1931.html">CVE-2016-1931</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1931">SUSE bug 963633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1931">SUSE bug 963633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1931">SUSE bug 963633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1931">SUSE bug 963633</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1933</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1933" source="CVE"/>
    <description>
    Integer overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted GIF image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1933.html">CVE-2016-1933</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1933">SUSE bug 963634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1933">SUSE bug 963634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1933">SUSE bug 963634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1933">SUSE bug 963634</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1935</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1935" source="CVE"/>
    <description>
    Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1935.html">CVE-2016-1935</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1935">SUSE bug 963635</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1937</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1937" source="CVE"/>
    <description>
    The protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1937.html">CVE-2016-1937</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1937">SUSE bug 963641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1937">SUSE bug 963641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1937">SUSE bug 963641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1937">SUSE bug 963641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1937">SUSE bug 963641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1937">SUSE bug 977736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1937">SUSE bug 977736</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1937">SUSE bug 963641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1937">SUSE bug 977736</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1938</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1938" source="CVE"/>
    <description>
    The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1938.html">CVE-2016-1938</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1938">SUSE bug 963731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1938">SUSE bug 963731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1938">SUSE bug 963731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1938">SUSE bug 963731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1938">SUSE bug 963731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1938">SUSE bug 963731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1938">SUSE bug 963731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1938">SUSE bug 963731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1938">SUSE bug 963731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1938">SUSE bug 963731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1938">SUSE bug 963731</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1939</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1939" source="CVE"/>
    <description>
    Mozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which allows remote attackers to obtain sensitive information by reading HTTP Cookie headers.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7208.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1939.html">CVE-2016-1939</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1939">SUSE bug 963637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1939">SUSE bug 963637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1939">SUSE bug 963637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1939">SUSE bug 963637</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1942</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1942" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1942" source="CVE"/>
    <description>
    Mozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring in the address bar by leveraging a user's paste of a (1) wyciwyg: URI or (2) resource: URI.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1942.html">CVE-2016-1942</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1942">SUSE bug 963643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1942">SUSE bug 963643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1942">SUSE bug 963643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1942">SUSE bug 963643</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161943" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1943</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1943" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1943" source="CVE"/>
    <description>
    Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1943.html">CVE-2016-1943</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1943">SUSE bug 963643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1943">SUSE bug 963643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1943">SUSE bug 963643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1943">SUSE bug 963643</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1944</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1944" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1944" source="CVE"/>
    <description>
    The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0, might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1944.html">CVE-2016-1944</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1944">SUSE bug 963644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1944">SUSE bug 963644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1944">SUSE bug 963644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1944">SUSE bug 963644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1945</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1945" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1945" source="CVE"/>
    <description>
    The nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect use of a pointer during processing of a ZIP archive.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1945.html">CVE-2016-1945</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1945">SUSE bug 963644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1945">SUSE bug 963644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1945">SUSE bug 963644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1945">SUSE bug 963644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1946</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1946" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1946" source="CVE"/>
    <description>
    The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service (integer overflow and buffer overflow) or possibly have unspecified other impact via crafted metadata.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1946.html">CVE-2016-1946</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1946">SUSE bug 963644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1946">SUSE bug 963644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1946">SUSE bug 963644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1946">SUSE bug 963644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1947</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1947" source="CVE"/>
    <description>
    Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1947.html">CVE-2016-1947</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1947">SUSE bug 963645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1947">SUSE bug 963645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1947">SUSE bug 963645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1947">SUSE bug 963645</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161949" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1949</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1949" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1949" source="CVE"/>
    <description>
    Mozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers and plugins, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that triggers spoofed responses to requests that use NPAPI, as demonstrated by a request for a crossdomain.xml file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1949.html">CVE-2016-1949</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1949">SUSE bug 966438</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1949">SUSE bug 966438</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1949">SUSE bug 966438</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1949">SUSE bug 966438</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1949">SUSE bug 966438</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1949">SUSE bug 967087</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1950</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1950" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1950" source="CVE"/>
    <description>
    Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1950.html">CVE-2016-1950</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1950">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1952</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1952" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1952" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1952.html">CVE-2016-1952</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1952">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1953</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1953" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1953" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1953.html">CVE-2016-1953</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1953">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1954</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1954" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1954" source="CVE"/>
    <description>
    The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP report-uri for a Content Security Policy (CSP) violation report, which allows remote attackers to cause a denial of service (data overwrite) or possibly gain privileges by specifying a URL of a local file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1954.html">CVE-2016-1954</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1954">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1955</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1955" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1955" source="CVE"/>
    <description>
    Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy (CSP) violation report that contains path information associated with an IFRAME element.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1955.html">CVE-2016-1955</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1955">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1956</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1956" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1956" source="CVE"/>
    <description>
    Mozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers to cause a denial of service (memory consumption or stack memory corruption) by triggering use of a WebGL shader.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1956.html">CVE-2016-1956</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1956">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1957</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1957" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1957" source="CVE"/>
    <description>
    Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an MPEG-4 file that triggers a delete operation on an array.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1957.html">CVE-2016-1957</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1957">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1958</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1958" source="CVE"/>
    <description>
    browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1958.html">CVE-2016-1958</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1958">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1959</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1959" source="CVE"/>
    <description>
    The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via unspecified use of the Clients API.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1959.html">CVE-2016-1959</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1959">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1960</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1960" source="CVE"/>
    <description>
    Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end tags, as demonstrated by incorrect SVG processing, aka ZDI-CAN-3545.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1960.html">CVE-2016-1960</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1960">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1961</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1961" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1961" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1961.html">CVE-2016-1961</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1961">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1962</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1962" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1962.html">CVE-2016-1962</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1962">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1963</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1963" source="CVE"/>
    <description>
    The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) by changing a file during a FileReader API read operation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1963.html">CVE-2016-1963</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1963">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1964</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1964" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1964" source="CVE"/>
    <description>
    Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging mishandling of XML transformations.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1964.html">CVE-2016-1964</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1964">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1965</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1965" source="CVE"/>
    <description>
    Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1965.html">CVE-2016-1965</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1965">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1966</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1966" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1966" source="CVE"/>
    <description>
    The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference and memory corruption) via a crafted NPAPI plugin.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1966.html">CVE-2016-1966</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1966">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161967" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1967</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1967" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1967" source="CVE"/>
    <description>
    Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1967.html">CVE-2016-1967</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1967">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161968" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1968</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1968" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1968" source="CVE"/>
    <description>
    Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted data with brotli compression.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1968.html">CVE-2016-1968</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1968">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1970</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1970" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1970" source="CVE"/>
    <description>
    Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1970.html">CVE-2016-1970</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1970">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1971</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1971" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1971" source="CVE"/>
    <description>
    The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1971.html">CVE-2016-1971</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1971">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1972</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1972" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1972" source="CVE"/>
    <description>
    Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1972.html">CVE-2016-1972</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1972">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1973</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1973" source="CVE"/>
    <description>
    Race condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox before 45.0 might allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1973.html">CVE-2016-1973</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1973">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1974</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1974" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1974" source="CVE"/>
    <description>
    The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1974.html">CVE-2016-1974</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1974">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1975</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1975" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1975" source="CVE"/>
    <description>
    Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1975.html">CVE-2016-1975</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1975">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1976</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1976" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1976" source="CVE"/>
    <description>
    Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1976.html">CVE-2016-1976</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 969894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 970433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1976">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1977</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1977" source="CVE"/>
    <description>
    The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1977.html">CVE-2016-1977</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1977">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1979</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1979" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1979" source="CVE"/>
    <description>
    Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1979.html">CVE-2016-1979</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1979">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1981</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1981" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1981" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1981.html">CVE-2016-1981</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1981">SUSE bug 963782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1981">SUSE bug 963783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1981">SUSE bug 963783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1981">SUSE bug 963782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1981">SUSE bug 963783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1981">SUSE bug 963782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1981">SUSE bug 963782</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1982</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1982" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1982" source="CVE"/>
    <description>
    The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1982.html">CVE-2016-1982</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1982">SUSE bug 963151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1982">SUSE bug 963151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1982">SUSE bug 963151</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140303" comment="privoxy-3.0.24-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152636" comment="privoxy is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20161983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-1983</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-1983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1983" source="CVE"/>
    <description>
    The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-1983.html">CVE-2016-1983</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1983">SUSE bug 963152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1983">SUSE bug 963152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-1983">SUSE bug 963152</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140303" comment="privoxy-3.0.24-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152636" comment="privoxy is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2037</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2037" source="CVE"/>
    <description>
    The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2037.html">CVE-2016-2037</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 1028410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2037">SUSE bug 963448</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148106" comment="cpio-2.11-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151389" comment="cpio is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148107" comment="cpio-lang-2.11-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151390" comment="cpio-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2047</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2047" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2047" source="CVE"/>
    <description>
    The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2047.html">CVE-2016-2047</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2047">SUSE bug 963806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2047">SUSE bug 963806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2047">SUSE bug 976341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2047">SUSE bug 963806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2047">SUSE bug 963806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2047">SUSE bug 963806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2047">SUSE bug 980904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2047">SUSE bug 963806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2047">SUSE bug 963806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2047">SUSE bug 963806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2052</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2052" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2052.html">CVE-2016-2052</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 989564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2052">SUSE bug 963436</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164015" comment="libreoffice-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164016" comment="libreoffice-base-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164017" comment="libreoffice-base-drivers-mysql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164018" comment="libreoffice-base-drivers-postgresql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153330" comment="libreoffice-base-drivers-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164019" comment="libreoffice-branding-upstream-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164020" comment="libreoffice-calc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164021" comment="libreoffice-calc-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164022" comment="libreoffice-draw-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164023" comment="libreoffice-filters-optional-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164024" comment="libreoffice-gdb-pretty-printers-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153331" comment="libreoffice-gdb-pretty-printers is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164025" comment="libreoffice-glade-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153332" comment="libreoffice-glade is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164026" comment="libreoffice-gnome-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164027" comment="libreoffice-gtk3-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164028" comment="libreoffice-icon-theme-breeze-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164029" comment="libreoffice-icon-theme-galaxy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164030" comment="libreoffice-icon-theme-hicontrast-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164031" comment="libreoffice-icon-theme-oxygen-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164032" comment="libreoffice-icon-theme-sifr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164033" comment="libreoffice-icon-theme-tango-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164034" comment="libreoffice-impress-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164035" comment="libreoffice-kde4-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164036" comment="libreoffice-l10n-af-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153334" comment="libreoffice-l10n-af is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164037" comment="libreoffice-l10n-ar-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164038" comment="libreoffice-l10n-as-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153336" comment="libreoffice-l10n-as is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164039" comment="libreoffice-l10n-bg-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164040" comment="libreoffice-l10n-bn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153338" comment="libreoffice-l10n-bn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164041" comment="libreoffice-l10n-br-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153339" comment="libreoffice-l10n-br is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164042" comment="libreoffice-l10n-ca-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164043" comment="libreoffice-l10n-cs-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164044" comment="libreoffice-l10n-cy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153341" comment="libreoffice-l10n-cy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164045" comment="libreoffice-l10n-da-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164046" comment="libreoffice-l10n-de-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164047" comment="libreoffice-l10n-dz-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153342" comment="libreoffice-l10n-dz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164048" comment="libreoffice-l10n-el-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164049" comment="libreoffice-l10n-en-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164050" comment="libreoffice-l10n-es-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164051" comment="libreoffice-l10n-et-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164052" comment="libreoffice-l10n-eu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153344" comment="libreoffice-l10n-eu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164053" comment="libreoffice-l10n-fa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164054" comment="libreoffice-l10n-fi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164055" comment="libreoffice-l10n-fr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164056" comment="libreoffice-l10n-ga-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153347" comment="libreoffice-l10n-ga is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164057" comment="libreoffice-l10n-gl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153348" comment="libreoffice-l10n-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164058" comment="libreoffice-l10n-gu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153349" comment="libreoffice-l10n-gu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164059" comment="libreoffice-l10n-he-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153350" comment="libreoffice-l10n-he is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164060" comment="libreoffice-l10n-hi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153351" comment="libreoffice-l10n-hi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164061" comment="libreoffice-l10n-hr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153352" comment="libreoffice-l10n-hr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164062" comment="libreoffice-l10n-hu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164063" comment="libreoffice-l10n-it-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164064" comment="libreoffice-l10n-ja-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164065" comment="libreoffice-l10n-kk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153353" comment="libreoffice-l10n-kk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164066" comment="libreoffice-l10n-kn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153354" comment="libreoffice-l10n-kn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164067" comment="libreoffice-l10n-ko-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164068" comment="libreoffice-l10n-lt-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164069" comment="libreoffice-l10n-lv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153357" comment="libreoffice-l10n-lv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164070" comment="libreoffice-l10n-mai-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153358" comment="libreoffice-l10n-mai is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164071" comment="libreoffice-l10n-ml-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153359" comment="libreoffice-l10n-ml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164072" comment="libreoffice-l10n-mr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153360" comment="libreoffice-l10n-mr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164073" comment="libreoffice-l10n-nb-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164074" comment="libreoffice-l10n-nl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164075" comment="libreoffice-l10n-nn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153363" comment="libreoffice-l10n-nn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164076" comment="libreoffice-l10n-nr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153364" comment="libreoffice-l10n-nr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164077" comment="libreoffice-l10n-nso-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153365" comment="libreoffice-l10n-nso is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164078" comment="libreoffice-l10n-or-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153366" comment="libreoffice-l10n-or is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164079" comment="libreoffice-l10n-pa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153367" comment="libreoffice-l10n-pa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164080" comment="libreoffice-l10n-pl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164081" comment="libreoffice-l10n-pt_BR-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164082" comment="libreoffice-l10n-pt_PT-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158759" comment="libreoffice-l10n-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164083" comment="libreoffice-l10n-ro-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153370" comment="libreoffice-l10n-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164084" comment="libreoffice-l10n-ru-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164085" comment="libreoffice-l10n-si-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153371" comment="libreoffice-l10n-si is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164086" comment="libreoffice-l10n-sk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164087" comment="libreoffice-l10n-sl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164088" comment="libreoffice-l10n-sr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153374" comment="libreoffice-l10n-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164089" comment="libreoffice-l10n-ss-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153375" comment="libreoffice-l10n-ss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164090" comment="libreoffice-l10n-st-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153376" comment="libreoffice-l10n-st is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164091" comment="libreoffice-l10n-sv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164092" comment="libreoffice-l10n-ta-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153378" comment="libreoffice-l10n-ta is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164093" comment="libreoffice-l10n-te-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153379" comment="libreoffice-l10n-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164094" comment="libreoffice-l10n-th-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153380" comment="libreoffice-l10n-th is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164095" comment="libreoffice-l10n-tn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153381" comment="libreoffice-l10n-tn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164096" comment="libreoffice-l10n-tr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153382" comment="libreoffice-l10n-tr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164097" comment="libreoffice-l10n-ts-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153383" comment="libreoffice-l10n-ts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164098" comment="libreoffice-l10n-uk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164099" comment="libreoffice-l10n-ve-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153385" comment="libreoffice-l10n-ve is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164100" comment="libreoffice-l10n-xh-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153386" comment="libreoffice-l10n-xh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164101" comment="libreoffice-l10n-zh_CN-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164102" comment="libreoffice-l10n-zh_TW-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164103" comment="libreoffice-l10n-zu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153389" comment="libreoffice-l10n-zu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164104" comment="libreoffice-mailmerge-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164105" comment="libreoffice-math-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164106" comment="libreoffice-officebean-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153390" comment="libreoffice-officebean is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164107" comment="libreoffice-pyuno-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164108" comment="libreoffice-sdk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153391" comment="libreoffice-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164109" comment="libreoffice-sdk-doc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153392" comment="libreoffice-sdk-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164110" comment="libreoffice-writer-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164111" comment="libreoffice-writer-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164112" comment="libreofficekit-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164113" comment="libreofficekit-devel-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153394" comment="libreofficekit-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2089</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2089" source="CVE"/>
    <description>
    The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2089.html">CVE-2016-2089</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2089">SUSE bug 963983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2089">SUSE bug 963983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2089">SUSE bug 963983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2089">SUSE bug 963983</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2099</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2099" source="CVE"/>
    <description>
    Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2099.html">CVE-2016-2099</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2099">SUSE bug 979208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2099">SUSE bug 979208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2099">SUSE bug 979208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2099">SUSE bug 979208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2099">SUSE bug 979208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2099">SUSE bug 979208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2099">SUSE bug 979208</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140229" comment="libxerces-c-3_1-3.1.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151260" comment="libxerces-c-3_1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2105</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105" source="CVE"/>
    <description>
    Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2105.html">CVE-2016-2105</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 978492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 989902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 990369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 990370</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 991918</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 1025347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2105">SUSE bug 977614</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2106</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106" source="CVE"/>
    <description>
    Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2106.html">CVE-2016-2106</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 978492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 990369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 1025347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2106">SUSE bug 977615</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2107</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107" source="CVE"/>
    <description>
    The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2107.html">CVE-2016-2107</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 978492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 977616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 990369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2107">SUSE bug 990370</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2109</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109" source="CVE"/>
    <description>
    The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2109.html">CVE-2016-2109</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 977584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 978492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 977584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 977584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 990369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 976942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 1015243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2109">SUSE bug 1025347</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2110</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2110" source="CVE"/>
    <description>
    The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2110.html">CVE-2016-2110</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 1009711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 1009711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 1009711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2110">SUSE bug 973036</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2111</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2111" source="CVE"/>
    <description>
    The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2111.html">CVE-2016-2111</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2111">SUSE bug 973032</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2112</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2112" source="CVE"/>
    <description>
    The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2112.html">CVE-2016-2112</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2112">SUSE bug 973033</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2113</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2113" source="CVE"/>
    <description>
    Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2113.html">CVE-2016-2113</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2113">SUSE bug 973033</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2115</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2115" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2115" source="CVE"/>
    <description>
    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2115.html">CVE-2016-2115</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2115">SUSE bug 973036</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2116</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2116" source="CVE"/>
    <description>
    Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2116.html">CVE-2016-2116</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2116">SUSE bug 968373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2116">SUSE bug 968373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2116">SUSE bug 968373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2116">SUSE bug 968373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2117</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2117" source="CVE"/>
    <description>
    The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2117.html">CVE-2016-2117</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2117">SUSE bug 968697</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150470" comment="kernel-debug-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150471" comment="kernel-debug-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150472" comment="kernel-debug-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150473" comment="kernel-default-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150474" comment="kernel-default-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150475" comment="kernel-default-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150476" comment="kernel-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150477" comment="kernel-docs-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150478" comment="kernel-docs-html-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150479" comment="kernel-docs-pdf-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150480" comment="kernel-macros-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150481" comment="kernel-obs-build-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150482" comment="kernel-obs-qa-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150483" comment="kernel-source-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150484" comment="kernel-source-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150485" comment="kernel-syms-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150486" comment="kernel-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150487" comment="kernel-vanilla-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150488" comment="kernel-vanilla-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2118</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2118" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2118" source="CVE"/>
    <description>
    The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2118.html">CVE-2016-2118</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 975276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2118">SUSE bug 971965</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2119</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2119" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2119" source="CVE"/>
    <description>
    libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the (1) SMB2_SESSION_FLAG_IS_GUEST or (2) SMB2_SESSION_FLAG_IS_NULL flag.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2119.html">CVE-2016-2119</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2119">SUSE bug 986869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2119">SUSE bug 986869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2119">SUSE bug 986869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2119">SUSE bug 986869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2119">SUSE bug 986869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2119">SUSE bug 986869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2119">SUSE bug 986869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2119">SUSE bug 986869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2119">SUSE bug 986869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2119">SUSE bug 986869</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139791" comment="libdcerpc-binding0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139792" comment="libdcerpc-binding0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139793" comment="libdcerpc0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139794" comment="libdcerpc0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139795" comment="libndr-krb5pac0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139796" comment="libndr-krb5pac0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139797" comment="libndr-nbt0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139798" comment="libndr-nbt0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139799" comment="libndr-standard0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139800" comment="libndr-standard0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139801" comment="libndr0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139802" comment="libndr0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139803" comment="libnetapi0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139804" comment="libnetapi0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139805" comment="libsamba-credentials0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139806" comment="libsamba-credentials0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139807" comment="libsamba-errors0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139808" comment="libsamba-errors0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139809" comment="libsamba-hostconfig0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139810" comment="libsamba-hostconfig0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139811" comment="libsamba-passdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139812" comment="libsamba-passdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139813" comment="libsamba-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139814" comment="libsamba-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139815" comment="libsamdb0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139816" comment="libsamdb0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139817" comment="libsmbclient-devel-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139818" comment="libsmbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139819" comment="libsmbconf0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139820" comment="libsmbconf0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139821" comment="libsmbldap0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139822" comment="libsmbldap0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139823" comment="libtevent-util0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139824" comment="libtevent-util0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139825" comment="libwbclient0-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139826" comment="libwbclient0-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139827" comment="samba-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139828" comment="samba-client-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139829" comment="samba-client-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139830" comment="samba-doc-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139831" comment="samba-libs-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139832" comment="samba-libs-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139833" comment="samba-winbind-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139834" comment="samba-winbind-32bit-4.4.2-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2120</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2120" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2120" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2120.html">CVE-2016-2120</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2120">SUSE bug 1018329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2120">SUSE bug 1018329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2120">SUSE bug 1018329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2120">SUSE bug 1018329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2120">SUSE bug 1018329</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147273" comment="pdns-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152980" comment="pdns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147274" comment="pdns-backend-ldap-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152981" comment="pdns-backend-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147275" comment="pdns-backend-lua-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152982" comment="pdns-backend-lua is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147276" comment="pdns-backend-mydns-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152983" comment="pdns-backend-mydns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147277" comment="pdns-backend-mysql-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152984" comment="pdns-backend-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147278" comment="pdns-backend-postgresql-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152985" comment="pdns-backend-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147279" comment="pdns-backend-sqlite3-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152986" comment="pdns-backend-sqlite3 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2123</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2123" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2123" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2123.html">CVE-2016-2123</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2123">SUSE bug 1014437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2123">SUSE bug 1014437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2123">SUSE bug 1014437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2123">SUSE bug 1014437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2123">SUSE bug 1014437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2123">SUSE bug 1014437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2123">SUSE bug 1014437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2123">SUSE bug 1014437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2123">SUSE bug 1014437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2123">SUSE bug 1014437</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146433" comment="ctdb-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146434" comment="ctdb-tests-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146435" comment="libdcerpc-binding0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146436" comment="libdcerpc-binding0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146437" comment="libdcerpc-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146438" comment="libdcerpc-samr-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146439" comment="libdcerpc-samr0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146440" comment="libdcerpc-samr0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146441" comment="libdcerpc0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146442" comment="libdcerpc0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146443" comment="libndr-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146444" comment="libndr-krb5pac-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146445" comment="libndr-krb5pac0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146446" comment="libndr-krb5pac0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146447" comment="libndr-nbt-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146448" comment="libndr-nbt0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146449" comment="libndr-nbt0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146450" comment="libndr-standard-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146451" comment="libndr-standard0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146452" comment="libndr-standard0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146453" comment="libndr0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146454" comment="libndr0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146455" comment="libnetapi-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146456" comment="libnetapi0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146457" comment="libnetapi0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146458" comment="libsamba-credentials-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146459" comment="libsamba-credentials0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146460" comment="libsamba-credentials0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146461" comment="libsamba-errors-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146462" comment="libsamba-errors0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146463" comment="libsamba-errors0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146464" comment="libsamba-hostconfig-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146465" comment="libsamba-hostconfig0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146466" comment="libsamba-hostconfig0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146467" comment="libsamba-passdb-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146468" comment="libsamba-passdb0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146469" comment="libsamba-passdb0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146470" comment="libsamba-policy-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146471" comment="libsamba-policy0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146472" comment="libsamba-policy0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146473" comment="libsamba-util-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146474" comment="libsamba-util0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146475" comment="libsamba-util0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146476" comment="libsamdb-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146477" comment="libsamdb0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146478" comment="libsamdb0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146479" comment="libsmbclient-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146480" comment="libsmbclient0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146481" comment="libsmbclient0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146482" comment="libsmbconf-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146483" comment="libsmbconf0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146484" comment="libsmbconf0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146485" comment="libsmbldap-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146486" comment="libsmbldap0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146487" comment="libsmbldap0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146488" comment="libtevent-util-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146489" comment="libtevent-util0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146490" comment="libtevent-util0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146491" comment="libwbclient-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146492" comment="libwbclient0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146493" comment="libwbclient0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146494" comment="samba-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146495" comment="samba-client-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146496" comment="samba-client-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146497" comment="samba-core-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146498" comment="samba-doc-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146499" comment="samba-libs-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146500" comment="samba-libs-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146501" comment="samba-pidl-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152776" comment="samba-pidl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146502" comment="samba-python-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146503" comment="samba-test-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146504" comment="samba-winbind-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146505" comment="samba-winbind-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2125</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2125" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2125.html">CVE-2016-2125</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2125">SUSE bug 1014441</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146433" comment="ctdb-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146434" comment="ctdb-tests-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146435" comment="libdcerpc-binding0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146436" comment="libdcerpc-binding0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146437" comment="libdcerpc-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146438" comment="libdcerpc-samr-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146439" comment="libdcerpc-samr0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146440" comment="libdcerpc-samr0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146441" comment="libdcerpc0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146442" comment="libdcerpc0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146443" comment="libndr-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146444" comment="libndr-krb5pac-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146445" comment="libndr-krb5pac0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146446" comment="libndr-krb5pac0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146447" comment="libndr-nbt-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146448" comment="libndr-nbt0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146449" comment="libndr-nbt0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146450" comment="libndr-standard-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146451" comment="libndr-standard0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146452" comment="libndr-standard0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146453" comment="libndr0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146454" comment="libndr0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146455" comment="libnetapi-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146456" comment="libnetapi0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146457" comment="libnetapi0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146458" comment="libsamba-credentials-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146459" comment="libsamba-credentials0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146460" comment="libsamba-credentials0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146461" comment="libsamba-errors-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146462" comment="libsamba-errors0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146463" comment="libsamba-errors0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146464" comment="libsamba-hostconfig-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146465" comment="libsamba-hostconfig0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146466" comment="libsamba-hostconfig0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146467" comment="libsamba-passdb-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146468" comment="libsamba-passdb0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146469" comment="libsamba-passdb0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146470" comment="libsamba-policy-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146471" comment="libsamba-policy0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146472" comment="libsamba-policy0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146473" comment="libsamba-util-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146474" comment="libsamba-util0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146475" comment="libsamba-util0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146476" comment="libsamdb-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146477" comment="libsamdb0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146478" comment="libsamdb0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146479" comment="libsmbclient-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146480" comment="libsmbclient0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146481" comment="libsmbclient0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146482" comment="libsmbconf-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146483" comment="libsmbconf0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146484" comment="libsmbconf0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146485" comment="libsmbldap-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146486" comment="libsmbldap0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146487" comment="libsmbldap0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146488" comment="libtevent-util-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146489" comment="libtevent-util0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146490" comment="libtevent-util0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146491" comment="libwbclient-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146492" comment="libwbclient0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146493" comment="libwbclient0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146494" comment="samba-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146495" comment="samba-client-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146496" comment="samba-client-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146497" comment="samba-core-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146498" comment="samba-doc-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146499" comment="samba-libs-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146500" comment="samba-libs-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146501" comment="samba-pidl-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152776" comment="samba-pidl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146502" comment="samba-python-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146503" comment="samba-test-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146504" comment="samba-winbind-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146505" comment="samba-winbind-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2126</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2126" source="CVE"/>
    <description>
    Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2126.html">CVE-2016-2126</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2126">SUSE bug 1014442</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146433" comment="ctdb-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146434" comment="ctdb-tests-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146435" comment="libdcerpc-binding0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146436" comment="libdcerpc-binding0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146437" comment="libdcerpc-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146438" comment="libdcerpc-samr-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146439" comment="libdcerpc-samr0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146440" comment="libdcerpc-samr0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146441" comment="libdcerpc0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146442" comment="libdcerpc0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146443" comment="libndr-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146444" comment="libndr-krb5pac-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146445" comment="libndr-krb5pac0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146446" comment="libndr-krb5pac0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146447" comment="libndr-nbt-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146448" comment="libndr-nbt0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146449" comment="libndr-nbt0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146450" comment="libndr-standard-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146451" comment="libndr-standard0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146452" comment="libndr-standard0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146453" comment="libndr0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146454" comment="libndr0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146455" comment="libnetapi-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146456" comment="libnetapi0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146457" comment="libnetapi0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146458" comment="libsamba-credentials-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146459" comment="libsamba-credentials0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146460" comment="libsamba-credentials0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146461" comment="libsamba-errors-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146462" comment="libsamba-errors0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146463" comment="libsamba-errors0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146464" comment="libsamba-hostconfig-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146465" comment="libsamba-hostconfig0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146466" comment="libsamba-hostconfig0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146467" comment="libsamba-passdb-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146468" comment="libsamba-passdb0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146469" comment="libsamba-passdb0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146470" comment="libsamba-policy-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146471" comment="libsamba-policy0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146472" comment="libsamba-policy0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146473" comment="libsamba-util-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146474" comment="libsamba-util0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146475" comment="libsamba-util0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146476" comment="libsamdb-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146477" comment="libsamdb0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146478" comment="libsamdb0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146479" comment="libsmbclient-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146480" comment="libsmbclient0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146481" comment="libsmbclient0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146482" comment="libsmbconf-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146483" comment="libsmbconf0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146484" comment="libsmbconf0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146485" comment="libsmbldap-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146486" comment="libsmbldap0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146487" comment="libsmbldap0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146488" comment="libtevent-util-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146489" comment="libtevent-util0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146490" comment="libtevent-util0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146491" comment="libwbclient-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146492" comment="libwbclient0-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146493" comment="libwbclient0-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146494" comment="samba-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146495" comment="samba-client-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146496" comment="samba-client-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146497" comment="samba-core-devel-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146498" comment="samba-doc-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146499" comment="samba-libs-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146500" comment="samba-libs-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146501" comment="samba-pidl-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152776" comment="samba-pidl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146502" comment="samba-python-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146503" comment="samba-test-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146504" comment="samba-winbind-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146505" comment="samba-winbind-32bit-4.4.2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2143" source="CVE"/>
    <description>
    The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2143.html">CVE-2016-2143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 987099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 970504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2143">SUSE bug 993872</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2150</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2150" source="CVE"/>
    <description>
    SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2150.html">CVE-2016-2150</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982385</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2150">SUSE bug 982386</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140097" comment="libspice-server1-0.12.7-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2161</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2161" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2161" source="CVE"/>
    <description>
    In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2161.html">CVE-2016-2161</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1033513</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2161">SUSE bug 1016714</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150428" comment="apache2-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150429" comment="apache2-devel-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150430" comment="apache2-doc-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150431" comment="apache2-event-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153274" comment="apache2-event is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150432" comment="apache2-example-pages-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150433" comment="apache2-prefork-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150434" comment="apache2-utils-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150435" comment="apache2-worker-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153275" comment="apache2-worker is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2167</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2167" source="CVE"/>
    <description>
    The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repository realm string.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2167.html">CVE-2016-2167</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2167">SUSE bug 976849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2167">SUSE bug 976849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2167">SUSE bug 976849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2167">SUSE bug 976849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2167">SUSE bug 976849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2167">SUSE bug 976849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2167">SUSE bug 976849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162168" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2168</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2168" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2168" source="CVE"/>
    <description>
    The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via a crafted header in a (1) MOVE or (2) COPY request, involving an authorization check.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2168.html">CVE-2016-2168</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2168">SUSE bug 976850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2168">SUSE bug 976850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2168">SUSE bug 976850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2168">SUSE bug 976850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2168">SUSE bug 976850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2168">SUSE bug 976850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2168">SUSE bug 976850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140112" comment="libsvn_auth_gnome_keyring-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140113" comment="libsvn_auth_kwallet-1-0-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140114" comment="subversion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140115" comment="subversion-bash-completion-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140116" comment="subversion-devel-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140117" comment="subversion-perl-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140118" comment="subversion-python-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140119" comment="subversion-server-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140120" comment="subversion-tools-1.9.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2176</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2176" source="CVE"/>
    <description>
    The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2176.html">CVE-2016-2176</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2176">SUSE bug 978224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2176">SUSE bug 978224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2176">SUSE bug 978224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2176">SUSE bug 990369</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2177</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" source="CVE"/>
    <description>
    OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2177.html">CVE-2016-2177</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 999075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 999075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 999075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 999075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2177">SUSE bug 982575</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2178</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" source="CVE"/>
    <description>
    The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2178.html">CVE-2016-2178</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983519</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2178">SUSE bug 983249</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2179</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" source="CVE"/>
    <description>
    The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2179.html">CVE-2016-2179</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2179">SUSE bug 994844</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2180</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" source="CVE"/>
    <description>
    The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the "openssl ts" command.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2180.html">CVE-2016-2180</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 1003811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2180">SUSE bug 990419</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2181</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" source="CVE"/>
    <description>
    The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2181.html">CVE-2016-2181</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2181">SUSE bug 994749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2182</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" source="CVE"/>
    <description>
    The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2182.html">CVE-2016-2182</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 995959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2182">SUSE bug 993819</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2183</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2183" source="CVE"/>
    <description>
    The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2183.html">CVE-2016-2183</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1020747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1024218</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1034689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1027038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 1001912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2183">SUSE bug 995359</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2184</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2184" source="CVE"/>
    <description>
    The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2184.html">CVE-2016-2184</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2184">SUSE bug 971125</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2185</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2185" source="CVE"/>
    <description>
    The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2185.html">CVE-2016-2185</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2185">SUSE bug 971124</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2186</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2186" source="CVE"/>
    <description>
    The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2186.html">CVE-2016-2186</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2186">SUSE bug 970958</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2188</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2188" source="CVE"/>
    <description>
    The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2188.html">CVE-2016-2188</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 970956</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2188">SUSE bug 1067912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2191" source="CVE"/>
    <description>
    The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2191.html">CVE-2016-2191</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2191">SUSE bug 973992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2191">SUSE bug 973992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2191">SUSE bug 973992</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140273" comment="optipng-0.7.5-8.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153607" comment="optipng is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2198</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2198" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2198.html">CVE-2016-2198</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2198">SUSE bug 964413</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2198">SUSE bug 964415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2198">SUSE bug 964415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2198">SUSE bug 964415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2198">SUSE bug 964415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2198">SUSE bug 964413</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2198">SUSE bug 964413</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2270</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2270" source="CVE"/>
    <description>
    Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2270.html">CVE-2016-2270</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2270">SUSE bug 965315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2270">SUSE bug 965315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2270">SUSE bug 965315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2270">SUSE bug 965315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2270">SUSE bug 965315</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2271</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2271" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2271" source="CVE"/>
    <description>
    VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2271.html">CVE-2016-2271</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2271">SUSE bug 965317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2271">SUSE bug 965317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2271">SUSE bug 965317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2271">SUSE bug 965317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2271">SUSE bug 965317</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2312</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2312" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2312" source="CVE"/>
    <description>
    Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2312.html">CVE-2016-2312</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2312">SUSE bug 964548</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2312">SUSE bug 968966</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139658" comment="kscreenlocker-5.8.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154223" comment="kscreenlocker is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139659" comment="kscreenlocker-lang-5.8.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154224" comment="kscreenlocker-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139660" comment="libKScreenLocker5-5.8.2-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154225" comment="libKScreenLocker5 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162315" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2315</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2315" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2315" source="CVE"/>
    <description>
    revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2315.html">CVE-2016-2315</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2315">SUSE bug 971328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2315">SUSE bug 971328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2315">SUSE bug 971328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2315">SUSE bug 971328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2315">SUSE bug 971328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2315">SUSE bug 971328</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139494" comment="git-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151600" comment="git is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139495" comment="git-core-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151601" comment="git-core is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139496" comment="git-cvs-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151602" comment="git-cvs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139497" comment="git-daemon-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151603" comment="git-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139498" comment="git-email-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151604" comment="git-email is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139499" comment="git-gui-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151605" comment="git-gui is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139500" comment="git-svn-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151606" comment="git-svn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139501" comment="git-web-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151607" comment="git-web is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139502" comment="gitk-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151608" comment="gitk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2317</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2317" source="CVE"/>
    <description>
    Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in magick/utility.c, and (3) GetTransformTokens function in coders/svg.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2317.html">CVE-2016-2317</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 965853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 965853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 965853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 965853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 965853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 965853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 965853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 965853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 965853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 999673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 999673</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2317">SUSE bug 999673</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139159" comment="GraphicsMagick-devel-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139160" comment="libGraphicsMagick-Q16-3-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139161" comment="libGraphicsMagick3-config-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139162" comment="libGraphicsMagickWand-Q16-2-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2324</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2324" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2324" source="CVE"/>
    <description>
    Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2324.html">CVE-2016-2324</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2324">SUSE bug 971328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2324">SUSE bug 971328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2324">SUSE bug 971328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2324">SUSE bug 971328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2324">SUSE bug 971328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2324">SUSE bug 971328</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139494" comment="git-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151600" comment="git is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139495" comment="git-core-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151601" comment="git-core is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139496" comment="git-cvs-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151602" comment="git-cvs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139497" comment="git-daemon-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151603" comment="git-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139498" comment="git-email-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151604" comment="git-email is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139499" comment="git-gui-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151605" comment="git-gui is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139500" comment="git-svn-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151606" comment="git-svn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139501" comment="git-web-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151607" comment="git-web is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139502" comment="gitk-2.10.0-1.5 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151608" comment="gitk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162335" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2335</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2335" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2335" source="CVE"/>
    <description>
    The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2335.html">CVE-2016-2335</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2335">SUSE bug 979823</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140275" comment="p7zip-9.20.1-15.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152637" comment="p7zip is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2339</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2339" source="CVE"/>
    <description>
    An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Ruby. In Fiddle::Function.new "initialize" heap buffer "arg_types" allocation is made based on args array length. Specially constructed object passed as element of args array can increase this array size after mentioned allocation and cause heap overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2339.html">CVE-2016-2339</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2339">SUSE bug 1018808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2339">SUSE bug 1018808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2339">SUSE bug 1018808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2339">SUSE bug 1018808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2339">SUSE bug 1018808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2339">SUSE bug 1018808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2339">SUSE bug 1018808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2339">SUSE bug 1018808</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154826" comment="libruby2_1-2_1-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152217" comment="libruby2_1-2_1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150587" comment="libruby2_2-2_2-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153052" comment="libruby2_2-2_2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150588" comment="libruby2_3-2_3-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154131" comment="libruby2_3-2_3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154827" comment="ruby2.1-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152218" comment="ruby2.1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154828" comment="ruby2.1-devel-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152219" comment="ruby2.1-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154829" comment="ruby2.1-devel-extra-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154837" comment="ruby2.1-devel-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154830" comment="ruby2.1-doc-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154839" comment="ruby2.1-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154831" comment="ruby2.1-doc-ri-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154841" comment="ruby2.1-doc-ri is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154832" comment="ruby2.1-stdlib-2.1.9-8.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152220" comment="ruby2.1-stdlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150589" comment="ruby2.2-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153053" comment="ruby2.2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150590" comment="ruby2.2-devel-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153054" comment="ruby2.2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150591" comment="ruby2.2-devel-extra-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153055" comment="ruby2.2-devel-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150592" comment="ruby2.2-doc-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153056" comment="ruby2.2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150593" comment="ruby2.2-doc-ri-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153057" comment="ruby2.2-doc-ri is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150594" comment="ruby2.2-stdlib-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153058" comment="ruby2.2-stdlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150595" comment="ruby2.2-tk-2.2.6-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153059" comment="ruby2.2-tk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150596" comment="ruby2.3-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154132" comment="ruby2.3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150597" comment="ruby2.3-devel-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154133" comment="ruby2.3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150598" comment="ruby2.3-devel-extra-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154134" comment="ruby2.3-devel-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150599" comment="ruby2.3-doc-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154135" comment="ruby2.3-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150600" comment="ruby2.3-doc-ri-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154136" comment="ruby2.3-doc-ri is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150601" comment="ruby2.3-stdlib-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154137" comment="ruby2.3-stdlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150602" comment="ruby2.3-tk-2.3.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154138" comment="ruby2.3-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2342</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2342" source="CVE"/>
    <description>
    The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 configuration is used, relies on a Labeled-VPN SAFI routes-data length field during a data copy, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2342.html">CVE-2016-2342</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2342">SUSE bug 970952</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140348" comment="quagga-0.99.24.1-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151418" comment="quagga is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2381</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2381" source="CVE"/>
    <description>
    Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2381.html">CVE-2016-2381</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2381">SUSE bug 967082</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140286" comment="perl-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140287" comment="perl-32bit-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140288" comment="perl-base-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140289" comment="perl-doc-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2383</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2383" source="CVE"/>
    <description>
    The adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2383.html">CVE-2016-2383</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2383">SUSE bug 966684</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2384</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2384" source="CVE"/>
    <description>
    Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (panic) or possibly have unspecified other impact via vectors involving an invalid USB descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2384.html">CVE-2016-2384</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 967773</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 967773</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 967773</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 967773</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 967773</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 967773</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 967773</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 967773</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 967773</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2384">SUSE bug 966693</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2390</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2390" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2390" source="CVE"/>
    <description>
    The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl option, which allows remote attackers to cause a denial of service (application crash) via a plaintext HTTP message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2390.html">CVE-2016-2390</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2390">SUSE bug 967011</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2391</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2391" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2391" source="CVE"/>
    <description>
    The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2391.html">CVE-2016-2391</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2391">SUSE bug 967013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2391">SUSE bug 967101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2391">SUSE bug 967101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2391">SUSE bug 967012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2391">SUSE bug 967012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2391">SUSE bug 967012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2391">SUSE bug 967101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2391">SUSE bug 967013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2391">SUSE bug 967013</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2392</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2392" source="CVE"/>
    <description>
    The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2392.html">CVE-2016-2392</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2392">SUSE bug 967012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2392">SUSE bug 967090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2392">SUSE bug 967090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2392">SUSE bug 967012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2392">SUSE bug 967090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2392">SUSE bug 967012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2392">SUSE bug 967012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2392">SUSE bug 967090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2392">SUSE bug 967012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2392">SUSE bug 967012</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2399</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2399" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2399" source="CVE"/>
    <description>
    Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2399.html">CVE-2016-2399</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2399">SUSE bug 1022805</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148795" comment="libquicktime-1.2.4cvs20150223-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153614" comment="libquicktime is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148796" comment="libquicktime-devel-1.2.4cvs20150223-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153615" comment="libquicktime-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148797" comment="libquicktime-tools-1.2.4cvs20150223-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153616" comment="libquicktime-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148798" comment="libquicktime0-1.2.4cvs20150223-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148799" comment="libquicktime0-32bit-1.2.4cvs20150223-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153618" comment="libquicktime0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2516</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2516" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2516" source="CVE"/>
    <description>
    NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2516.html">CVE-2016-2516</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 0</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2516">SUSE bug 977452</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2517</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2517" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2517" source="CVE"/>
    <description>
    NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey.  NOTE: this vulnerability exists because of a CVE-2016-2516 regression.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2517.html">CVE-2016-2517</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 0</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2517">SUSE bug 977455</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2518</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2518" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2518" source="CVE"/>
    <description>
    The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2518.html">CVE-2016-2518</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2518">SUSE bug 977457</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2519</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2519" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2519" source="CVE"/>
    <description>
    ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2519.html">CVE-2016-2519</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 959243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 0</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2519">SUSE bug 977458</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2522</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2522" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2522" source="CVE"/>
    <description>
    The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 2.0.x before 2.0.2 does not verify that a certain length is nonzero, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2522.html">CVE-2016-2522</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2522">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2522">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2522">SUSE bug 968565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2523</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2523" source="CVE"/>
    <description>
    The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2523.html">CVE-2016-2523</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2523">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2523">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2523">SUSE bug 968565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2524</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2524" source="CVE"/>
    <description>
    epan/dissectors/packet-x509af.c in the X.509AF dissector in Wireshark 2.0.x before 2.0.2 mishandles the algorithm ID, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2524.html">CVE-2016-2524</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2524">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2524">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2524">SUSE bug 968565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2525</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2525" source="CVE"/>
    <description>
    epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2525.html">CVE-2016-2525</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2525">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2525">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2525">SUSE bug 968565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2526</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2526" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2526" source="CVE"/>
    <description>
    epan/dissectors/packet-hiqnet.c in the HiQnet dissector in Wireshark 2.0.x before 2.0.2 does not validate the data type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2526.html">CVE-2016-2526</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2526">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2526">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2526">SUSE bug 968565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2527</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2527" source="CVE"/>
    <description>
    wiretap/nettrace_3gpp_32_423.c in the 3GPP TS 32.423 Trace file parser in Wireshark 2.0.x before 2.0.2 does not ensure that a '\0' character is present at the end of certain strings, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2527.html">CVE-2016-2527</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2527">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2527">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2527">SUSE bug 968565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2528</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2528" source="CVE"/>
    <description>
    The dissect_nhdr_extopt function in epan/dissectors/packet-lbmc.c in the LBMC dissector in Wireshark 2.0.x before 2.0.2 does not validate length values, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2528.html">CVE-2016-2528</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2528">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2528">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2528">SUSE bug 968565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2529</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2529" source="CVE"/>
    <description>
    The iseries_check_file_type function in wiretap/iseries.c in the iSeries file parser in Wireshark 2.0.x before 2.0.2 does not consider that a line may lack the "OBJECT PROTOCOL" substring, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2529.html">CVE-2016-2529</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2529">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2529">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2529">SUSE bug 968565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2530</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2530" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2530" source="CVE"/>
    <description>
    The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an unrecognized TLV type, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet, a different vulnerability than CVE-2016-2531.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2530.html">CVE-2016-2530</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2530">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2530">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2530">SUSE bug 968565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2531</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2531" source="CVE"/>
    <description>
    Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that triggers a 0xff tag value, a different vulnerability than CVE-2016-2530.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2531.html">CVE-2016-2531</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2531">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2531">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2531">SUSE bug 968565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2532</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2532" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2532" source="CVE"/>
    <description>
    The dissect_llrp_parameters function in epan/dissectors/packet-llrp.c in the LLRP dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 does not limit the recursion depth, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2532.html">CVE-2016-2532</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2532">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2532">SUSE bug 968565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2532">SUSE bug 968565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2538" source="CVE"/>
    <description>
    Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2538.html">CVE-2016-2538</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2538">SUSE bug 967969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2538">SUSE bug 968004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2538">SUSE bug 968004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2538">SUSE bug 967969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2538">SUSE bug 968004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2538">SUSE bug 967969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2538">SUSE bug 967969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2538">SUSE bug 968004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2538">SUSE bug 967969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2538">SUSE bug 967969</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2554</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2554" source="CVE"/>
    <description>
    Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2554.html">CVE-2016-2554</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2554">SUSE bug 968284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2554">SUSE bug 968284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2554">SUSE bug 968284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2554">SUSE bug 968284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2554">SUSE bug 968284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2554">SUSE bug 968284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2554">SUSE bug 968284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2554">SUSE bug 968284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2554">SUSE bug 968284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2554">SUSE bug 968284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2554">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2569</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2569" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2569" source="CVE"/>
    <description>
    Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2569.html">CVE-2016-2569</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2569">SUSE bug 968392</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2570</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2570" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2570" source="CVE"/>
    <description>
    The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a crafted XML document, related to esi/CustomParser.cc and esi/CustomParser.h.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2570.html">CVE-2016-2570</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2570">SUSE bug 968392</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2571</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2571" source="CVE"/>
    <description>
    http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2571.html">CVE-2016-2571</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2571">SUSE bug 968394</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2572</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2572" source="CVE"/>
    <description>
    http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2572.html">CVE-2016-2572</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2572">SUSE bug 968395</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2775</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2775" source="CVE"/>
    <description>
    ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2775.html">CVE-2016-2775</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2775">SUSE bug 989528</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154515" comment="bind-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154516" comment="bind-chrootenv-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154517" comment="bind-devel-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153102" comment="bind-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154518" comment="bind-doc-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154519" comment="bind-libs-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154520" comment="bind-libs-32bit-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153103" comment="bind-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154521" comment="bind-lwresd-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153104" comment="bind-lwresd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154522" comment="bind-utils-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2776</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2776" source="CVE"/>
    <description>
    buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2776.html">CVE-2016-2776</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1000362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1000362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1000362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1000362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1000362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1001595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1001597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1000362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1001597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1001597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1001597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1000362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1001597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1007829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1001597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1001597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1000362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1000362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1001597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1000362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1001597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2776">SUSE bug 1000362</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2779</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2779" source="CVE"/>
    <description>
    runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2779.html">CVE-2016-2779</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 946429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 1000998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 1000998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 1018892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 1000998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2779">SUSE bug 968674</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139778" comment="libblkid-devel-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151786" comment="libblkid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139779" comment="libblkid1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151787" comment="libblkid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139780" comment="libblkid1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151788" comment="libblkid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139781" comment="libfdisk1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154114" comment="libfdisk1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139782" comment="libmount1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151789" comment="libmount1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139783" comment="libmount1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151790" comment="libmount1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139784" comment="libsmartcols1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151791" comment="libsmartcols1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139785" comment="libuuid-devel-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151792" comment="libuuid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139786" comment="libuuid1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151793" comment="libuuid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139787" comment="libuuid1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151794" comment="libuuid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139788" comment="util-linux-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151795" comment="util-linux is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139789" comment="util-linux-lang-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151796" comment="util-linux-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139790" comment="util-linux-systemd-2.28-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151797" comment="util-linux-systemd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162790" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2790</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2790" source="CVE"/>
    <description>
    The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2790.html">CVE-2016-2790</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2790">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2791</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2791" source="CVE"/>
    <description>
    The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2791.html">CVE-2016-2791</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2791">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2792</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2792" source="CVE"/>
    <description>
    The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2800.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2792.html">CVE-2016-2792</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2792">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2793</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2793" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2793" source="CVE"/>
    <description>
    CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2793.html">CVE-2016-2793</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2793">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2794</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2794" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2794" source="CVE"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2794.html">CVE-2016-2794</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2794">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2795</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2795" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2795" source="CVE"/>
    <description>
    The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2795.html">CVE-2016-2795</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2795">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2796</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2796" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2796" source="CVE"/>
    <description>
    Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2796.html">CVE-2016-2796</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2796">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2797</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2797" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2797" source="CVE"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2801.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2797.html">CVE-2016-2797</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2797">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2798</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2798" source="CVE"/>
    <description>
    The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2798.html">CVE-2016-2798</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2798">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2799</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2799" source="CVE"/>
    <description>
    Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2799.html">CVE-2016-2799</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2799">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2800</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2800" source="CVE"/>
    <description>
    The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2792.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2800.html">CVE-2016-2800</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2800">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2801</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2801" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2801" source="CVE"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2797.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2801.html">CVE-2016-2801</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2801">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2802</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2802" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2802" source="CVE"/>
    <description>
    The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2802.html">CVE-2016-2802</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2802">SUSE bug 969894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2804</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2804" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2804.html">CVE-2016-2804</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2804">SUSE bug 977373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2804">SUSE bug 977373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2804">SUSE bug 977373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2804">SUSE bug 977373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2804">SUSE bug 977373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2806</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2806" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2806.html">CVE-2016-2806</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2806">SUSE bug 977375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2806">SUSE bug 977375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2806">SUSE bug 977375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2806">SUSE bug 977375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2806">SUSE bug 977375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2806">SUSE bug 977375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2806">SUSE bug 977375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2806">SUSE bug 977375</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2807</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2807" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2807.html">CVE-2016-2807</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2807">SUSE bug 977376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2808</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2808" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2808" source="CVE"/>
    <description>
    The watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code or cause a denial of service (generation-count overflow, out-of-bounds HashMap write access, and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2808.html">CVE-2016-2808</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2808">SUSE bug 977386</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2809</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2809" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2809" source="CVE"/>
    <description>
    The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2809.html">CVE-2016-2809</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2809">SUSE bug 977333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2809">SUSE bug 977377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2809">SUSE bug 977377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2809">SUSE bug 977377</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2810</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2810" source="CVE"/>
    <description>
    Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2810.html">CVE-2016-2810</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2810">SUSE bug 977333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2810">SUSE bug 977378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2810">SUSE bug 977378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2810">SUSE bug 977378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2810">SUSE bug 977378</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2811</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2811" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2811" source="CVE"/>
    <description>
    Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2811.html">CVE-2016-2811</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2811">SUSE bug 977379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2811">SUSE bug 977379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2811">SUSE bug 977379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2811">SUSE bug 977379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2811">SUSE bug 977379</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2812</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2812" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2812" source="CVE"/>
    <description>
    Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2812.html">CVE-2016-2812</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2812">SUSE bug 977379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2812">SUSE bug 977379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2812">SUSE bug 977379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2812">SUSE bug 977379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2812">SUSE bug 977379</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2813</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2813" source="CVE"/>
    <description>
    Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to CVE-2016-1780.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2813.html">CVE-2016-2813</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2813">SUSE bug 977333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2813">SUSE bug 977380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2813">SUSE bug 977380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2813">SUSE bug 977380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2813">SUSE bug 977380</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2814</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2814" source="CVE"/>
    <description>
    Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code via crafted CENC offsets that lead to mismanagement of the sizes table.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2814.html">CVE-2016-2814</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2814">SUSE bug 977381</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162815" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2815</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2815" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2815.html">CVE-2016-2815</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2815">SUSE bug 983638</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2816</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2816" source="CVE"/>
    <description>
    Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via the multipart/x-mixed-replace content type.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2816.html">CVE-2016-2816</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2816">SUSE bug 977382</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2816">SUSE bug 977382</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2816">SUSE bug 977382</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2816">SUSE bug 977382</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2816">SUSE bug 977382</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2817</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2817" source="CVE"/>
    <description>
    The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2817.html">CVE-2016-2817</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2817">SUSE bug 977384</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2817">SUSE bug 977384</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2817">SUSE bug 977384</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2817">SUSE bug 977384</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2817">SUSE bug 977384</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2817">SUSE bug 977384</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2818</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2818" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2818" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2818.html">CVE-2016-2818</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2818">SUSE bug 983638</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2819</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2819" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2819" source="CVE"/>
    <description>
    Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via foreign-context HTML5 fragments, as demonstrated by fragments within an SVG element.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2819.html">CVE-2016-2819</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2819">SUSE bug 983655</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2820</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2820" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2820" source="CVE"/>
    <description>
    The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2820.html">CVE-2016-2820</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2820">SUSE bug 977388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2820">SUSE bug 977388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2820">SUSE bug 977388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2820">SUSE bug 977388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2820">SUSE bug 977388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2820">SUSE bug 977388</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2821</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2821" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2821" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, when contenteditable mode is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering deletion of DOM elements that were created in the editor.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2821.html">CVE-2016-2821</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2821">SUSE bug 983653</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2822</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2822" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2822" source="CVE"/>
    <description>
    Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the address bar via a SELECT element with a persistent menu.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2822.html">CVE-2016-2822</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2822">SUSE bug 983652</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2824</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2824" source="CVE"/>
    <description>
    The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact by triggering use of a WebGL shader that writes to an array.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2824.html">CVE-2016-2824</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2824">SUSE bug 983651</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2825</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2825" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2825" source="CVE"/>
    <description>
    Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2825.html">CVE-2016-2825</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2825">SUSE bug 983649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2825">SUSE bug 983649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2825">SUSE bug 983649</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2825">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2825">SUSE bug 983649</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2827</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2827" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2827" source="CVE"/>
    <description>
    The mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a Content Security Policy (CSP) referrer directive with zero values.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2827.html">CVE-2016-2827</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2827">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2827">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2827">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2827">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2827">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2827">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2828</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2828" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2828" source="CVE"/>
    <description>
    Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after destruction of the texture's recycle pool.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2828.html">CVE-2016-2828</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2828">SUSE bug 983646</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2829</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2829" source="CVE"/>
    <description>
    Mozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a crafted web site that rapidly triggers permission requests, as demonstrated by the microphone permission or the geolocation permission.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2829.html">CVE-2016-2829</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2829">SUSE bug 983644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2829">SUSE bug 983644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2829">SUSE bug 983644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2829">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2829">SUSE bug 983644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2830" source="CVE"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2830.html">CVE-2016-2830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 983922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 983922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 983922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 983922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 983922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 983922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 983922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2830">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2831</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2831" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2831" source="CVE"/>
    <description>
    Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves the fullscreen and pointerlock settings, which allows remote attackers to cause a denial of service (UI outage), or conduct clickjacking or spoofing attacks, via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2831.html">CVE-2016-2831</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2831">SUSE bug 983643</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2832</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2832" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2832" source="CVE"/>
    <description>
    Mozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via a fingerprinting attack involving Cascading Style Sheets (CSS) pseudo-classes.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2832.html">CVE-2016-2832</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2832">SUSE bug 983632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2832">SUSE bug 983632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2832">SUSE bug 983632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2832">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2832">SUSE bug 983632</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2833</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2833" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2833" source="CVE"/>
    <description>
    Mozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted applet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2833.html">CVE-2016-2833</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2833">SUSE bug 983640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2833">SUSE bug 983640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2833">SUSE bug 983640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2833">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2833">SUSE bug 983640</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2834</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2834" source="CVE"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2834.html">CVE-2016-2834</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2834">SUSE bug 983639</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139850" comment="libfreebl3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139851" comment="libsoftokn3-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139852" comment="mozilla-nss-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139853" comment="mozilla-nss-certs-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139854" comment="mozilla-nss-devel-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139855" comment="mozilla-nss-tools-3.25-30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2835" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2835.html">CVE-2016-2835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2835">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2835">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2835">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2835">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2835">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2835">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2835">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2835">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2835">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2835">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2836" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to Http2Session::Shutdown and SpdySession31::Shutdown, and other vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2836.html">CVE-2016-2836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2836">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2836">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2836">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2836">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2836">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2836">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2836">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2836">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2836">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2836">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2837" source="CVE"/>
    <description>
    Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execute arbitrary code by providing a malformed video and leveraging a Gecko Media Plugin (GMP) sandbox bypass.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2837.html">CVE-2016-2837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2837">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2837">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2837">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2837">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2837">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2837">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2837">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2837">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2837">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2837">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2838</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2838" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an SVG document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2838.html">CVE-2016-2838</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2838">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2838">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2838">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2838">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2838">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2838">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2838">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2838">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2838">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2838">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2839</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2839" source="CVE"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2839.html">CVE-2016-2839</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2839">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2839">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2839">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2839">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2839">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2839">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2839">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2839">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2839">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2839">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2841</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2841" source="CVE"/>
    <description>
    The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via crafted values for the PSTART and PSTOP registers, involving ring buffer control.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2841.html">CVE-2016-2841</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2841">SUSE bug 969350</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2847</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2847" source="CVE"/>
    <description>
    fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2847.html">CVE-2016-2847</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 974646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2847">SUSE bug 970948</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20162851" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-2851</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-2851" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2851" source="CVE"/>
    <description>
    Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-2851.html">CVE-2016-2851</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2851">SUSE bug 969785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2851">SUSE bug 969785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2851">SUSE bug 969785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2851">SUSE bug 969785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2851">SUSE bug 969785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2851">SUSE bug 969785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2851">SUSE bug 969785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-2851">SUSE bug 969785</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139959" comment="libotr-devel-4.1.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153627" comment="libotr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139960" comment="libotr5-4.1.1-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153632" comment="libotr5 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3068</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3068" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3068" source="CVE"/>
    <description>
    Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3068.html">CVE-2016-3068</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3068">SUSE bug 973177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3068">SUSE bug 973175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3068">SUSE bug 973177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3068">SUSE bug 973177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3068">SUSE bug 973177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3068">SUSE bug 973177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3068">SUSE bug 973177</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140242" comment="mercurial-3.8.3-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153633" comment="mercurial is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140243" comment="mercurial-lang-3.8.3-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153634" comment="mercurial-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3069</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3069" source="CVE"/>
    <description>
    Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3069.html">CVE-2016-3069</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3069">SUSE bug 973176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3069">SUSE bug 973175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3069">SUSE bug 973176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3069">SUSE bug 973176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3069">SUSE bug 973176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3069">SUSE bug 973176</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140242" comment="mercurial-3.8.3-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153633" comment="mercurial is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140243" comment="mercurial-lang-3.8.3-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153634" comment="mercurial-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3075</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3075" source="CVE"/>
    <description>
    Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a long name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3075.html">CVE-2016-3075</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3075">SUSE bug 973164</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3092</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3092" source="CVE"/>
    <description>
    The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3092.html">CVE-2016-3092</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 988489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 988489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 986359</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3092">SUSE bug 1068865</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140375" comment="tomcat-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140376" comment="tomcat-admin-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140377" comment="tomcat-el-3_0-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140378" comment="tomcat-jsp-2_3-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140379" comment="tomcat-lib-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140380" comment="tomcat-servlet-3_1-api-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140381" comment="tomcat-webapps-8.0.36-2.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3100</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3100" source="CVE"/>
    <description>
    kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3100.html">CVE-2016-3100</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3100">SUSE bug 983926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3100">SUSE bug 983926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3100">SUSE bug 983926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3100">SUSE bug 983926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3100">SUSE bug 983926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3100">SUSE bug 983926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3100">SUSE bug 983926</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139645" comment="kinit-5.26.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153635" comment="kinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139646" comment="kinit-devel-5.26.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153637" comment="kinit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139647" comment="kinit-lang-5.26.0-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153638" comment="kinit-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3105</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3105" source="CVE"/>
    <description>
    The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3105.html">CVE-2016-3105</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3105">SUSE bug 978391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3105">SUSE bug 978391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3105">SUSE bug 978391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3105">SUSE bug 978391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3105">SUSE bug 978391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140242" comment="mercurial-3.8.3-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153633" comment="mercurial is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140243" comment="mercurial-lang-3.8.3-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153634" comment="mercurial-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3115</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3115" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3115" source="CVE"/>
    <description>
    Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3115.html">CVE-2016-3115</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 996040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 1005738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 992296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 970632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 1087412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3115">SUSE bug 1087412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3119</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3119" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3119" source="CVE"/>
    <description>
    The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3119.html">CVE-2016-3119</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3119">SUSE bug 971942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3119">SUSE bug 971942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3119">SUSE bug 971942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3119">SUSE bug 971942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3119">SUSE bug 971942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3119">SUSE bug 971942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3120</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3120" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3120" source="CVE"/>
    <description>
    The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3120.html">CVE-2016-3120</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3120">SUSE bug 991088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3120">SUSE bug 991088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3120">SUSE bug 991088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3120">SUSE bug 991088</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139654" comment="krb5-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139655" comment="krb5-32bit-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139656" comment="krb5-client-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139657" comment="krb5-devel-1.12.5-5.13 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3134</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3134" source="CVE"/>
    <description>
    The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3134.html">CVE-2016-3134</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3134">SUSE bug 971793</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3135</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3135" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3135" source="CVE"/>
    <description>
    Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3135.html">CVE-2016-3135</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 970904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 970904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 970904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 970904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 971794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 971794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 970904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 971794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 971794</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 970904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 970904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3135">SUSE bug 971794</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3136</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3136" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3136" source="CVE"/>
    <description>
    The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3136.html">CVE-2016-3136</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3136">SUSE bug 970955</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3137</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3137" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3137" source="CVE"/>
    <description>
    drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an interrupt-in and an interrupt-out endpoint descriptor, related to the cypress_generic_port_probe and cypress_open functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3137.html">CVE-2016-3137</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3137">SUSE bug 970970</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3138</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3138" source="CVE"/>
    <description>
    The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data endpoint descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3138.html">CVE-2016-3138</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970970</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3138">SUSE bug 970911</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3140</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3140" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3140" source="CVE"/>
    <description>
    The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3140.html">CVE-2016-3140</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3140">SUSE bug 970892</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3141</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3141" source="CVE"/>
    <description>
    Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddx_deserialize call on XML data containing a crafted var element.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3141.html">CVE-2016-3141</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3141">SUSE bug 969821</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3142" source="CVE"/>
    <description>
    The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) by placing a PK\x05\x06 signature at an invalid location.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3142.html">CVE-2016-3142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3142">SUSE bug 971912</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3156</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3156" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3156" source="CVE"/>
    <description>
    The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking outage) by arranging for a large number of IP addresses.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3156.html">CVE-2016-3156</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3156">SUSE bug 971360</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3185</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3185" source="CVE"/>
    <description>
    The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3185.html">CVE-2016-3185</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 973351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3185">SUSE bug 971611</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3186</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3186" source="CVE"/>
    <description>
    Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3186.html">CVE-2016-3186</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3186">SUSE bug 973340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3186">SUSE bug 973340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3186">SUSE bug 973340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3186">SUSE bug 973340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3186">SUSE bug 983268</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3186">SUSE bug 973340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3186">SUSE bug 973340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3186">SUSE bug 973340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3186">SUSE bug 973340</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3191" source="CVE"/>
    <description>
    The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3191.html">CVE-2016-3191</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3191">SUSE bug 971741</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142451" comment="libpcre1-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152526" comment="libpcre1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142452" comment="libpcre1-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152527" comment="libpcre1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142453" comment="libpcre16-0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152528" comment="libpcre16-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142454" comment="libpcre16-0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152529" comment="libpcre16-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142455" comment="libpcrecpp0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152530" comment="libpcrecpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142456" comment="libpcrecpp0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152531" comment="libpcrecpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142457" comment="libpcreposix0-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152532" comment="libpcreposix0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142458" comment="libpcreposix0-32bit-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152533" comment="libpcreposix0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142459" comment="pcre-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152534" comment="pcre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142460" comment="pcre-devel-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152535" comment="pcre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142461" comment="pcre-devel-static-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152536" comment="pcre-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142462" comment="pcre-doc-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152537" comment="pcre-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142463" comment="pcre-tools-8.39-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152538" comment="pcre-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3425</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3425" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3425" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3425.html">CVE-2016-3425</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3425">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3425">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3425">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3425">SUSE bug 979252</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3426</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3426" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3426" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality via vectors related to JCE.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3426.html">CVE-2016-3426</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3426">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3426">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3426">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3426">SUSE bug 979252</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3427</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3427" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3427.html">CVE-2016-3427</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3427">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3427">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3427">SUSE bug 976340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3427">SUSE bug 979252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3427">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3427">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3427">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3427">SUSE bug 1011805</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3458</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3458" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3458" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3458.html">CVE-2016-3458</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3458">SUSE bug 989732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3458">SUSE bug 989732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3458">SUSE bug 989732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3458">SUSE bug 989732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3458">SUSE bug 989732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3458">SUSE bug 989732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3458">SUSE bug 989732</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3459</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3459" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3459" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to affect availability via vectors related to Server: InnoDB.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3459.html">CVE-2016-3459</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3459">SUSE bug 989911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3459">SUSE bug 989911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3459">SUSE bug 989911</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163477" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3477</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3477" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3477" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3477.html">CVE-2016-3477</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3477">SUSE bug 989913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3477">SUSE bug 989913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3477">SUSE bug 991616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3477">SUSE bug 989913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3477">SUSE bug 989913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3477">SUSE bug 989913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3477">SUSE bug 989913</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3477">SUSE bug 989913</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3485</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3485" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows local users to affect integrity via vectors related to Networking.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3485.html">CVE-2016-3485</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3485">SUSE bug 989734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3485">SUSE bug 989734</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3485">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3485">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3485">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3485">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3485">SUSE bug 1009280</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3486</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3486" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3486.html">CVE-2016-3486</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3486">SUSE bug 989914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3486">SUSE bug 989914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3486">SUSE bug 989914</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3492</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3492" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3492" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3492.html">CVE-2016-3492</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3492">SUSE bug 1005555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3492">SUSE bug 1005555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3492">SUSE bug 1005555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3492">SUSE bug 1005555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3492">SUSE bug 1008318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3492">SUSE bug 1005555</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136615" comment="libmysqlclient-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136616" comment="libmysqlclient18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136617" comment="libmysqlclient18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136618" comment="libmysqlclient_r18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136619" comment="libmysqlclient_r18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136620" comment="libmysqld-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136621" comment="libmysqld18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136622" comment="mariadb-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136623" comment="mariadb-bench-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136624" comment="mariadb-client-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136625" comment="mariadb-errormessages-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136626" comment="mariadb-test-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136627" comment="mariadb-tools-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3498</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3498" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3498.html">CVE-2016-3498</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3498">SUSE bug 989729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3498">SUSE bug 989729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3498">SUSE bug 989729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3498">SUSE bug 989729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3498">SUSE bug 989729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3498">SUSE bug 989729</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3500</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3500" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3500.html">CVE-2016-3500</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3500">SUSE bug 989730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3500">SUSE bug 989730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3500">SUSE bug 989730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3500">SUSE bug 989730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3500">SUSE bug 989730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3500">SUSE bug 989730</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3501</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3501" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3501" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3501.html">CVE-2016-3501</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3501">SUSE bug 989915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3501">SUSE bug 989915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3501">SUSE bug 989915</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3503</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3503" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3503.html">CVE-2016-3503</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3503">SUSE bug 989728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3503">SUSE bug 989728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3503">SUSE bug 989728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3503">SUSE bug 989728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3503">SUSE bug 989728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3503">SUSE bug 989728</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3508</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3508" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3508.html">CVE-2016-3508</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3508">SUSE bug 989731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3508">SUSE bug 989731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3508">SUSE bug 989731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3508">SUSE bug 989731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3508">SUSE bug 989731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3508">SUSE bug 989731</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3511</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3511" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3511.html">CVE-2016-3511</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3511">SUSE bug 989727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3511">SUSE bug 989727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3511">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3511">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3511">SUSE bug 989727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3511">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3511">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3511">SUSE bug 989727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3511">SUSE bug 989727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3511">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3511">SUSE bug 989727</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3521</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3521" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3521" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3521.html">CVE-2016-3521</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3521">SUSE bug 989919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3521">SUSE bug 989919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3521">SUSE bug 991616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3521">SUSE bug 989919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3521">SUSE bug 989919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3521">SUSE bug 989919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3521">SUSE bug 989919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3521">SUSE bug 989919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3550</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3550" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3550.html">CVE-2016-3550</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3550">SUSE bug 989733</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3550">SUSE bug 989733</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3550">SUSE bug 989733</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3550">SUSE bug 989733</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3550">SUSE bug 989733</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3550">SUSE bug 989733</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3552</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3552" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3552.html">CVE-2016-3552</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3552">SUSE bug 989726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3552">SUSE bug 989726</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3587</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3587" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3587.html">CVE-2016-3587</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3587">SUSE bug 989721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3587">SUSE bug 989721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3587">SUSE bug 989721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3587">SUSE bug 989721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3587">SUSE bug 998845</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3598</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3598" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3598" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3598.html">CVE-2016-3598</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3598">SUSE bug 989723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3598">SUSE bug 989723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3598">SUSE bug 989723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3598">SUSE bug 989723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3598">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3598">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3598">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3598">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3598">SUSE bug 1009280</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163606" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3606</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3606" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3606" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3606.html">CVE-2016-3606</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3606">SUSE bug 989722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3606">SUSE bug 989722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3606">SUSE bug 989722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3606">SUSE bug 989722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3606">SUSE bug 989722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3606">SUSE bug 989722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3606">SUSE bug 989722</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3610</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3610" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3610" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3610.html">CVE-2016-3610</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3610">SUSE bug 989725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3610">SUSE bug 989725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3610">SUSE bug 989725</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139611" comment="java-1_8_0-openjdk-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139612" comment="java-1_8_0-openjdk-devel-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139613" comment="java-1_8_0-openjdk-headless-1.8.0.101-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163614" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3614</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3614" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3614" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3614.html">CVE-2016-3614</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3614">SUSE bug 989921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3614">SUSE bug 989921</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3614">SUSE bug 989921</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3615</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3615" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: DML.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3615.html">CVE-2016-3615</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3615">SUSE bug 989922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3615">SUSE bug 989922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3615">SUSE bug 991616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3615">SUSE bug 989922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3615">SUSE bug 989922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3615">SUSE bug 989922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3615">SUSE bug 989922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3615">SUSE bug 989922</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3622</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3622" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3622" source="CVE"/>
    <description>
    The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3622.html">CVE-2016-3622</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3622">SUSE bug 974449</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3622">SUSE bug 974449</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3622">SUSE bug 974449</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3622">SUSE bug 974449</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3622">SUSE bug 974449</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3622">SUSE bug 974449</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146601" comment="libtiff-devel-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3623</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3623" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3623" source="CVE"/>
    <description>
    The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3623.html">CVE-2016-3623</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974617</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3623">SUSE bug 974618</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3627</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3627" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3627" source="CVE"/>
    <description>
    The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3627.html">CVE-2016-3627</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 975947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 975947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 1026099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 1026101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3627">SUSE bug 972335</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3630</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3630" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3630" source="CVE"/>
    <description>
    The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3630.html">CVE-2016-3630</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3630">SUSE bug 973175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3630">SUSE bug 973175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3630">SUSE bug 973175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3630">SUSE bug 973175</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3630">SUSE bug 973175</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140242" comment="mercurial-3.8.3-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153633" comment="mercurial is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140243" comment="mercurial-lang-3.8.3-1.15 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153634" comment="mercurial-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3658</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3658" source="CVE"/>
    <description>
    The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving the ma variable.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3658.html">CVE-2016-3658</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3658">SUSE bug 974840</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146600" comment="libtiff-devel-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146601" comment="libtiff-devel-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146602" comment="libtiff5-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146603" comment="libtiff5-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146604" comment="tiff-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3672</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3672" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3672" source="CVE"/>
    <description>
    The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or setgid program, by disabling stack-consumption resource limits.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3672.html">CVE-2016-3672</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3672">SUSE bug 974308</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3689</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3689" source="CVE"/>
    <description>
    The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3689.html">CVE-2016-3689</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3689">SUSE bug 971628</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3698</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3698" source="CVE"/>
    <description>
    libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3698.html">CVE-2016-3698</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3698">SUSE bug 979645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3698">SUSE bug 979645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3698">SUSE bug 979645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3698">SUSE bug 979645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3698">SUSE bug 979645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3698">SUSE bug 979645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3698">SUSE bug 979645</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139950" comment="libndp0-1.6-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154226" comment="libndp0 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3705</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3705" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3705" source="CVE"/>
    <description>
    The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a crafted XML document containing a large number of nested entity references.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3705.html">CVE-2016-3705</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3705">SUSE bug 975947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3705">SUSE bug 975947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3705">SUSE bug 975947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3705">SUSE bug 975947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3705">SUSE bug 975947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3705">SUSE bug 975947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3705">SUSE bug 975947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3705">SUSE bug 975947</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3706</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3706" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3706" source="CVE"/>
    <description>
    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3706.html">CVE-2016-3706</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3706">SUSE bug 980483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3706">SUSE bug 980483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3706">SUSE bug 980483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3706">SUSE bug 980483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3706">SUSE bug 980483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3706">SUSE bug 997423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3706">SUSE bug 980483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3706">SUSE bug 997423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3706">SUSE bug 980483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3706">SUSE bug 997423</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163710" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3710</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3710" source="CVE"/>
    <description>
    The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3710.html">CVE-2016-3710</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978158</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978158</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978158</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978167</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978158</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978158</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3710">SUSE bug 978164</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3712</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3712" source="CVE"/>
    <description>
    Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3712.html">CVE-2016-3712</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978167</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978167</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978167</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3712">SUSE bug 978164</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163713" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3713</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3713" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3713" source="CVE"/>
    <description>
    The msr_mtrr_valid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows guest OS users to read or write to the kvm_arch_vcpu data structure, and consequently obtain sensitive information or cause a denial of service (system crash), via a crafted ioctl call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3713.html">CVE-2016-3713</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3713">SUSE bug 979715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3713">SUSE bug 979715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3713">SUSE bug 979715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3713">SUSE bug 979715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3713">SUSE bug 985132</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3713">SUSE bug 979715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3713">SUSE bug 979715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3713">SUSE bug 979715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3713">SUSE bug 979715</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163714" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3714</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3714" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3714" source="CVE"/>
    <description>
    The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3714.html">CVE-2016-3714</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 982178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 982178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 982178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3714">SUSE bug 982178</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139159" comment="GraphicsMagick-devel-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139160" comment="libGraphicsMagick-Q16-3-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139161" comment="libGraphicsMagick3-config-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139162" comment="libGraphicsMagickWand-Q16-2-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3715</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3715" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3715" source="CVE"/>
    <description>
    The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3715.html">CVE-2016-3715</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3715">SUSE bug 978061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139159" comment="GraphicsMagick-devel-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139160" comment="libGraphicsMagick-Q16-3-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139161" comment="libGraphicsMagick3-config-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139162" comment="libGraphicsMagickWand-Q16-2-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163716" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3716</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3716" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3716" source="CVE"/>
    <description>
    The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3716.html">CVE-2016-3716</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3716">SUSE bug 978061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163717" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3717</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3717" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3717" source="CVE"/>
    <description>
    The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3717.html">CVE-2016-3717</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3717">SUSE bug 978061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139159" comment="GraphicsMagick-devel-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139160" comment="libGraphicsMagick-Q16-3-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139161" comment="libGraphicsMagick3-config-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139162" comment="libGraphicsMagickWand-Q16-2-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3718</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3718" source="CVE"/>
    <description>
    The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3718.html">CVE-2016-3718</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3718">SUSE bug 978061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139159" comment="GraphicsMagick-devel-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139160" comment="libGraphicsMagick-Q16-3-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139161" comment="libGraphicsMagick3-config-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139162" comment="libGraphicsMagickWand-Q16-2-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3945</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3945" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3945" source="CVE"/>
    <description>
    Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3945.html">CVE-2016-3945</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3945">SUSE bug 974614</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3947</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3947" source="CVE"/>
    <description>
    Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3947.html">CVE-2016-3947</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3947">SUSE bug 973782</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3948</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3948" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3948" source="CVE"/>
    <description>
    Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3948.html">CVE-2016-3948</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3948">SUSE bug 973783</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3951</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3951" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3951" source="CVE"/>
    <description>
    Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3951.html">CVE-2016-3951</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3951">SUSE bug 974418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3951">SUSE bug 974418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3951">SUSE bug 974418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3951">SUSE bug 974418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3951">SUSE bug 974418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3951">SUSE bug 974418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3951">SUSE bug 974418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3951">SUSE bug 974418</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3977</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3977" source="CVE"/>
    <description>
    Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3977.html">CVE-2016-3977</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3977">SUSE bug 974847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3977">SUSE bug 974847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3977">SUSE bug 974847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3977">SUSE bug 974847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139485" comment="giflib-devel-5.0.5-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153063" comment="giflib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139486" comment="libgif6-5.0.5-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153066" comment="libgif6 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3990</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3990" source="CVE"/>
    <description>
    Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3990.html">CVE-2016-3990</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3990">SUSE bug 975069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3990">SUSE bug 975069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3990">SUSE bug 975069</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20163991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-3991</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-3991" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3991" source="CVE"/>
    <description>
    Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image with zero tiles.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-3991.html">CVE-2016-3991</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3991">SUSE bug 975070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3991">SUSE bug 975070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3991">SUSE bug 975070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3991">SUSE bug 975070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3991">SUSE bug 975070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3991">SUSE bug 975070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3991">SUSE bug 975070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3991">SUSE bug 975070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-3991">SUSE bug 975070</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4002</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4002" source="CVE"/>
    <description>
    Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4002.html">CVE-2016-4002</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4002">SUSE bug 975136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4002">SUSE bug 975138</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4002">SUSE bug 975136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4002">SUSE bug 975136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4002">SUSE bug 975136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4002">SUSE bug 975136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4002">SUSE bug 975136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4002">SUSE bug 975138</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4002">SUSE bug 975138</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4002">SUSE bug 975136</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4008</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4008" source="CVE"/>
    <description>
    The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4008.html">CVE-2016-4008</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4008">SUSE bug 982779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4008">SUSE bug 982779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4008">SUSE bug 982779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4008">SUSE bug 982779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4008">SUSE bug 982779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4008">SUSE bug 982779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4008">SUSE bug 982779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4008">SUSE bug 982779</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140136" comment="libtasn1-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152119" comment="libtasn1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140137" comment="libtasn1-6-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152120" comment="libtasn1-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140138" comment="libtasn1-6-32bit-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152121" comment="libtasn1-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140139" comment="libtasn1-devel-3.7-12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152122" comment="libtasn1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4020</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4020" source="CVE"/>
    <description>
    The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4020.html">CVE-2016-4020</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4020">SUSE bug 975700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4020">SUSE bug 975700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4020">SUSE bug 975907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4020">SUSE bug 975700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4020">SUSE bug 975700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4020">SUSE bug 975700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4020">SUSE bug 975907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4020">SUSE bug 975907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4020">SUSE bug 975700</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4049</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4049" source="CVE"/>
    <description>
    The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and daemon crash) via a large BGP packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4049.html">CVE-2016-4049</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4049">SUSE bug 977012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4049">SUSE bug 977012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4049">SUSE bug 977012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4049">SUSE bug 977012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4049">SUSE bug 977012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4049">SUSE bug 977012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4049">SUSE bug 977012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4049">SUSE bug 977012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4049">SUSE bug 977012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4049">SUSE bug 977012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4049">SUSE bug 977012</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140348" comment="quagga-0.99.24.1-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151418" comment="quagga is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4051</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4051" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4051" source="CVE"/>
    <description>
    Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4051.html">CVE-2016-4051</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4051">SUSE bug 976553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4051">SUSE bug 976553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4051">SUSE bug 976553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4051">SUSE bug 976553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4051">SUSE bug 976553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4051">SUSE bug 976553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4051">SUSE bug 976553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4051">SUSE bug 976553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4051">SUSE bug 976553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4051">SUSE bug 976553</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4052</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4052" source="CVE"/>
    <description>
    Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service or execute arbitrary code via crafted Edge Side Includes (ESI) responses.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4052.html">CVE-2016-4052</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4052">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4052">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4052">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4052">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4052">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4052">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4052">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4052">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4052">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4052">SUSE bug 976556</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4053</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4053" source="CVE"/>
    <description>
    Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and compiler optimization.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4053.html">CVE-2016-4053</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4053">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4053">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4053">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4053">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4053">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4053">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4053">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4053">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4053">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4053">SUSE bug 976556</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4054</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4054" source="CVE"/>
    <description>
    Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4054.html">CVE-2016-4054</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4054">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4054">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4054">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4054">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4054">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4054">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4054">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4054">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4054">SUSE bug 976556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4054">SUSE bug 976556</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4070</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4070" source="CVE"/>
    <description>
    ** DISPUTED ** Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to cause a denial of service (application crash) via a long string to the rawurlencode function. NOTE: the vendor says "Not sure if this qualifies as security issue (probably not)."
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4070.html">CVE-2016-4070</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4070">SUSE bug 976997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4070">SUSE bug 976997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4070">SUSE bug 976997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4070">SUSE bug 976997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4070">SUSE bug 976997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4070">SUSE bug 976997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4070">SUSE bug 976997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4070">SUSE bug 976997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4070">SUSE bug 976997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4070">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4070">SUSE bug 976997</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4071</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4071" source="CVE"/>
    <description>
    Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4071.html">CVE-2016-4071</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4071">SUSE bug 977000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4071">SUSE bug 977000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4071">SUSE bug 977000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4071">SUSE bug 977000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4071">SUSE bug 977000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4071">SUSE bug 977000</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4073</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4073" source="CVE"/>
    <description>
    Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted mb_strcut call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4073.html">CVE-2016-4073</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4073">SUSE bug 977003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4073">SUSE bug 977003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4073">SUSE bug 977003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4073">SUSE bug 977003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4073">SUSE bug 977003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4073">SUSE bug 977003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4073">SUSE bug 980366</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4074</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4074" source="CVE"/>
    <description>
    The jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted JSON file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4074.html">CVE-2016-4074</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 976992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 976992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 976992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 976992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 976992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 976992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4074">SUSE bug 1014176</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165993" comment="jq-1.5-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153232" comment="jq is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165994" comment="libjq-devel-1.5-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153233" comment="libjq-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165995" comment="libjq1-1.5-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153234" comment="libjq1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4300</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4300" source="CVE"/>
    <description>
    Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4300.html">CVE-2016-4300</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4300">SUSE bug 985832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4300">SUSE bug 985832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4300">SUSE bug 985832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4300">SUSE bug 985832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4300">SUSE bug 985832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4300">SUSE bug 985832</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4301</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4301" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4301" source="CVE"/>
    <description>
    Stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4301.html">CVE-2016-4301</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4301">SUSE bug 985826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4301">SUSE bug 985826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4301">SUSE bug 985826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4301">SUSE bug 985826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4301">SUSE bug 985826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4301">SUSE bug 985826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4301">SUSE bug 985826</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4302</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4302" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4302" source="CVE"/>
    <description>
    Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4302.html">CVE-2016-4302</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4302">SUSE bug 985835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4302">SUSE bug 985835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4302">SUSE bug 985835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4302">SUSE bug 985835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4302">SUSE bug 985835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4302">SUSE bug 985835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4302">SUSE bug 985835</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4324</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4324" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4324" source="CVE"/>
    <description>
    Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4324.html">CVE-2016-4324</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4324">SUSE bug 987553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4324">SUSE bug 987553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4324">SUSE bug 987553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4324">SUSE bug 987553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4324">SUSE bug 987553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4324">SUSE bug 987553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4324">SUSE bug 987553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4324">SUSE bug 987553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4324">SUSE bug 987553</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140034" comment="libreoffice-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140035" comment="libreoffice-base-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140036" comment="libreoffice-base-drivers-mysql-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140037" comment="libreoffice-branding-upstream-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140038" comment="libreoffice-calc-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140039" comment="libreoffice-calc-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140040" comment="libreoffice-draw-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140041" comment="libreoffice-filters-optional-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140042" comment="libreoffice-gnome-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140043" comment="libreoffice-gtk3-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140044" comment="libreoffice-icon-theme-breeze-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140045" comment="libreoffice-icon-theme-galaxy-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140046" comment="libreoffice-icon-theme-hicontrast-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140047" comment="libreoffice-icon-theme-oxygen-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140048" comment="libreoffice-icon-theme-sifr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140049" comment="libreoffice-icon-theme-tango-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140050" comment="libreoffice-impress-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140051" comment="libreoffice-kde4-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140052" comment="libreoffice-l10n-cs-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140053" comment="libreoffice-l10n-da-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140054" comment="libreoffice-l10n-de-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140055" comment="libreoffice-l10n-el-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140056" comment="libreoffice-l10n-en-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140057" comment="libreoffice-l10n-es-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140058" comment="libreoffice-l10n-fr-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140059" comment="libreoffice-l10n-hu-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140060" comment="libreoffice-l10n-it-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140061" comment="libreoffice-l10n-ja-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140062" comment="libreoffice-l10n-pl-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140063" comment="libreoffice-l10n-ru-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140064" comment="libreoffice-mailmerge-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140065" comment="libreoffice-math-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140066" comment="libreoffice-pyuno-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140067" comment="libreoffice-writer-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140068" comment="libreoffice-writer-extensions-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140069" comment="libreofficekit-5.1.5.2-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4342</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4342" source="CVE"/>
    <description>
    ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) TAR, (2) ZIP, or (3) PHAR archive.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4342.html">CVE-2016-4342</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4342">SUSE bug 977991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4342">SUSE bug 977991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4342">SUSE bug 977991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4342">SUSE bug 977991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4342">SUSE bug 977991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4342">SUSE bug 977991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4342">SUSE bug 977991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4342">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4342">SUSE bug 977991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4342">SUSE bug 977991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4346</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4346" source="CVE"/>
    <description>
    Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4346.html">CVE-2016-4346</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4346">SUSE bug 977994</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4429</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4429" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4429" source="CVE"/>
    <description>
    Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4429.html">CVE-2016-4429</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 1081556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4429">SUSE bug 980854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139516" comment="glibc-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139517" comment="glibc-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139518" comment="glibc-devel-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139519" comment="glibc-extra-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139520" comment="glibc-info-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139521" comment="glibc-locale-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139522" comment="glibc-locale-32bit-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139523" comment="nscd-2.22-3.7 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4439</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4439" source="CVE"/>
    <description>
    The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4439.html">CVE-2016-4439</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4439">SUSE bug 980711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4439">SUSE bug 980716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4439">SUSE bug 980711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4439">SUSE bug 980716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4439">SUSE bug 980711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4439">SUSE bug 980711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4439">SUSE bug 980716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4439">SUSE bug 980716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4439">SUSE bug 980716</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4441</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4441" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4441" source="CVE"/>
    <description>
    The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4441.html">CVE-2016-4441</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4441">SUSE bug 980724</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4450</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4450" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4450" source="CVE"/>
    <description>
    os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4450.html">CVE-2016-4450</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4450">SUSE bug 982505</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148026" comment="nginx-1.8.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153280" comment="nginx is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4453</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4453" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4453" source="CVE"/>
    <description>
    The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4453.html">CVE-2016-4453</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4453">SUSE bug 982223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4453">SUSE bug 982225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4453">SUSE bug 982223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4453">SUSE bug 982223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4453">SUSE bug 982225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4453">SUSE bug 982223</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4453">SUSE bug 982225</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4454</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4454" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4454" source="CVE"/>
    <description>
    The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4454.html">CVE-2016-4454</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4454">SUSE bug 982222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4454">SUSE bug 982224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4454">SUSE bug 982222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4454">SUSE bug 982222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4454">SUSE bug 982224</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4454">SUSE bug 982222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4454">SUSE bug 982224</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4463</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4463" source="CVE"/>
    <description>
    Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4463.html">CVE-2016-4463</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4463">SUSE bug 985860</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140229" comment="libxerces-c-3_1-3.1.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151260" comment="libxerces-c-3_1 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4470</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4470" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4470" source="CVE"/>
    <description>
    The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4470.html">CVE-2016-4470</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4470">SUSE bug 984755</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4476</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4476" source="CVE"/>
    <description>
    hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4476.html">CVE-2016-4476</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4476">SUSE bug 978172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4476">SUSE bug 978172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4476">SUSE bug 978172</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4476">SUSE bug 978172</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4482</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4482" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4482" source="CVE"/>
    <description>
    The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4482.html">CVE-2016-4482</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4482">SUSE bug 978401</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4483" source="CVE"/>
    <description>
    The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4483.html">CVE-2016-4483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4483">SUSE bug 978395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4483">SUSE bug 978395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4483">SUSE bug 978395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4483">SUSE bug 978395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4483">SUSE bug 978395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4483">SUSE bug 978395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4483">SUSE bug 978395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4483">SUSE bug 1026101</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140230" comment="libxml2-2-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140231" comment="libxml2-2-32bit-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140232" comment="libxml2-devel-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140233" comment="libxml2-tools-2.9.4-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140312" comment="python-libxml2-2.9.4-1.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4486</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4486" source="CVE"/>
    <description>
    The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4486.html">CVE-2016-4486</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4486">SUSE bug 978822</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4537</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4537" source="CVE"/>
    <description>
    The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4537.html">CVE-2016-4537</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4537">SUSE bug 978827</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4538" source="CVE"/>
    <description>
    The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the _zero_, _one_, or _two_ global variable, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4538.html">CVE-2016-4538</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4538">SUSE bug 978827</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4539</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4539" source="CVE"/>
    <description>
    The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4539.html">CVE-2016-4539</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4539">SUSE bug 978828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4539">SUSE bug 978828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4539">SUSE bug 978828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4539">SUSE bug 978828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4539">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4539">SUSE bug 978828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4539">SUSE bug 978828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4539">SUSE bug 978828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4539">SUSE bug 978828</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4540</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4540" source="CVE"/>
    <description>
    The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4540.html">CVE-2016-4540</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4540">SUSE bug 978829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4541</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4541" source="CVE"/>
    <description>
    The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4541.html">CVE-2016-4541</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4541">SUSE bug 978829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4542</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4542" source="CVE"/>
    <description>
    The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4542.html">CVE-2016-4542</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4542">SUSE bug 978830</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4543</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4543" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4543" source="CVE"/>
    <description>
    The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4543.html">CVE-2016-4543</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4543">SUSE bug 978830</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4544</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4544" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4544" source="CVE"/>
    <description>
    The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4544.html">CVE-2016-4544</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 980366</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4544">SUSE bug 978830</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4553</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4553" source="CVE"/>
    <description>
    client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4553.html">CVE-2016-4553</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4553">SUSE bug 979009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4553">SUSE bug 979009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4553">SUSE bug 979009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4553">SUSE bug 979009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4553">SUSE bug 979009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4553">SUSE bug 979009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4553">SUSE bug 990451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4553">SUSE bug 979009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4553">SUSE bug 979009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4553">SUSE bug 979009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4553">SUSE bug 990451</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4554</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4554" source="CVE"/>
    <description>
    mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4554.html">CVE-2016-4554</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 990451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4554">SUSE bug 979010</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4555</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4555" source="CVE"/>
    <description>
    client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4555.html">CVE-2016-4555</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4555">SUSE bug 979008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4555">SUSE bug 979011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4555">SUSE bug 979008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4555">SUSE bug 979011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4555">SUSE bug 979011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4555">SUSE bug 979011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4555">SUSE bug 979011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4555">SUSE bug 979011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4555">SUSE bug 979011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4555">SUSE bug 979011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4555">SUSE bug 979011</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4556</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4556" source="CVE"/>
    <description>
    Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4556.html">CVE-2016-4556</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4556">SUSE bug 979008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4556">SUSE bug 979011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4556">SUSE bug 979008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4556">SUSE bug 979011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4556">SUSE bug 979008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4556">SUSE bug 979008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4556">SUSE bug 979008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4556">SUSE bug 979008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4556">SUSE bug 979008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4556">SUSE bug 979008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4556">SUSE bug 979008</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140361" comment="squid-3.5.21-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152563" comment="squid is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164557" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4557</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4557" source="CVE"/>
    <description>
    The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gain privileges or cause a denial of service (use-after-free) via crafted BPF instructions that reference an incorrect file descriptor.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4557.html">CVE-2016-4557</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4557">SUSE bug 979018</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4558</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4558" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4558" source="CVE"/>
    <description>
    The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted application on (1) a system with more than 32 Gb of memory, related to the program reference count or (2) a 1 Tb system, related to the map reference count.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4558.html">CVE-2016-4558</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4558">SUSE bug 979019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4558">SUSE bug 979019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4558">SUSE bug 979019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4558">SUSE bug 979019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4558">SUSE bug 979019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4558">SUSE bug 979019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4562</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4562" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4562" source="CVE"/>
    <description>
    The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4562.html">CVE-2016-4562</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4562">SUSE bug 983292</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4563</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4563" source="CVE"/>
    <description>
    The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4563.html">CVE-2016-4563</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4563">SUSE bug 983305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4563">SUSE bug 983305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4563">SUSE bug 983305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4563">SUSE bug 983305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4563">SUSE bug 983305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4563">SUSE bug 983305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4563">SUSE bug 983305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4563">SUSE bug 983305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4563">SUSE bug 983305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4563">SUSE bug 983305</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4564</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4564" source="CVE"/>
    <description>
    The DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 makes an incorrect function call in attempting to locate the next token, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4564.html">CVE-2016-4564</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4564">SUSE bug 983308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4564">SUSE bug 983308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4564">SUSE bug 983308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4564">SUSE bug 983308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4564">SUSE bug 983308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4564">SUSE bug 983308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4564">SUSE bug 983308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4564">SUSE bug 983308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4564">SUSE bug 983308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4564">SUSE bug 983308</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4569</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4569" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4569" source="CVE"/>
    <description>
    The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4569.html">CVE-2016-4569</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4569">SUSE bug 979213</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164570" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4570</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4570" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4570" source="CVE"/>
    <description>
    The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4570.html">CVE-2016-4570</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4570">SUSE bug 979205</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149839" comment="libmxml1-2.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153672" comment="libmxml1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149840" comment="libmxml1-32bit-2.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153673" comment="libmxml1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149841" comment="mxml-2.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153674" comment="mxml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149842" comment="mxml-devel-2.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153675" comment="mxml-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164571" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4571</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4571" source="CVE"/>
    <description>
    The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4571.html">CVE-2016-4571</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979205</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4571">SUSE bug 979206</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149839" comment="libmxml1-2.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153672" comment="libmxml1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149840" comment="libmxml1-32bit-2.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153673" comment="libmxml1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149841" comment="mxml-2.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153674" comment="mxml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149842" comment="mxml-devel-2.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153675" comment="mxml-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4574</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4574" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4574" source="CVE"/>
    <description>
    Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4574.html">CVE-2016-4574</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4574">SUSE bug 979261</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4574">SUSE bug 979261</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4574">SUSE bug 979261</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139909" comment="libksba8-1.3.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152539" comment="libksba8 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4578</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4578" source="CVE"/>
    <description>
    sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4578.html">CVE-2016-4578</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 979879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4578">SUSE bug 1052256</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4579</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4579" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4579" source="CVE"/>
    <description>
    Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4579.html">CVE-2016-4579</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4579">SUSE bug 979906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4579">SUSE bug 979906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4579">SUSE bug 979906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4579">SUSE bug 979906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4579">SUSE bug 979906</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139909" comment="libksba8-1.3.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152539" comment="libksba8 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4590</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4590" source="CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4590.html">CVE-2016-4590</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139893" comment="libjavascriptcoregtk-4_0-18-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139894" comment="libwebkit2gtk-4_0-37-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139895" comment="libwebkit2gtk3-lang-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139896" comment="typelib-1_0-JavaScriptCore-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139897" comment="typelib-1_0-WebKit2-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139898" comment="webkit2gtk-4_0-injected-bundles-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4591</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4591" source="CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4591.html">CVE-2016-4591</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139893" comment="libjavascriptcoregtk-4_0-18-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139894" comment="libwebkit2gtk-4_0-37-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139895" comment="libwebkit2gtk3-lang-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139896" comment="typelib-1_0-JavaScriptCore-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139897" comment="typelib-1_0-WebKit2-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139898" comment="webkit2gtk-4_0-injected-bundles-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4622</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4622" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4622" source="CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4622.html">CVE-2016-4622</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139893" comment="libjavascriptcoregtk-4_0-18-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139894" comment="libwebkit2gtk-4_0-37-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139895" comment="libwebkit2gtk3-lang-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139896" comment="typelib-1_0-JavaScriptCore-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139897" comment="typelib-1_0-WebKit2-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139898" comment="webkit2gtk-4_0-injected-bundles-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4624</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4624" source="CVE"/>
    <description>
    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4624.html">CVE-2016-4624</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139893" comment="libjavascriptcoregtk-4_0-18-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139894" comment="libwebkit2gtk-4_0-37-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139895" comment="libwebkit2gtk3-lang-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139896" comment="typelib-1_0-JavaScriptCore-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139897" comment="typelib-1_0-WebKit2-4_0-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139898" comment="webkit2gtk-4_0-injected-bundles-2.12.5-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4658</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4658" source="CVE"/>
    <description>
    xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4658.html">CVE-2016-4658</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1005544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1069433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4658">SUSE bug 1078813</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148333" comment="libxml2-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148334" comment="libxml2-2-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148335" comment="libxml2-2-32bit-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148336" comment="libxml2-devel-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148337" comment="libxml2-devel-32bit-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148338" comment="libxml2-doc-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148339" comment="libxml2-tools-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148340" comment="python-libxml2-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4738</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4738" source="CVE"/>
    <description>
    libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4738.html">CVE-2016-4738</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4738">SUSE bug 1005591</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155736" comment="libxslt-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155743" comment="libxslt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155737" comment="libxslt-devel-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155744" comment="libxslt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155738" comment="libxslt-devel-32bit-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155745" comment="libxslt-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155739" comment="libxslt-python-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155746" comment="libxslt-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155740" comment="libxslt-tools-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155741" comment="libxslt1-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155742" comment="libxslt1-32bit-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155749" comment="libxslt1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4794</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4794" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4794" source="CVE"/>
    <description>
    Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4794.html">CVE-2016-4794</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 981517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 981517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 981517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 981517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4794">SUSE bug 980265</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4804</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4804" source="CVE"/>
    <description>
    The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_fat function or an out-of-bounds heap read in (2) get_fat function.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4804.html">CVE-2016-4804</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4804">SUSE bug 980377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4804">SUSE bug 980377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4804">SUSE bug 980377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4804">SUSE bug 980377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4804">SUSE bug 980377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4804">SUSE bug 980364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4804">SUSE bug 980377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4804">SUSE bug 980377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4804">SUSE bug 980377</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139391" comment="dosfstools-3.0.26-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153254" comment="dosfstools is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4805</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4805" source="CVE"/>
    <description>
    Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4805.html">CVE-2016-4805</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 980371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 980371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 980371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 980371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 980371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 980371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 980371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 980371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 980371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 980371</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4805">SUSE bug 980371</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4809</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4809" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4809" source="CVE"/>
    <description>
    The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4809.html">CVE-2016-4809</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4809">SUSE bug 984990</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139304" comment="bsdtar-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139305" comment="libarchive-devel-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139306" comment="libarchive13-3.1.2-14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4912</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4912" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4912" source="CVE"/>
    <description>
    The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large number of crafted packets, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4912.html">CVE-2016-4912</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4912">SUSE bug 980722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4912">SUSE bug 980722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4912">SUSE bug 980722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4912">SUSE bug 980722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4912">SUSE bug 980722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4912">SUSE bug 980722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4912">SUSE bug 1074356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4912">SUSE bug 1074356</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140265" comment="openslp-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151507" comment="openslp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140266" comment="openslp-devel-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151508" comment="openslp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140267" comment="openslp-server-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151509" comment="openslp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4951</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4951" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4951" source="CVE"/>
    <description>
    The tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not verify socket existence, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a dumpit operation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4951.html">CVE-2016-4951</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 981058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 981058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 981058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 981058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 981058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 981058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 985132</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 981058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 981058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 981058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 981058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4951">SUSE bug 981058</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4952</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4952" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4952" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4952.html">CVE-2016-4952</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4952">SUSE bug 981266</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4952">SUSE bug 981276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4952">SUSE bug 981266</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4952">SUSE bug 981276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4952">SUSE bug 981276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4952">SUSE bug 981276</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4953</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4953" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4953" source="CVE"/>
    <description>
    ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4953.html">CVE-2016-4953</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 962784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4953">SUSE bug 982065</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4954</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4954" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4954" source="CVE"/>
    <description>
    The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4954.html">CVE-2016-4954</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4954">SUSE bug 982066</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4955</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4955" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4955" source="CVE"/>
    <description>
    ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4955.html">CVE-2016-4955</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4955">SUSE bug 982067</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4956</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4956" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4956" source="CVE"/>
    <description>
    ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4956.html">CVE-2016-4956</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 977461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4956">SUSE bug 982068</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4957</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4957" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4957" source="CVE"/>
    <description>
    ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4957.html">CVE-2016-4957</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982056</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 977459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4957">SUSE bug 982064</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140257" comment="ntp-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140258" comment="ntp-doc-4.2.8p8-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164964" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4964</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4964" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4964" source="CVE"/>
    <description>
    The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU consumption or QEMU process crash) via vectors involving s-&gt;state.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4964.html">CVE-2016-4964</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4964">SUSE bug 981399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4964">SUSE bug 981401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4964">SUSE bug 981399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4964">SUSE bug 981401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4964">SUSE bug 981401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4964">SUSE bug 981399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4964">SUSE bug 981401</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140347" comment="qemu-linux-user-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4971</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4971" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4971" source="CVE"/>
    <description>
    GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4971.html">CVE-2016-4971</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 1023231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4971">SUSE bug 984060</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140399" comment="wget-1.14-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4979</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4979" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4979" source="CVE"/>
    <description>
    The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 request authorization, which allows remote attackers to bypass intended access restrictions by leveraging the ability to send multiple requests over a single connection and aborting a renegotiation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4979.html">CVE-2016-4979</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4979">SUSE bug 987365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4979">SUSE bug 987365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4979">SUSE bug 987365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4979">SUSE bug 987365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4979">SUSE bug 987365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4979">SUSE bug 987365</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4983</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4983" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4983.html">CVE-2016-4983</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4983">SUSE bug 984639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4983">SUSE bug 984639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4983">SUSE bug 984639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4983">SUSE bug 984639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4983">SUSE bug 984639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4983">SUSE bug 984639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4983">SUSE bug 984639</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135899" comment="dovecot22-2.2.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153679" comment="dovecot22 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135900" comment="dovecot22-backend-mysql-2.2.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153680" comment="dovecot22-backend-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135901" comment="dovecot22-backend-pgsql-2.2.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153681" comment="dovecot22-backend-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135902" comment="dovecot22-backend-sqlite-2.2.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153682" comment="dovecot22-backend-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135903" comment="dovecot22-devel-2.2.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153683" comment="dovecot22-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135904" comment="dovecot22-fts-2.2.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153684" comment="dovecot22-fts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135905" comment="dovecot22-fts-lucene-2.2.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153685" comment="dovecot22-fts-lucene is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135906" comment="dovecot22-fts-solr-2.2.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153686" comment="dovecot22-fts-solr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135907" comment="dovecot22-fts-squat-2.2.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153687" comment="dovecot22-fts-squat is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4992</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4992" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4992" source="CVE"/>
    <description>
    389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to infer the existence of RDN component objects.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4992.html">CVE-2016-4992</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4992">SUSE bug 991201</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4992">SUSE bug 997256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4992">SUSE bug 997256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4992">SUSE bug 997256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4992">SUSE bug 997256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4992">SUSE bug 997256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4992">SUSE bug 997256</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168665" comment="389-ds-1.3.4.5-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168666" comment="389-ds is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168667" comment="389-ds-devel-1.3.4.5-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168668" comment="389-ds-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4994</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4994" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4994" source="CVE"/>
    <description>
    Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4994.html">CVE-2016-4994</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4994">SUSE bug 986021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4994">SUSE bug 986021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4994">SUSE bug 986021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4994">SUSE bug 986021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4994">SUSE bug 986021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4994">SUSE bug 986021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4994">SUSE bug 986021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4994">SUSE bug 986021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4994">SUSE bug 986021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4994">SUSE bug 986021</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139487" comment="gimp-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151540" comment="gimp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139488" comment="gimp-help-browser-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151541" comment="gimp-help-browser is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139489" comment="gimp-lang-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151542" comment="gimp-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139490" comment="gimp-plugin-aa-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151543" comment="gimp-plugin-aa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139491" comment="gimp-plugins-python-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151544" comment="gimp-plugins-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139492" comment="libgimp-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151545" comment="libgimp-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139493" comment="libgimpui-2_0-0-2.8.18-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151546" comment="libgimpui-2_0-0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4997</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4997" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4997" source="CVE"/>
    <description>
    The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4997.html">CVE-2016-4997</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4997">SUSE bug 986362</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154884" comment="kernel-debug-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154885" comment="kernel-debug-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154886" comment="kernel-debug-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154888" comment="kernel-default-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154892" comment="kernel-docs-html-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154893" comment="kernel-docs-pdf-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154895" comment="kernel-obs-build-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154896" comment="kernel-obs-qa-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154898" comment="kernel-source-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154900" comment="kernel-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154901" comment="kernel-vanilla-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154902" comment="kernel-vanilla-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20164998" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-4998</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-4998" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4998" source="CVE"/>
    <description>
    The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-4998.html">CVE-2016-4998</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-4998">SUSE bug 986365</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5009</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5009" source="CVE"/>
    <description>
    The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5009.html">CVE-2016-5009</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5009">SUSE bug 987144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5009">SUSE bug 987144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5009">SUSE bug 987144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5009">SUSE bug 987144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5009">SUSE bug 987144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5009">SUSE bug 987144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5009">SUSE bug 987144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5009">SUSE bug 987144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5009">SUSE bug 987144</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144603" comment="ceph-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154227" comment="ceph is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144604" comment="ceph-base-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154228" comment="ceph-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144605" comment="ceph-common-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154229" comment="ceph-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144606" comment="ceph-fuse-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154230" comment="ceph-fuse is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144607" comment="ceph-mds-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154231" comment="ceph-mds is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144608" comment="ceph-mon-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154232" comment="ceph-mon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144609" comment="ceph-osd-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154233" comment="ceph-osd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144610" comment="ceph-radosgw-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154234" comment="ceph-radosgw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144611" comment="ceph-resource-agents-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154235" comment="ceph-resource-agents is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144612" comment="ceph-test-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154236" comment="ceph-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144613" comment="libcephfs-devel-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154237" comment="libcephfs-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144614" comment="libcephfs1-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154238" comment="libcephfs1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144615" comment="librados-devel-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154239" comment="librados-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144616" comment="librados2-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144617" comment="libradosstriper-devel-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154241" comment="libradosstriper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144618" comment="libradosstriper1-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154242" comment="libradosstriper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144619" comment="librbd-devel-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154243" comment="librbd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144620" comment="librbd1-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144621" comment="librgw-devel-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154245" comment="librgw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144622" comment="librgw2-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154246" comment="librgw2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144623" comment="python-ceph-compat-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154247" comment="python-ceph-compat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144624" comment="python-cephfs-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154248" comment="python-cephfs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144625" comment="python-rados-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154249" comment="python-rados is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144626" comment="python-rbd-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154250" comment="python-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144627" comment="rbd-fuse-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154251" comment="rbd-fuse is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144628" comment="rbd-mirror-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154252" comment="rbd-mirror is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009144629" comment="rbd-nbd-10.2.4+git.1481215985.12b091b-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154253" comment="rbd-nbd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5010</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5010" source="CVE"/>
    <description>
    coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5010.html">CVE-2016-5010</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5010">SUSE bug 991444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5010">SUSE bug 991444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5010">SUSE bug 991444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5010">SUSE bug 991444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5010">SUSE bug 991444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5010">SUSE bug 991444</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5011</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5011" source="CVE"/>
    <description>
    The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5011.html">CVE-2016-5011</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5011">SUSE bug 988361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5011">SUSE bug 988361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5011">SUSE bug 988361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5011">SUSE bug 988361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5011">SUSE bug 988361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5011">SUSE bug 988361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5011">SUSE bug 988361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5011">SUSE bug 988361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5011">SUSE bug 988361</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139778" comment="libblkid-devel-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151786" comment="libblkid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142692" comment="libblkid-devel-32bit-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152861" comment="libblkid-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142693" comment="libblkid-devel-static-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152862" comment="libblkid-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139779" comment="libblkid1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151787" comment="libblkid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139780" comment="libblkid1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151788" comment="libblkid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142696" comment="libfdisk-devel-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154254" comment="libfdisk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142697" comment="libfdisk-devel-static-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154255" comment="libfdisk-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139781" comment="libfdisk1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154114" comment="libfdisk1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142699" comment="libmount-devel-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152863" comment="libmount-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142700" comment="libmount-devel-32bit-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152864" comment="libmount-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142701" comment="libmount-devel-static-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152865" comment="libmount-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139782" comment="libmount1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151789" comment="libmount1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139783" comment="libmount1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151790" comment="libmount1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142704" comment="libsmartcols-devel-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152866" comment="libsmartcols-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142705" comment="libsmartcols-devel-static-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152867" comment="libsmartcols-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139784" comment="libsmartcols1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151791" comment="libsmartcols1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139785" comment="libuuid-devel-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151792" comment="libuuid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142708" comment="libuuid-devel-32bit-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152868" comment="libuuid-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142709" comment="libuuid-devel-static-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152869" comment="libuuid-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139786" comment="libuuid1-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151793" comment="libuuid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139787" comment="libuuid1-32bit-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151794" comment="libuuid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142712" comment="python-libmount-2.28-7.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152870" comment="python-libmount is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139788" comment="util-linux-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151795" comment="util-linux is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139789" comment="util-linux-lang-2.28-5.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151796" comment="util-linux-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139790" comment="util-linux-systemd-2.28-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151797" comment="util-linux-systemd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142716" comment="uuidd-2.28-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152871" comment="uuidd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5018</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5018" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5018" source="CVE"/>
    <description>
    In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5018.html">CVE-2016-5018</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5018">SUSE bug 1007855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5018">SUSE bug 1007855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5018">SUSE bug 1007855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5018">SUSE bug 1007855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5018">SUSE bug 1007855</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142899" comment="apache-commons-dbcp-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153286" comment="apache-commons-dbcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142900" comment="apache-commons-dbcp-javadoc-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153287" comment="apache-commons-dbcp-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142901" comment="apache-commons-pool2-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153288" comment="apache-commons-pool2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142902" comment="apache-commons-pool2-javadoc-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153289" comment="apache-commons-pool2-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142923" comment="tomcat-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142924" comment="tomcat-admin-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142925" comment="tomcat-docs-webapp-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142926" comment="tomcat-el-3_0-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142927" comment="tomcat-embed-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142928" comment="tomcat-javadoc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142929" comment="tomcat-jsp-2_3-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142930" comment="tomcat-jsvc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142931" comment="tomcat-lib-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142932" comment="tomcat-servlet-3_1-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142933" comment="tomcat-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5093</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5093" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5093" source="CVE"/>
    <description>
    The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted locale_get_primary_language call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5093.html">CVE-2016-5093</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5093">SUSE bug 982010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5093">SUSE bug 982010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5093">SUSE bug 982010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5093">SUSE bug 982010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5093">SUSE bug 982010</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5094</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5094" source="CVE"/>
    <description>
    Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5094.html">CVE-2016-5094</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5094">SUSE bug 982011</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5095</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5095" source="CVE"/>
    <description>
    Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTER_SANITIZE_FULL_SPECIAL_CHARS filter_var call.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-5094.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5095.html">CVE-2016-5095</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5095">SUSE bug 982012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5095">SUSE bug 982011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5095">SUSE bug 982012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5095">SUSE bug 982012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5095">SUSE bug 982012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5095">SUSE bug 982011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5095">SUSE bug 982012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5095">SUSE bug 982011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5095">SUSE bug 982011</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5095">SUSE bug 982012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5095">SUSE bug 982012</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5096</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5096" source="CVE"/>
    <description>
    Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer in the second argument.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5096.html">CVE-2016-5096</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5096">SUSE bug 982013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5096">SUSE bug 982013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5096">SUSE bug 982013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5096">SUSE bug 982013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5096">SUSE bug 982013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5096">SUSE bug 982013</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5103</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5103" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-4552.  Reason: This candidate is a reservation duplicate of CVE-2016-4552.  Notes: All CVE users should reference CVE-2016-4552 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5103.html">CVE-2016-5103</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5103">SUSE bug 982703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5103">SUSE bug 982703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5103">SUSE bug 982003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5103">SUSE bug 982003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5103">SUSE bug 982003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5103">SUSE bug 1016744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5103">SUSE bug 982003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5103">SUSE bug 982003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136830" comment="roundcubemail-1.1.7-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152670" comment="roundcubemail is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5104</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5104" source="CVE"/>
    <description>
    The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5104.html">CVE-2016-5104</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5104">SUSE bug 982014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5104">SUSE bug 982014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5104">SUSE bug 982014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5104">SUSE bug 982014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5104">SUSE bug 982014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5104">SUSE bug 982014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5104">SUSE bug 982014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5104">SUSE bug 982014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5104">SUSE bug 982014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5104">SUSE bug 982014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5104">SUSE bug 982014</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139879" comment="libimobiledevice-devel-1.2.0-6.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151903" comment="libimobiledevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139880" comment="libimobiledevice6-1.2.0-6.10 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151904" comment="libimobiledevice6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140161" comment="libusbmuxd-devel-1.0.10-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153699" comment="libusbmuxd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140162" comment="libusbmuxd4-1.0.10-4.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153702" comment="libusbmuxd4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5105</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5105" source="CVE"/>
    <description>
    The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5105.html">CVE-2016-5105</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5105">SUSE bug 982017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5105">SUSE bug 982024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5105">SUSE bug 982017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5105">SUSE bug 982017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5105">SUSE bug 982024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5105">SUSE bug 982017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5105">SUSE bug 982024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5105">SUSE bug 982017</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5106</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5106" source="CVE"/>
    <description>
    The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5106.html">CVE-2016-5106</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5106">SUSE bug 982018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5106">SUSE bug 982025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5106">SUSE bug 982018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5106">SUSE bug 982025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5106">SUSE bug 982018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5106">SUSE bug 982025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5106">SUSE bug 982018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5106">SUSE bug 982018</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5107</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5107" source="CVE"/>
    <description>
    The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5107.html">CVE-2016-5107</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5107">SUSE bug 982019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5107">SUSE bug 982026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5107">SUSE bug 982019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5107">SUSE bug 982026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5107">SUSE bug 982019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5107">SUSE bug 982026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5107">SUSE bug 982019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5107">SUSE bug 982019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5116</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5116" source="CVE"/>
    <description>
    gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5116.html">CVE-2016-5116</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5116">SUSE bug 982176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5116">SUSE bug 982176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5116">SUSE bug 982176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5116">SUSE bug 982176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5116">SUSE bug 982176</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5118</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5118" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5118" source="CVE"/>
    <description>
    The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5118.html">CVE-2016-5118</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5118">SUSE bug 982178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5118">SUSE bug 982178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5118">SUSE bug 982178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5118">SUSE bug 982178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5118">SUSE bug 982178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5118">SUSE bug 982178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5118">SUSE bug 982178</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139159" comment="GraphicsMagick-devel-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139160" comment="libGraphicsMagick-Q16-3-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139161" comment="libGraphicsMagick3-config-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139162" comment="libGraphicsMagickWand-Q16-2-1.3.25-1.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5126</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5126" source="CVE"/>
    <description>
    Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5126.html">CVE-2016-5126</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5126">SUSE bug 982285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5126">SUSE bug 982286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5126">SUSE bug 982286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5126">SUSE bug 982286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5126">SUSE bug 982285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5126">SUSE bug 982286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5126">SUSE bug 982285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5126">SUSE bug 982286</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5180</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5180" source="CVE"/>
    <description>
    Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5180.html">CVE-2016-5180</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5180">SUSE bug 1007728</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146605" comment="libcares-devel-1.9.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153705" comment="libcares-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146606" comment="libcares2-1.9.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153706" comment="libcares2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146607" comment="libcares2-32bit-1.9.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153707" comment="libcares2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136466" comment="nodejs4-4.6.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154256" comment="nodejs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136467" comment="nodejs4-devel-4.6.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154257" comment="nodejs4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136468" comment="nodejs4-docs-4.6.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154258" comment="nodejs4-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136469" comment="npm4-4.6.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154259" comment="npm4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5195</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5195" source="CVE"/>
    <description>
    Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5195.html">CVE-2016-5195</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 998689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 987565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1008110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 986445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1008110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1006695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1008110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1008110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1030118</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 870618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 870618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5195">SUSE bug 1069496</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165199" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5199</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5199" source="CVE"/>
    <description>
    An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5199.html">CVE-2016-5199</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5199">SUSE bug 1009892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5199">SUSE bug 1009892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5199">SUSE bug 1009892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5199">SUSE bug 1009892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5199">SUSE bug 1009892</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135516" comment="chromedriver-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135517" comment="chromium-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135518" comment="chromium-ffmpegsumo-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152655" comment="chromium-ffmpegsumo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136017" comment="ffmpeg-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136018" comment="libavcodec-devel-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136019" comment="libavcodec57-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136020" comment="libavcodec57-32bit-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136021" comment="libavdevice-devel-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136022" comment="libavdevice57-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136023" comment="libavdevice57-32bit-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136024" comment="libavfilter-devel-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136025" comment="libavfilter6-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136026" comment="libavfilter6-32bit-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136027" comment="libavformat-devel-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136028" comment="libavformat57-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136029" comment="libavformat57-32bit-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136030" comment="libavresample-devel-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136031" comment="libavresample3-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136032" comment="libavresample3-32bit-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136033" comment="libavutil-devel-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136034" comment="libavutil55-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136035" comment="libavutil55-32bit-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136036" comment="libpostproc-devel-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136037" comment="libpostproc54-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136038" comment="libpostproc54-32bit-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136039" comment="libswresample-devel-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136040" comment="libswresample2-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136041" comment="libswresample2-32bit-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136042" comment="libswscale-devel-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136043" comment="libswscale4-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136044" comment="libswscale4-32bit-3.2-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165200" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5200</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5200" source="CVE"/>
    <description>
    V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5200.html">CVE-2016-5200</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5200">SUSE bug 1009893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5200">SUSE bug 1009893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5200">SUSE bug 1009893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5200">SUSE bug 1009893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5200">SUSE bug 1009893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5200">SUSE bug 1009893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5200">SUSE bug 1009893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5200">SUSE bug 1009893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5200">SUSE bug 1009893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5200">SUSE bug 1009893</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135516" comment="chromedriver-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135517" comment="chromium-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135518" comment="chromium-ffmpegsumo-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152655" comment="chromium-ffmpegsumo is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165201" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5201</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5201" source="CVE"/>
    <description>
    A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed a remote attacker to access privileged JavaScript code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5201.html">CVE-2016-5201</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5201">SUSE bug 1009894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5201">SUSE bug 1009894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5201">SUSE bug 1009894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5201">SUSE bug 1009894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135516" comment="chromedriver-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135517" comment="chromium-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135518" comment="chromium-ffmpegsumo-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152655" comment="chromium-ffmpegsumo is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5202</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5202" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5202.html">CVE-2016-5202</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5202">SUSE bug 1009895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5202">SUSE bug 1009895</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5202">SUSE bug 1009895</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135516" comment="chromedriver-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135517" comment="chromium-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135518" comment="chromium-ffmpegsumo-54.0.2840.100-91.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152655" comment="chromium-ffmpegsumo is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5203</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5203" source="CVE"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5203.html">CVE-2016-5203</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5203">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5204</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5204" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5204" source="CVE"/>
    <description>
    Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5204.html">CVE-2016-5204</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5204">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5205</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5205" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5205.html">CVE-2016-5205</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5205">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5206</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5206" source="CVE"/>
    <description>
    The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5206.html">CVE-2016-5206</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5206">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5207</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5207" source="CVE"/>
    <description>
    In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5207.html">CVE-2016-5207</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5207">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5208</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5208" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5208.html">CVE-2016-5208</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5208">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5209</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5209" source="CVE"/>
    <description>
    Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5209.html">CVE-2016-5209</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5209">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5210" source="CVE"/>
    <description>
    Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5210.html">CVE-2016-5210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5210">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5211</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5211" source="CVE"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5211.html">CVE-2016-5211</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5211">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165212" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5212</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5212" source="CVE"/>
    <description>
    Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5212.html">CVE-2016-5212</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5212">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165213" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5213</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5213" source="CVE"/>
    <description>
    A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5213.html">CVE-2016-5213</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5213">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5214</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5214" source="CVE"/>
    <description>
    Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5214.html">CVE-2016-5214</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5214">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165215" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5215</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5215" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5215" source="CVE"/>
    <description>
    A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5215.html">CVE-2016-5215</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5215">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165216" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5216</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5216" source="CVE"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5216.html">CVE-2016-5216</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5216">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5217</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5217" source="CVE"/>
    <description>
    The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5217.html">CVE-2016-5217</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5217">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5218</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5218" source="CVE"/>
    <description>
    The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5218.html">CVE-2016-5218</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5218">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165219" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5219</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5219" source="CVE"/>
    <description>
    A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5219.html">CVE-2016-5219</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5219">SUSE bug 1013274</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147344" comment="libv8-5-5.3.332-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154260" comment="libv8-5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147345" comment="v8-5.3.332-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154261" comment="v8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147346" comment="v8-devel-5.3.332-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154262" comment="v8-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147347" comment="v8-private-headers-devel-5.3.332-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154263" comment="v8-private-headers-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165220" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5220</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5220" source="CVE"/>
    <description>
    PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5220.html">CVE-2016-5220</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5220">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165221" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5221</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5221" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5221" source="CVE"/>
    <description>
    Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5221.html">CVE-2016-5221</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5221">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5222</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5222" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5222" source="CVE"/>
    <description>
    Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5222.html">CVE-2016-5222</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5222">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5223</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5223" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5223" source="CVE"/>
    <description>
    Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5223.html">CVE-2016-5223</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5223">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5224</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5224" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5224" source="CVE"/>
    <description>
    A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5224.html">CVE-2016-5224</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5224">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5225</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5225" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5225.html">CVE-2016-5225</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5225">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5226</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5226" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5226.html">CVE-2016-5226</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5226">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5238</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5238" source="CVE"/>
    <description>
    The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5238.html">CVE-2016-5238</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5238">SUSE bug 982960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5244</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5244" source="CVE"/>
    <description>
    The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5244.html">CVE-2016-5244</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5244">SUSE bug 983213</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5250</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5250" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5250" source="CVE"/>
    <description>
    Mozilla Firefox before 48.0 allows remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5250.html">CVE-2016-5250</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5250">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5251</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5251" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5251" source="CVE"/>
    <description>
    Mozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted characters in the media type of a data: URL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5251.html">CVE-2016-5251</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5251">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5251">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5251">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5251">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5251">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5251">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5251">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5251">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5251">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5251">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5252</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5252" source="CVE"/>
    <description>
    Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5252.html">CVE-2016-5252</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5252">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5252">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5252">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5252">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5252">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5252">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5252">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5252">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5252">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5252">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5253</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5253" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5253" source="CVE"/>
    <description>
    The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5253.html">CVE-2016-5253</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5253">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5254</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5254" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5254" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5254.html">CVE-2016-5254</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5254">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5254">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5254">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5254">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5254">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5254">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5254">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5254">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5254">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5254">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5255</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5255" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5255" source="CVE"/>
    <description>
    Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code via crafted JavaScript that is mishandled during incremental garbage collection.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5255.html">CVE-2016-5255</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5255">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5255">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5255">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5255">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5255">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5255">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5255">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5255">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5255">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5255">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165256" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5256</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5256" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5256" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5256.html">CVE-2016-5256</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5256">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5256">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5256">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5256">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5256">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5256">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5257</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5257" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5257" source="CVE"/>
    <description>
    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5257.html">CVE-2016-5257</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5257">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5257">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5257">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5257">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5257">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5257">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5257">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5258</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5258" source="CVE"/>
    <description>
    Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5258.html">CVE-2016-5258</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5258">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5258">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5258">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5258">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5258">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5258">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5258">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5258">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5258">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5258">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5259</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5259" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5259" source="CVE"/>
    <description>
    Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5259.html">CVE-2016-5259</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5259">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5259">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5259">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5259">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5259">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5259">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5259">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5259">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5259">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5259">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5260</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5260" source="CVE"/>
    <description>
    Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5260.html">CVE-2016-5260</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5260">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5261</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5261" source="CVE"/>
    <description>
    Integer overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted packets that trigger incorrect buffer-resize operations during buffering.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5261.html">CVE-2016-5261</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5261">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5262</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5262" source="CVE"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5262.html">CVE-2016-5262</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5262">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5262">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5262">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5262">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5262">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5262">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5262">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5262">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5262">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5262">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5263</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5263" source="CVE"/>
    <description>
    The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages "type confusion."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5263.html">CVE-2016-5263</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5263">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5263">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5263">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5263">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5263">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5263">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5263">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5263">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5263">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5263">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165264" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5264</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5264" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5264" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG element that is mishandled during effect application.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5264.html">CVE-2016-5264</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5264">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5264">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5264">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5264">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5264">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5264">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5264">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5264">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5264">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5264">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5265</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5265" source="CVE"/>
    <description>
    Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same local directory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5265.html">CVE-2016-5265</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5265">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5265">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5265">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5265">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5265">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5265">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5265">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5265">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5265">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5265">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165266" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5266</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5266" source="CVE"/>
    <description>
    Mozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5266.html">CVE-2016-5266</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5266">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5266">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5266">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5266">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5266">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5266">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5266">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5266">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5266">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5266">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165267" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5267</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5267" source="CVE"/>
    <description>
    Mozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left-to-right characters in conjunction with a right-to-left character set.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5267.html">CVE-2016-5267</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5267">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5268</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5268" source="CVE"/>
    <description>
    Mozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT flags of about: URLs that are used for error pages, which makes it easier for remote attackers to conduct spoofing attacks via a crafted URL, as demonstrated by misleading text after an about:neterror?d= substring.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5268.html">CVE-2016-5268</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5268">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5268">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5268">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5268">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5268">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5268">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5268">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5268">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5268">SUSE bug 991809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5268">SUSE bug 991809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165270" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5270</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5270" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 allows remote attackers to cause a denial of service (boolean out-of-bounds write) or possibly have unspecified other impact via Unicode characters that are mishandled during text conversion.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5270.html">CVE-2016-5270</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5270">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5270">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5270">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5270">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5270">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5270">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5270">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5271</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5271" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5271" source="CVE"/>
    <description>
    The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conjunction with a "display: contents" Cascading Style Sheets (CSS) property.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5271.html">CVE-2016-5271</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5271">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5271">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5271">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5271">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5271">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5271">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5272</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5272" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5272" source="CVE"/>
    <description>
    The nsImageGeometryMixin class in Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 does not properly perform a cast of an unspecified variable during handling of INPUT elements, which allows remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5272.html">CVE-2016-5272</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5272">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5272">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5272">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5272">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5272">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5272">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5272">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5273</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5273" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5273" source="CVE"/>
    <description>
    The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility implementation in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5273.html">CVE-2016-5273</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5273">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5273">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5273">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5273">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5273">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5273">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5274</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5274" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between restyling and the Web Animations model implementation.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5274.html">CVE-2016-5274</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5274">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5274">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5274">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5274">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5274">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5274">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5274">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5275</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5275" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5275" source="CVE"/>
    <description>
    Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5275.html">CVE-2016-5275</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5275">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5275">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5275">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5275">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5275">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5275">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165276" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5276</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5276" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5276" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an aria-owns attribute.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5276.html">CVE-2016-5276</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5276">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5276">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5276">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5276">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5276">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5276">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5276">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5277</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5277" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5277" source="CVE"/>
    <description>
    Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging improper interaction between timeline destruction and the Web Animations model implementation.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5277.html">CVE-2016-5277</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5277">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5277">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5277">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5277">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5277">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5277">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5277">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165278" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5278</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5278" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5278" source="CVE"/>
    <description>
    Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5278.html">CVE-2016-5278</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5278">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5278">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5278">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5278">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5278">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5278">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5278">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5279</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5279" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5279" source="CVE"/>
    <description>
    Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5279.html">CVE-2016-5279</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5279">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5279">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5279">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5279">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5279">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5279">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165280" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5280</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5280" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5280" source="CVE"/>
    <description>
    Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 allows remote attackers to execute arbitrary code via bidirectional text.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5280.html">CVE-2016-5280</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5280">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5280">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5280">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5280">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5280">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5280">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5280">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165281" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5281</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5281" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5281" source="CVE"/>
    <description>
    Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between JavaScript code and an SVG document.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5281.html">CVE-2016-5281</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5281">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5281">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5281">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5281">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5281">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5281">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5281">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165282" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5282</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5282" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5282" source="CVE"/>
    <description>
    Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5282.html">CVE-2016-5282</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5282">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5282">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5282">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5282">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5282">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5282">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5283</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5283" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5283" source="CVE"/>
    <description>
    Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier in the SRC attribute of an IFRAME element, leading to insufficient restrictions on link-color information after a document is resized.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5283.html">CVE-2016-5283</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5283">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5283">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5283">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5283">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5283">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5283">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5284</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5284" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5284" source="CVE"/>
    <description>
    Mozilla Firefox before 49.0 and Firefox ESR 45.x before 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5284.html">CVE-2016-5284</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5284">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5284">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5284">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5284">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5284">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5284">SUSE bug 999701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5284">SUSE bug 999701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165287" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5287</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5287" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5287" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5287.html">CVE-2016-5287</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5287">SUSE bug 1006475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5287">SUSE bug 1006475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5287">SUSE bug 1006475</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5287">SUSE bug 1006475</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5288</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5288" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5288" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5288.html">CVE-2016-5288</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5288">SUSE bug 1006476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5288">SUSE bug 1006476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5288">SUSE bug 1006476</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5288">SUSE bug 1006476</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5289</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5289" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5289" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5289.html">CVE-2016-5289</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5289">SUSE bug 1010426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5289">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5289">SUSE bug 1010426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5289">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5289">SUSE bug 1010426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5289">SUSE bug 1010426</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5290</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5290" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5290" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5290.html">CVE-2016-5290</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5290">SUSE bug 1010427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5290">SUSE bug 1010427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5290">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5290">SUSE bug 1010427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5290">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5290">SUSE bug 1010427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5290">SUSE bug 1010427</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5291</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5291" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5291.html">CVE-2016-5291</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5291">SUSE bug 1010410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5291">SUSE bug 1010410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5291">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5291">SUSE bug 1010410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5291">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5291">SUSE bug 1010410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5291">SUSE bug 1010410</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5292</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5292" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5292" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5292.html">CVE-2016-5292</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5292">SUSE bug 1010399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5292">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5292">SUSE bug 1010399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5292">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5292">SUSE bug 1010399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5292">SUSE bug 1010399</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5296</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5296" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5296.html">CVE-2016-5296</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5296">SUSE bug 1010395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5296">SUSE bug 1010395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5296">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5296">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5296">SUSE bug 1010395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5296">SUSE bug 1010395</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5297</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5297" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5297" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5297.html">CVE-2016-5297</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5297">SUSE bug 1010401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5297">SUSE bug 1010401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5297">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5297">SUSE bug 1010401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5297">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5297">SUSE bug 1010401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5297">SUSE bug 1010401</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5297">SUSE bug 1010401</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5300</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5300" source="CVE"/>
    <description>
    The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5300.html">CVE-2016-5300</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5300">SUSE bug 983216</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148512" comment="expat-2.1.0-19.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148513" comment="libexpat-devel-2.1.0-19.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148514" comment="libexpat-devel-32bit-2.1.0-19.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151785" comment="libexpat-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148515" comment="libexpat1-2.1.0-19.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148516" comment="libexpat1-32bit-2.1.0-19.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5314</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5314" source="CVE"/>
    <description>
    Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5314.html">CVE-2016-5314</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 987351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5314">SUSE bug 984831</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5316</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5316" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5316" source="CVE"/>
    <description>
    Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5316.html">CVE-2016-5316</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5316">SUSE bug 984837</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5317</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5317" source="CVE"/>
    <description>
    Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5317.html">CVE-2016-5317</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5317">SUSE bug 984842</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5318</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5318" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5318" source="CVE"/>
    <description>
    Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5318.html">CVE-2016-5318</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 1017690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 960341</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5318">SUSE bug 983436</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169689" comment="libtiff-devel-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169670" comment="libtiff-devel-32bit-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169690" comment="libtiff5-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169691" comment="libtiff5-32bit-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169692" comment="tiff-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165320" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5320</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5320" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5320" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5314.  Reason: This candidate is a reservation duplicate of CVE-2016-5314.  Notes: All CVE users should reference CVE-2016-5314 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5320.html">CVE-2016-5320</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 987351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 984808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 1007284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 1007284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 1007284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 1007284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 1007284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5320">SUSE bug 1007284</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5321</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5321" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5321" source="CVE"/>
    <description>
    The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5321.html">CVE-2016-5321</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5321">SUSE bug 984813</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146600" comment="libtiff-devel-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146601" comment="libtiff-devel-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146602" comment="libtiff5-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146603" comment="libtiff5-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146604" comment="tiff-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165323" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5323</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5323" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5323" source="CVE"/>
    <description>
    The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5323.html">CVE-2016-5323</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5323">SUSE bug 984815</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146600" comment="libtiff-devel-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146601" comment="libtiff-devel-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146602" comment="libtiff5-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146603" comment="libtiff5-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146604" comment="tiff-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5337</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5337" source="CVE"/>
    <description>
    The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5337.html">CVE-2016-5337</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5337">SUSE bug 983961</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5338</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5338" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5338" source="CVE"/>
    <description>
    The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5338.html">CVE-2016-5338</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5338">SUSE bug 983982</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5350</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5350" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5350" source="CVE"/>
    <description>
    epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5350.html">CVE-2016-5350</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5350">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5350">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5350">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5350">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5350">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5350">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5350">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5350">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5350">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5351</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5351" source="CVE"/>
    <description>
    epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5351.html">CVE-2016-5351</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5351">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5351">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5351">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5351">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5351">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5351">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5351">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5351">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5351">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5352</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5352" source="CVE"/>
    <description>
    epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5352.html">CVE-2016-5352</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5352">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5352">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5352">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5352">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5352">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5352">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5352">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5352">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5352">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5352">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5353</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5353" source="CVE"/>
    <description>
    epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5353.html">CVE-2016-5353</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5353">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5353">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5353">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5353">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5353">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5353">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5353">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5353">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5353">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5354</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5354" source="CVE"/>
    <description>
    The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5354.html">CVE-2016-5354</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5354">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5354">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5354">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5354">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5354">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5354">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5354">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5354">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5354">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5355</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5355" source="CVE"/>
    <description>
    wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5355.html">CVE-2016-5355</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5355">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5355">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5355">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5355">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5355">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5355">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5355">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5355">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5355">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5356</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5356" source="CVE"/>
    <description>
    wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5356.html">CVE-2016-5356</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5356">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5356">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5356">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5356">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5356">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5356">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5356">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5356">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5356">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165357" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5357</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5357" source="CVE"/>
    <description>
    wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5357.html">CVE-2016-5357</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5357">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5357">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5357">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5357">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5357">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5357">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5357">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5357">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5357">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5358</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5358" source="CVE"/>
    <description>
    epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5358.html">CVE-2016-5358</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5358">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5358">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5358">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5358">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5358">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5358">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5358">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5358">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5358">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5384</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5384" source="CVE"/>
    <description>
    fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5384.html">CVE-2016-5384</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5384">SUSE bug 992534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5384">SUSE bug 992534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5384">SUSE bug 992534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5384">SUSE bug 992534</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139450" comment="fontconfig-2.11.1-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153714" comment="fontconfig is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139451" comment="fontconfig-32bit-2.11.1-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153715" comment="fontconfig-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139452" comment="fontconfig-devel-2.11.1-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153716" comment="fontconfig-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5385</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5385" source="CVE"/>
    <description>
    PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5385.html">CVE-2016-5385</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 989125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 989174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5385">SUSE bug 988486</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142620" comment="apache2-mod_php7-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142621" comment="php7-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142622" comment="php7-bcmath-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142623" comment="php7-bz2-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142624" comment="php7-calendar-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142625" comment="php7-ctype-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142626" comment="php7-curl-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142627" comment="php7-dba-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142628" comment="php7-devel-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142629" comment="php7-dom-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142630" comment="php7-enchant-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142631" comment="php7-exif-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142632" comment="php7-fastcgi-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142633" comment="php7-fileinfo-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142634" comment="php7-firebird-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142635" comment="php7-fpm-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142636" comment="php7-ftp-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142637" comment="php7-gd-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142638" comment="php7-gettext-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142639" comment="php7-gmp-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142640" comment="php7-iconv-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142641" comment="php7-imap-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142642" comment="php7-intl-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142643" comment="php7-json-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142644" comment="php7-ldap-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142645" comment="php7-mbstring-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142646" comment="php7-mcrypt-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142647" comment="php7-mysql-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142648" comment="php7-odbc-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142649" comment="php7-opcache-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142650" comment="php7-openssl-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142651" comment="php7-pcntl-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142652" comment="php7-pdo-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142653" comment="php7-pear-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142654" comment="php7-pear-Archive_Tar-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142655" comment="php7-pgsql-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142656" comment="php7-phar-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142657" comment="php7-posix-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142658" comment="php7-pspell-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142659" comment="php7-readline-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142660" comment="php7-shmop-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142661" comment="php7-snmp-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142662" comment="php7-soap-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142663" comment="php7-sockets-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142664" comment="php7-sqlite-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142665" comment="php7-sysvmsg-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142666" comment="php7-sysvsem-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142667" comment="php7-sysvshm-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142668" comment="php7-tidy-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142669" comment="php7-tokenizer-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142670" comment="php7-wddx-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142671" comment="php7-xmlreader-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142672" comment="php7-xmlrpc-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142673" comment="php7-xmlwriter-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142674" comment="php7-xsl-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142675" comment="php7-zip-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142676" comment="php7-zlib-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5387</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5387" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5387" source="CVE"/>
    <description>
    The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.  NOTE: the vendor states "This mitigation has been assigned the identifier CVE-2016-5387"; in other words, this is not a CVE ID for a vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5387.html">CVE-2016-5387</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988489</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 989125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 989174</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988492</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 989684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 989684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988484</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 989684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 989684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 988488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5387">SUSE bug 989684</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139208" comment="apache2-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139209" comment="apache2-devel-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139210" comment="apache2-doc-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139211" comment="apache2-example-pages-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139212" comment="apache2-prefork-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139213" comment="apache2-utils-2.4.23-4.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5399</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5399" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5399" source="CVE"/>
    <description>
    The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5399.html">CVE-2016-5399</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5399">SUSE bug 991430</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5403</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5403" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5403" source="CVE"/>
    <description>
    The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5403.html">CVE-2016-5403</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 990923</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 990923</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 991080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 990923</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 991080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 991080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 990923</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 990923</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 991080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 990923</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 990923</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 990923</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 991080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 991080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 990923</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 991080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 990923</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5403">SUSE bug 991080</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5405</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5405" source="CVE"/>
    <description>
    389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5405.html">CVE-2016-5405</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5405">SUSE bug 1007004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5405">SUSE bug 1007004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5405">SUSE bug 1007004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5405">SUSE bug 1007004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5405">SUSE bug 1007004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5405">SUSE bug 1007004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5405">SUSE bug 1076530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5405">SUSE bug 1007004</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168665" comment="389-ds-1.3.4.5-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168666" comment="389-ds is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168667" comment="389-ds-devel-1.3.4.5-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168668" comment="389-ds-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5407</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5407" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5407" source="CVE"/>
    <description>
    The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5407.html">CVE-2016-5407</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5407">SUSE bug 1003017</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139742" comment="libXv-devel-1.0.10-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151843" comment="libXv-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139743" comment="libXv1-1.0.10-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151844" comment="libXv1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139744" comment="libXv1-32bit-1.0.10-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151845" comment="libXv1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5412</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5412" source="CVE"/>
    <description>
    arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite loop) by making a H_CEDE hypercall during the existence of a suspended transaction.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5412.html">CVE-2016-5412</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5412">SUSE bug 991065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5412">SUSE bug 991065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5412">SUSE bug 991065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5412">SUSE bug 991065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5412">SUSE bug 1013013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5412">SUSE bug 991065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5412">SUSE bug 991065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5412">SUSE bug 991065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5412">SUSE bug 991065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5412">SUSE bug 991065</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5418</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5418" source="CVE"/>
    <description>
    The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5418.html">CVE-2016-5418</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5418">SUSE bug 998677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5418">SUSE bug 998677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5418">SUSE bug 998677</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136448" comment="bsdtar-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136449" comment="libarchive-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152671" comment="libarchive is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136450" comment="libarchive-devel-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136451" comment="libarchive13-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136452" comment="libarchive13-32bit-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152672" comment="libarchive13-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5419</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5419" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5419" source="CVE"/>
    <description>
    curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5419.html">CVE-2016-5419</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 1033413</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 1033442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 1033413</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5419">SUSE bug 991389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5420</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5420" source="CVE"/>
    <description>
    curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5420.html">CVE-2016-5420</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5420">SUSE bug 991390</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5421</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5421" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5421" source="CVE"/>
    <description>
    Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5421.html">CVE-2016-5421</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5421">SUSE bug 991391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5421">SUSE bug 991391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5421">SUSE bug 991391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5421">SUSE bug 991391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5421">SUSE bug 991391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5421">SUSE bug 991391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5421">SUSE bug 1017590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5421">SUSE bug 1017590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5421">SUSE bug 1017590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5421">SUSE bug 1017590</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5423</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5423" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5423" source="CVE"/>
    <description>
    PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain sensitive memory information, or possibly execute arbitrary code via (1) a CASE expression within the test value subexpression of another CASE or (2) inlining of an SQL function that implements the equality operator used for a CASE expression involving values of different types.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5423.html">CVE-2016-5423</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 993454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 993454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 993454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 993454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 993454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5423">SUSE bug 1052683</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154345" comment="postgresql93-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151074" comment="postgresql93 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154346" comment="postgresql93-contrib-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151075" comment="postgresql93-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154347" comment="postgresql93-devel-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151076" comment="postgresql93-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154348" comment="postgresql93-docs-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154349" comment="postgresql93-libs-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151078" comment="postgresql93-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154350" comment="postgresql93-plperl-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151079" comment="postgresql93-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154351" comment="postgresql93-plpython-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151080" comment="postgresql93-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154352" comment="postgresql93-pltcl-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151081" comment="postgresql93-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154353" comment="postgresql93-server-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151082" comment="postgresql93-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154354" comment="postgresql93-test-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151083" comment="postgresql93-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5424</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5424" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5424" source="CVE"/>
    <description>
    PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) " (double quote), (2) \ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5424.html">CVE-2016-5424</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 993453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 993453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 993453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 993453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1042497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1052683</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1041981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5424">SUSE bug 1052683</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139838" comment="libecpg6-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139839" comment="libpq5-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154345" comment="postgresql93-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151074" comment="postgresql93 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154346" comment="postgresql93-contrib-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151075" comment="postgresql93-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154347" comment="postgresql93-devel-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151076" comment="postgresql93-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154348" comment="postgresql93-docs-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154349" comment="postgresql93-libs-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151078" comment="postgresql93-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154350" comment="postgresql93-plperl-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151079" comment="postgresql93-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154351" comment="postgresql93-plpython-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151080" comment="postgresql93-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154352" comment="postgresql93-pltcl-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151081" comment="postgresql93-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154353" comment="postgresql93-server-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151082" comment="postgresql93-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154354" comment="postgresql93-test-9.3.14-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151083" comment="postgresql93-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139840" comment="postgresql94-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139841" comment="postgresql94-contrib-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139842" comment="postgresql94-devel-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139843" comment="postgresql94-docs-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139844" comment="postgresql94-server-9.4.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5439</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5439" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Privileges.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5439.html">CVE-2016-5439</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5439">SUSE bug 989925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5439">SUSE bug 989925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5439">SUSE bug 989925</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5440</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5440" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5440.html">CVE-2016-5440</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5440">SUSE bug 989926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5440">SUSE bug 989926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5440">SUSE bug 991616</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5440">SUSE bug 989926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5440">SUSE bug 989926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5440">SUSE bug 989926</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5440">SUSE bug 989926</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5483" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-3600.  Reason: This candidate is a reservation duplicate of CVE-2017-3600.  Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5483.html">CVE-2016-5483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5483">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5501</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5501" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5501" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5538.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5501.html">CVE-2016-5501</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5501">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5501">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5501">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5501">SUSE bug 1005621</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147759" comment="python-virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147760" comment="virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147761" comment="virtualbox-devel-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147762" comment="virtualbox-guest-desktop-icons-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147763" comment="virtualbox-guest-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147764" comment="virtualbox-guest-tools-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147765" comment="virtualbox-guest-x11-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147766" comment="virtualbox-host-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147767" comment="virtualbox-host-source-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147768" comment="virtualbox-qt-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147769" comment="virtualbox-websrv-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5507</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5507" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.32 and earlier and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5507.html">CVE-2016-5507</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5507">SUSE bug 1005557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5507">SUSE bug 1005557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5507">SUSE bug 1005557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5507">SUSE bug 1005557</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5538" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5501.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5538.html">CVE-2016-5538</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5538">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5538">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5538">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5538">SUSE bug 1005621</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147759" comment="python-virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147760" comment="virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147761" comment="virtualbox-devel-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147762" comment="virtualbox-guest-desktop-icons-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147763" comment="virtualbox-guest-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147764" comment="virtualbox-guest-tools-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147765" comment="virtualbox-guest-x11-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147766" comment="virtualbox-host-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147767" comment="virtualbox-host-source-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147768" comment="virtualbox-qt-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147769" comment="virtualbox-websrv-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5542</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5542" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5542.html">CVE-2016-5542</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1005522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1005522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1005522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1005522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1005522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1005522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1005522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1005522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5542">SUSE bug 1009280</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142435" comment="java-1_7_0-openjdk-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142436" comment="java-1_7_0-openjdk-accessibility-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142437" comment="java-1_7_0-openjdk-bootstrap-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142438" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142439" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142440" comment="java-1_7_0-openjdk-demo-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142441" comment="java-1_7_0-openjdk-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142442" comment="java-1_7_0-openjdk-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142443" comment="java-1_7_0-openjdk-javadoc-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142444" comment="java-1_7_0-openjdk-src-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136354" comment="java-1_8_0-openjdk-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136355" comment="java-1_8_0-openjdk-accessibility-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136356" comment="java-1_8_0-openjdk-demo-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136357" comment="java-1_8_0-openjdk-devel-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136358" comment="java-1_8_0-openjdk-headless-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136359" comment="java-1_8_0-openjdk-javadoc-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136360" comment="java-1_8_0-openjdk-src-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5545</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5545" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5545" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5545.html">CVE-2016-5545</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5545">SUSE bug 1020856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5545">SUSE bug 1020856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5545">SUSE bug 1020856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5545">SUSE bug 1020856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148086" comment="python-virtualbox-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148087" comment="virtualbox-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148088" comment="virtualbox-devel-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148089" comment="virtualbox-guest-desktop-icons-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148090" comment="virtualbox-guest-kmp-default-5.1.14_k4.4.36_8-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148091" comment="virtualbox-guest-tools-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148092" comment="virtualbox-guest-x11-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148093" comment="virtualbox-host-kmp-default-5.1.14_k4.4.36_8-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148094" comment="virtualbox-host-source-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148095" comment="virtualbox-qt-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148096" comment="virtualbox-websrv-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5546</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5546" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 7.5 (Integrity impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5546.html">CVE-2016-5546</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5546">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5546">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5546">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5546">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5546">SUSE bug 1020905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5547</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5547" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5547.html">CVE-2016-5547</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5547">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5547">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5547">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5547">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5547">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5547">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5548</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5548" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5548" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 6.5 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5548.html">CVE-2016-5548</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5548">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5548">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5548">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5548">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5548">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5548">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165549" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5549</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5549" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 6.5 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5549.html">CVE-2016-5549</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5549">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5549">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5549">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5549">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5549">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5549">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5552</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5552" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Integrity impacts).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5552.html">CVE-2016-5552</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5552">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5552">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5552">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5552">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5552">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5552">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5554</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5554" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5554.html">CVE-2016-5554</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1005523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1005523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1005523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1005523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1005523</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5554">SUSE bug 1009280</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142435" comment="java-1_7_0-openjdk-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142436" comment="java-1_7_0-openjdk-accessibility-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142437" comment="java-1_7_0-openjdk-bootstrap-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142438" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142439" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142440" comment="java-1_7_0-openjdk-demo-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142441" comment="java-1_7_0-openjdk-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142442" comment="java-1_7_0-openjdk-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142443" comment="java-1_7_0-openjdk-javadoc-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142444" comment="java-1_7_0-openjdk-src-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136354" comment="java-1_8_0-openjdk-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136355" comment="java-1_8_0-openjdk-accessibility-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136356" comment="java-1_8_0-openjdk-demo-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136357" comment="java-1_8_0-openjdk-devel-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136358" comment="java-1_8_0-openjdk-headless-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136359" comment="java-1_8_0-openjdk-javadoc-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136360" comment="java-1_8_0-openjdk-src-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5556</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5556" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5556.html">CVE-2016-5556</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1005524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1005524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1005524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1005524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1005524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1016265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1016289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1016265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1016265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1005524</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1016265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5556">SUSE bug 1009280</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142435" comment="java-1_7_0-openjdk-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142436" comment="java-1_7_0-openjdk-accessibility-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142437" comment="java-1_7_0-openjdk-bootstrap-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142438" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142439" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142440" comment="java-1_7_0-openjdk-demo-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142441" comment="java-1_7_0-openjdk-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142442" comment="java-1_7_0-openjdk-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142443" comment="java-1_7_0-openjdk-javadoc-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142444" comment="java-1_7_0-openjdk-src-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136354" comment="java-1_8_0-openjdk-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136355" comment="java-1_8_0-openjdk-accessibility-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136356" comment="java-1_8_0-openjdk-demo-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136357" comment="java-1_8_0-openjdk-devel-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136358" comment="java-1_8_0-openjdk-headless-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136359" comment="java-1_8_0-openjdk-javadoc-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136360" comment="java-1_8_0-openjdk-src-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5568</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5568" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5568.html">CVE-2016-5568</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1005525</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1005525</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1005525</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1005525</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1005525</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1005525</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1005525</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5568">SUSE bug 1009280</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142435" comment="java-1_7_0-openjdk-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142436" comment="java-1_7_0-openjdk-accessibility-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142437" comment="java-1_7_0-openjdk-bootstrap-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142438" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142439" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142440" comment="java-1_7_0-openjdk-demo-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142441" comment="java-1_7_0-openjdk-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142442" comment="java-1_7_0-openjdk-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142443" comment="java-1_7_0-openjdk-javadoc-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142444" comment="java-1_7_0-openjdk-src-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136354" comment="java-1_8_0-openjdk-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136355" comment="java-1_8_0-openjdk-accessibility-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136356" comment="java-1_8_0-openjdk-demo-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136357" comment="java-1_8_0-openjdk-devel-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136358" comment="java-1_8_0-openjdk-headless-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136359" comment="java-1_8_0-openjdk-javadoc-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136360" comment="java-1_8_0-openjdk-src-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5573</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5573" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5573" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5573.html">CVE-2016-5573</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1005526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1005526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1005526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1005526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1005526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5573">SUSE bug 1009280</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142435" comment="java-1_7_0-openjdk-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142436" comment="java-1_7_0-openjdk-accessibility-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142437" comment="java-1_7_0-openjdk-bootstrap-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142438" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142439" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142440" comment="java-1_7_0-openjdk-demo-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142441" comment="java-1_7_0-openjdk-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142442" comment="java-1_7_0-openjdk-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142443" comment="java-1_7_0-openjdk-javadoc-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142444" comment="java-1_7_0-openjdk-src-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136354" comment="java-1_8_0-openjdk-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136355" comment="java-1_8_0-openjdk-accessibility-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136356" comment="java-1_8_0-openjdk-demo-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136357" comment="java-1_8_0-openjdk-devel-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136358" comment="java-1_8_0-openjdk-headless-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136359" comment="java-1_8_0-openjdk-javadoc-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136360" comment="java-1_8_0-openjdk-src-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165582" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5582</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5582" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5582" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5573.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5582.html">CVE-2016-5582</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5582">SUSE bug 1005527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5582">SUSE bug 1005527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5582">SUSE bug 1005527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5582">SUSE bug 1005527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5582">SUSE bug 1005527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5582">SUSE bug 1005527</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142435" comment="java-1_7_0-openjdk-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142436" comment="java-1_7_0-openjdk-accessibility-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142437" comment="java-1_7_0-openjdk-bootstrap-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142438" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142439" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142440" comment="java-1_7_0-openjdk-demo-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142441" comment="java-1_7_0-openjdk-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142442" comment="java-1_7_0-openjdk-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142443" comment="java-1_7_0-openjdk-javadoc-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142444" comment="java-1_7_0-openjdk-src-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136354" comment="java-1_8_0-openjdk-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136355" comment="java-1_8_0-openjdk-accessibility-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136356" comment="java-1_8_0-openjdk-demo-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136357" comment="java-1_8_0-openjdk-devel-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136358" comment="java-1_8_0-openjdk-headless-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136359" comment="java-1_8_0-openjdk-javadoc-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136360" comment="java-1_8_0-openjdk-src-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5584</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5584" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5584.html">CVE-2016-5584</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5584">SUSE bug 1005558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5584">SUSE bug 1005558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5584">SUSE bug 1005558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5584">SUSE bug 1005558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5584">SUSE bug 1005558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5584">SUSE bug 1005558</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5584">SUSE bug 1008318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5584">SUSE bug 1005558</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136615" comment="libmysqlclient-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136616" comment="libmysqlclient18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136617" comment="libmysqlclient18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136618" comment="libmysqlclient_r18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136619" comment="libmysqlclient_r18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136620" comment="libmysqld-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136621" comment="libmysqld18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136622" comment="mariadb-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136623" comment="mariadb-bench-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136624" comment="mariadb-client-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136625" comment="mariadb-errormessages-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136626" comment="mariadb-test-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136627" comment="mariadb-tools-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5597</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5597" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality via vectors related to Networking.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5597.html">CVE-2016-5597</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1005528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1005528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1005528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1005528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1005528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1009280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5597">SUSE bug 1009280</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142435" comment="java-1_7_0-openjdk-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142436" comment="java-1_7_0-openjdk-accessibility-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142437" comment="java-1_7_0-openjdk-bootstrap-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142438" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142439" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142440" comment="java-1_7_0-openjdk-demo-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142441" comment="java-1_7_0-openjdk-devel-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142442" comment="java-1_7_0-openjdk-headless-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142443" comment="java-1_7_0-openjdk-javadoc-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142444" comment="java-1_7_0-openjdk-src-1.7.0.121-37.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136354" comment="java-1_8_0-openjdk-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136355" comment="java-1_8_0-openjdk-accessibility-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136356" comment="java-1_8_0-openjdk-demo-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136357" comment="java-1_8_0-openjdk-devel-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136358" comment="java-1_8_0-openjdk-headless-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136359" comment="java-1_8_0-openjdk-javadoc-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136360" comment="java-1_8_0-openjdk-src-1.8.0.111-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5605</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5605" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5605" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5605.html">CVE-2016-5605</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5605">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5605">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5605">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5605">SUSE bug 1005621</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147759" comment="python-virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147760" comment="virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147761" comment="virtualbox-devel-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147762" comment="virtualbox-guest-desktop-icons-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147763" comment="virtualbox-guest-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147764" comment="virtualbox-guest-tools-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147765" comment="virtualbox-guest-x11-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147766" comment="virtualbox-host-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147767" comment="virtualbox-host-source-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147768" comment="virtualbox-qt-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147769" comment="virtualbox-websrv-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5608</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5608" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5608" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5613.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5608.html">CVE-2016-5608</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5608">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5608">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5608">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5608">SUSE bug 1005621</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147759" comment="python-virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147760" comment="virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147761" comment="virtualbox-devel-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147762" comment="virtualbox-guest-desktop-icons-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147763" comment="virtualbox-guest-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147764" comment="virtualbox-guest-tools-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147765" comment="virtualbox-guest-x11-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147766" comment="virtualbox-host-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147767" comment="virtualbox-host-source-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147768" comment="virtualbox-qt-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147769" comment="virtualbox-websrv-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165609" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5609</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5609" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5609" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5609.html">CVE-2016-5609</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5609">SUSE bug 1005560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5609">SUSE bug 1005560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5609">SUSE bug 1005560</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5609">SUSE bug 1005560</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5610</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5610" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5610" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5610.html">CVE-2016-5610</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5610">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5610">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5610">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5610">SUSE bug 1005621</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147759" comment="python-virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147760" comment="virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147761" comment="virtualbox-devel-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147762" comment="virtualbox-guest-desktop-icons-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147763" comment="virtualbox-guest-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147764" comment="virtualbox-guest-tools-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147765" comment="virtualbox-guest-x11-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147766" comment="virtualbox-host-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147767" comment="virtualbox-host-source-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147768" comment="virtualbox-qt-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147769" comment="virtualbox-websrv-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165611" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5611</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5611" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5611" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via vectors related to Core.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5611.html">CVE-2016-5611</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5611">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5611">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5611">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5611">SUSE bug 1005621</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147759" comment="python-virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147760" comment="virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147761" comment="virtualbox-devel-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147762" comment="virtualbox-guest-desktop-icons-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147763" comment="virtualbox-guest-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147764" comment="virtualbox-guest-tools-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147765" comment="virtualbox-guest-x11-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147766" comment="virtualbox-host-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147767" comment="virtualbox-host-source-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147768" comment="virtualbox-qt-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147769" comment="virtualbox-websrv-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5612</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5612" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5612" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5612.html">CVE-2016-5612</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5612">SUSE bug 1005561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5612">SUSE bug 1005561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5612">SUSE bug 1005561</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5612">SUSE bug 1005561</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165613" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5613</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5613" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5613" source="CVE"/>
    <description>
    Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5608.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5613.html">CVE-2016-5613</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5613">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5613">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5613">SUSE bug 1005621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5613">SUSE bug 1005621</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136045" comment="python-virtualbox-5.1.8-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136046" comment="virtualbox-5.1.8-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136047" comment="virtualbox-devel-5.1.8-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136048" comment="virtualbox-guest-desktop-icons-5.1.8-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136049" comment="virtualbox-guest-kmp-default-5.1.8_k4.4.27_2-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136050" comment="virtualbox-guest-tools-5.1.8-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136051" comment="virtualbox-guest-x11-5.1.8-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136052" comment="virtualbox-host-kmp-default-5.1.8_k4.4.27_2-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136053" comment="virtualbox-host-source-5.1.8-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136054" comment="virtualbox-qt-5.1.8-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136055" comment="virtualbox-websrv-5.1.8-3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:2016561313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-561313</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-561313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-561313" source="CVE"/>
    <description>
    Unknown.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-561313.html">CVE-2016-561313</cve>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147759" comment="python-virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147760" comment="virtualbox-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147761" comment="virtualbox-devel-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147762" comment="virtualbox-guest-desktop-icons-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147763" comment="virtualbox-guest-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147764" comment="virtualbox-guest-tools-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147765" comment="virtualbox-guest-x11-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147766" comment="virtualbox-host-kmp-default-5.1.12_k4.4.36_8-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147767" comment="virtualbox-host-source-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147768" comment="virtualbox-qt-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147769" comment="virtualbox-websrv-5.1.12-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5616</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5616" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5616" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason:  This candidate is a reservation duplicate of CVE-2016-6663.  Notes: All CVE users should reference CVE-2016-6663 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5616.html">CVE-2016-5616</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5616">SUSE bug 1005562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5616">SUSE bug 1005562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5616">SUSE bug 1005562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5616">SUSE bug 1005562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5616">SUSE bug 1008318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5616">SUSE bug 1005562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5616">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5616">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5616">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5616">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5616">SUSE bug 998309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136615" comment="libmysqlclient-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136616" comment="libmysqlclient18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136617" comment="libmysqlclient18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136618" comment="libmysqlclient_r18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136619" comment="libmysqlclient_r18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136620" comment="libmysqld-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136621" comment="libmysqld18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136622" comment="mariadb-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136623" comment="mariadb-bench-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136624" comment="mariadb-client-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136625" comment="mariadb-errormessages-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136626" comment="mariadb-test-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136627" comment="mariadb-tools-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5617</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5617" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-6664.  Reason: This candidate is a reservation duplicate of CVE-2016-6664.  Notes: All CVE users should reference CVE-2016-6664 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5617.html">CVE-2016-5617</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5617">SUSE bug 1005563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5617">SUSE bug 1005563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5617">SUSE bug 1005563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5617">SUSE bug 1005563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5617">SUSE bug 1008253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5617">SUSE bug 1005563</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5617">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5617">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5617">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5617">SUSE bug 998309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5624</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5624" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5624.html">CVE-2016-5624</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5624">SUSE bug 1005564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5624">SUSE bug 1005564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5624">SUSE bug 1008318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5624">SUSE bug 1005564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5624">SUSE bug 1005564</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136615" comment="libmysqlclient-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136616" comment="libmysqlclient18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136617" comment="libmysqlclient18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136618" comment="libmysqlclient_r18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136619" comment="libmysqlclient_r18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136620" comment="libmysqld-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136621" comment="libmysqld18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136622" comment="mariadb-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136623" comment="mariadb-bench-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136624" comment="mariadb-client-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136625" comment="mariadb-errormessages-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136626" comment="mariadb-test-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136627" comment="mariadb-tools-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5626</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5626" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5626.html">CVE-2016-5626</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5626">SUSE bug 1005566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5626">SUSE bug 1005566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5626">SUSE bug 1005566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5626">SUSE bug 1008318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5626">SUSE bug 1005566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5626">SUSE bug 1005566</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136615" comment="libmysqlclient-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136616" comment="libmysqlclient18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136617" comment="libmysqlclient18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136618" comment="libmysqlclient_r18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136619" comment="libmysqlclient_r18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136620" comment="libmysqld-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136621" comment="libmysqld18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136622" comment="mariadb-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136623" comment="mariadb-bench-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136624" comment="mariadb-client-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136625" comment="mariadb-errormessages-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136626" comment="mariadb-test-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136627" comment="mariadb-tools-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5627</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5627" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5627" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to Server: InnoDB.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5627.html">CVE-2016-5627</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5627">SUSE bug 1005567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5627">SUSE bug 1005567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5627">SUSE bug 1005567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5629</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5629" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5629" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5629.html">CVE-2016-5629</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5629">SUSE bug 1005569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5629">SUSE bug 1005569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5629">SUSE bug 1005569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5629">SUSE bug 1008318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5629">SUSE bug 1005569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5629">SUSE bug 1005569</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136615" comment="libmysqlclient-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136616" comment="libmysqlclient18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136617" comment="libmysqlclient18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136618" comment="libmysqlclient_r18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136619" comment="libmysqlclient_r18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136620" comment="libmysqld-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136621" comment="libmysqld18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136622" comment="mariadb-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136623" comment="mariadb-bench-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136624" comment="mariadb-client-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136625" comment="mariadb-errormessages-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136626" comment="mariadb-test-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136627" comment="mariadb-tools-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5630</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5630" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5630" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5630.html">CVE-2016-5630</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5630">SUSE bug 1005570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5630">SUSE bug 1005570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5630">SUSE bug 1005570</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5636</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5636" source="CVE"/>
    <description>
    Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5636.html">CVE-2016-5636</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 985177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 1065451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 1065451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 1065451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 1065451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 1065451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 1065451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5636">SUSE bug 1065451</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140306" comment="python-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140307" comment="python-curses-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151914" comment="python-curses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140311" comment="python-doc-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153293" comment="python-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140308" comment="python-gdbm-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151915" comment="python-gdbm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140317" comment="python3-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140318" comment="python3-curses-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140319" comment="python3-dbm-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140328" comment="python3-doc-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152174" comment="python3-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140320" comment="python3-tk-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151919" comment="python3-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5652</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5652" source="CVE"/>
    <description>
    An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5652.html">CVE-2016-5652</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5652">SUSE bug 1007280</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146600" comment="libtiff-devel-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146601" comment="libtiff-devel-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146602" comment="libtiff5-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146603" comment="libtiff5-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146604" comment="tiff-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5687</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5687" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5687" source="CVE"/>
    <description>
    The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5687.html">CVE-2016-5687</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 985448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 985448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 985448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 985448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 985448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 985448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 985448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 985448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 985448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 985448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 1000713</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 1000714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5687">SUSE bug 1074610</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5688</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5688" source="CVE"/>
    <description>
    The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger (1) a heap-based buffer overflow in the SetPixelIndex function or an invalid write operation in the (2) ScaleCharToQuantum or (3) SetPixelIndex functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5688.html">CVE-2016-5688</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5688">SUSE bug 985442</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5689</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5689" source="CVE"/>
    <description>
    The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5689.html">CVE-2016-5689</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5689">SUSE bug 985460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5689">SUSE bug 985460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5689">SUSE bug 985460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5689">SUSE bug 985460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5689">SUSE bug 985460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5689">SUSE bug 985460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5689">SUSE bug 985460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5689">SUSE bug 985460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5689">SUSE bug 985460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5689">SUSE bug 985460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5690</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5690" source="CVE"/>
    <description>
    The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5690.html">CVE-2016-5690</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5690">SUSE bug 985451</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5691</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5691" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5691" source="CVE"/>
    <description>
    The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of (1) pixel.red, (2) pixel.green, and (3) pixel.blue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5691.html">CVE-2016-5691</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5691">SUSE bug 985456</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5696</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5696" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5696" source="CVE"/>
    <description>
    net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5696.html">CVE-2016-5696</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 994167</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5696">SUSE bug 989152</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165699" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5699</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5699" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5699" source="CVE"/>
    <description>
    CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5699.html">CVE-2016-5699</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 986630</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5699">SUSE bug 985348</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140008" comment="libpython2_7-1_0-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151571" comment="libpython2_7-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140009" comment="libpython2_7-1_0-32bit-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151572" comment="libpython2_7-1_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140013" comment="libpython3_4m1_0-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151646" comment="libpython3_4m1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140306" comment="python-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151913" comment="python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140010" comment="python-base-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151573" comment="python-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140307" comment="python-curses-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151914" comment="python-curses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140011" comment="python-devel-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151574" comment="python-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140311" comment="python-doc-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153293" comment="python-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140308" comment="python-gdbm-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151915" comment="python-gdbm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140012" comment="python-xml-2.7.12-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151575" comment="python-xml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140317" comment="python3-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151916" comment="python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140014" comment="python3-base-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151647" comment="python3-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140318" comment="python3-curses-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151917" comment="python3-curses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140319" comment="python3-dbm-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151918" comment="python3-dbm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140015" comment="python3-devel-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152173" comment="python3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140328" comment="python3-doc-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152174" comment="python3-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140320" comment="python3-tk-3.4.5-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151919" comment="python3-tk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165759" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5759</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5759" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5759" source="CVE"/>
    <description>
    The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5759.html">CVE-2016-5759</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5759">SUSE bug 990200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5759">SUSE bug 990200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5759">SUSE bug 990200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5759">SUSE bug 990200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5759">SUSE bug 990200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5759">SUSE bug 990200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5759">SUSE bug 990200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5759">SUSE bug 990200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5759">SUSE bug 990200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5759">SUSE bug 990200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5759">SUSE bug 990200</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131252" comment="kdump-0.8.15-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153744" comment="kdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5766</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5766" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5766" source="CVE"/>
    <description>
    Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5766.html">CVE-2016-5766</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5766">SUSE bug 986386</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163059" comment="apache2-mod_php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163235" comment="php5-enchant-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163238" comment="php5-fileinfo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163239" comment="php5-firebird-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163240" comment="php5-fpm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163247" comment="php5-intl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163252" comment="php5-mssql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163255" comment="php5-opcache-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163257" comment="php5-pcntl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163261" comment="php5-phar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163262" comment="php5-posix-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163263" comment="php5-pspell-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163264" comment="php5-readline-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163267" comment="php5-soap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163271" comment="php5-sysvmsg-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163278" comment="php5-xmlrpc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163060" comment="php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163061" comment="php7-bcmath-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163062" comment="php7-bz2-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163063" comment="php7-calendar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163064" comment="php7-ctype-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163065" comment="php7-curl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163066" comment="php7-dba-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163067" comment="php7-devel-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163068" comment="php7-dom-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163069" comment="php7-enchant-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163070" comment="php7-exif-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163071" comment="php7-fastcgi-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163072" comment="php7-fileinfo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163073" comment="php7-firebird-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163074" comment="php7-fpm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163075" comment="php7-ftp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163076" comment="php7-gd-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163077" comment="php7-gettext-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163078" comment="php7-gmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163079" comment="php7-iconv-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163080" comment="php7-imap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163081" comment="php7-intl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163082" comment="php7-json-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163083" comment="php7-ldap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163084" comment="php7-mbstring-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163085" comment="php7-mcrypt-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163086" comment="php7-mysql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163087" comment="php7-odbc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163088" comment="php7-opcache-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163089" comment="php7-openssl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163090" comment="php7-pcntl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163091" comment="php7-pdo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163092" comment="php7-pear-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163093" comment="php7-pear-Archive_Tar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163094" comment="php7-pgsql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163095" comment="php7-phar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163096" comment="php7-posix-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163097" comment="php7-pspell-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163098" comment="php7-readline-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163099" comment="php7-shmop-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163100" comment="php7-snmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163101" comment="php7-soap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163102" comment="php7-sockets-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163103" comment="php7-sqlite-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163104" comment="php7-sysvmsg-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163105" comment="php7-sysvsem-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163106" comment="php7-sysvshm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163107" comment="php7-tidy-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163108" comment="php7-tokenizer-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163109" comment="php7-wddx-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163110" comment="php7-xmlreader-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163111" comment="php7-xmlrpc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163112" comment="php7-xmlwriter-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163113" comment="php7-xsl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163114" comment="php7-zip-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163115" comment="php7-zlib-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5767</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5767" source="CVE"/>
    <description>
    Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5767.html">CVE-2016-5767</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5767">SUSE bug 986393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5768</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5768" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5768" source="CVE"/>
    <description>
    Double free vulnerability in the _php_mb_regex_ereg_replace_exec function in php_mbregex.c in the mbstring extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by leveraging a callback exception.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5768.html">CVE-2016-5768</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5768">SUSE bug 986246</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5769</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5769" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5769" source="CVE"/>
    <description>
    Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted length value, related to the (1) mcrypt_generic and (2) mdecrypt_generic functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5769.html">CVE-2016-5769</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5769">SUSE bug 986388</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165770" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5770</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5770" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5770" source="CVE"/>
    <description>
    Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer argument, a related issue to CVE-2016-5096.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5770.html">CVE-2016-5770</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5770">SUSE bug 986392</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5771</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5771" source="CVE"/>
    <description>
    spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5771.html">CVE-2016-5771</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5771">SUSE bug 986391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5772</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5772" source="CVE"/>
    <description>
    Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted XML data that is mishandled in a wddx_deserialize call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5772.html">CVE-2016-5772</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5772">SUSE bug 986244</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5773</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5773" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5773" source="CVE"/>
    <description>
    php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5773.html">CVE-2016-5773</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5773">SUSE bug 986247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142464" comment="apache2-mod_php5-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142465" comment="php5-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142466" comment="php5-bcmath-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142467" comment="php5-bz2-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142468" comment="php5-calendar-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142469" comment="php5-ctype-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142470" comment="php5-curl-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142471" comment="php5-dba-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142472" comment="php5-devel-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142473" comment="php5-dom-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142474" comment="php5-enchant-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142475" comment="php5-exif-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142476" comment="php5-fastcgi-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142477" comment="php5-fileinfo-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142478" comment="php5-firebird-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142479" comment="php5-fpm-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142480" comment="php5-ftp-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142481" comment="php5-gd-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142482" comment="php5-gettext-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142483" comment="php5-gmp-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142484" comment="php5-iconv-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142485" comment="php5-imap-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142486" comment="php5-intl-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142487" comment="php5-json-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142488" comment="php5-ldap-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142489" comment="php5-mbstring-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142490" comment="php5-mcrypt-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142491" comment="php5-mssql-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142492" comment="php5-mysql-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142493" comment="php5-odbc-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142494" comment="php5-opcache-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142495" comment="php5-openssl-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142496" comment="php5-pcntl-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142497" comment="php5-pdo-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142498" comment="php5-pear-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142499" comment="php5-pgsql-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142500" comment="php5-phar-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142501" comment="php5-posix-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142502" comment="php5-pspell-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142503" comment="php5-readline-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142504" comment="php5-shmop-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142505" comment="php5-snmp-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142506" comment="php5-soap-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142507" comment="php5-sockets-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142508" comment="php5-sqlite-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142509" comment="php5-suhosin-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142510" comment="php5-sysvmsg-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142511" comment="php5-sysvsem-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142512" comment="php5-sysvshm-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142513" comment="php5-tidy-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142514" comment="php5-tokenizer-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142515" comment="php5-wddx-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142516" comment="php5-xmlreader-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142517" comment="php5-xmlrpc-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142518" comment="php5-xmlwriter-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142519" comment="php5-xsl-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142520" comment="php5-zip-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142521" comment="php5-zlib-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5824</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5824" source="CVE"/>
    <description>
    libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5824.html">CVE-2016-5824</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5824">SUSE bug 986639</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159577" comment="libical-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159578" comment="libical is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159579" comment="libical-devel-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159580" comment="libical-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159581" comment="libical-devel-static-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159582" comment="libical-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159583" comment="libical-doc-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159584" comment="libical-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159585" comment="libical1-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159586" comment="libical1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159587" comment="libical1-32bit-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159588" comment="libical1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5827</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5827" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5827" source="CVE"/>
    <description>
    The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5827.html">CVE-2016-5827</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5827">SUSE bug 986631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159577" comment="libical-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159578" comment="libical is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159579" comment="libical-devel-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159580" comment="libical-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159581" comment="libical-devel-static-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159582" comment="libical-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159583" comment="libical-doc-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159584" comment="libical-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159585" comment="libical1-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159586" comment="libical1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159587" comment="libical1-32bit-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159588" comment="libical1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5828</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5828" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5828" source="CVE"/>
    <description>
    The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service (invalid process state or TM Bad Thing exception, and system crash) or possibly have unspecified other impact by starting and suspending a transaction before an exec system call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5828.html">CVE-2016-5828</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 991065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5828">SUSE bug 986569</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5829</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5829" source="CVE"/>
    <description>
    Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a denial of service or possibly have unspecified other impact via a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5829.html">CVE-2016-5829</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 990058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 991651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 1054127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 1054127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 986572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 1053919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5829">SUSE bug 1054127</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5841</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5841" source="CVE"/>
    <description>
    Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via vectors involving the offset variable.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5841.html">CVE-2016-5841</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5841">SUSE bug 986609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5841">SUSE bug 986609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5841">SUSE bug 986609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5841">SUSE bug 986609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5841">SUSE bug 986609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5841">SUSE bug 986609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5841">SUSE bug 986609</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5841">SUSE bug 986609</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5842</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5842" source="CVE"/>
    <description>
    MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5842.html">CVE-2016-5842</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5842">SUSE bug 986608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5842">SUSE bug 986608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5842">SUSE bug 986608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5842">SUSE bug 986608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5842">SUSE bug 986608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5842">SUSE bug 986608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5842">SUSE bug 986608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5842">SUSE bug 986608</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5844</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5844" source="CVE"/>
    <description>
    Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5844.html">CVE-2016-5844</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5844">SUSE bug 986566</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136448" comment="bsdtar-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136449" comment="libarchive-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152671" comment="libarchive is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136450" comment="libarchive-devel-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136451" comment="libarchive13-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136452" comment="libarchive13-32bit-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152672" comment="libarchive13-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20165875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-5875</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-5875" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5875" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5314.  Reason: This candidate is a reservation duplicate of CVE-2016-5314.  Notes: All CVE users should reference CVE-2016-5314 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-5875.html">CVE-2016-5875</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5875">SUSE bug 987351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5875">SUSE bug 984831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5875">SUSE bug 987351</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5875">SUSE bug 1007284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5875">SUSE bug 1007284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-5875">SUSE bug 1007284</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140150" comment="libtiff-devel-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146601" comment="libtiff-devel-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140151" comment="libtiff5-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140152" comment="libtiff5-32bit-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140153" comment="tiff-4.0.6-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6128</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6128" source="CVE"/>
    <description>
    The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6128.html">CVE-2016-6128</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 987580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 987580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 991710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 987580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 987580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 991710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 991710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 987580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 987580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 991710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 991710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 987580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 987580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6128">SUSE bug 987580</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6132</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6132" source="CVE"/>
    <description>
    The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6132.html">CVE-2016-6132</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6132">SUSE bug 987577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6132">SUSE bug 987577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6132">SUSE bug 991436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6132">SUSE bug 987577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6132">SUSE bug 987577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6132">SUSE bug 991436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6132">SUSE bug 987577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6132">SUSE bug 995034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6132">SUSE bug 987577</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6153</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6153" source="CVE"/>
    <description>
    os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6153.html">CVE-2016-6153</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6153">SUSE bug 987394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6153">SUSE bug 987394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6153">SUSE bug 987394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6153">SUSE bug 987394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6153">SUSE bug 987394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6153">SUSE bug 987394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6153">SUSE bug 987394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6153">SUSE bug 987394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6153">SUSE bug 987394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6153">SUSE bug 987394</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140098" comment="libsqlite3-0-3.8.10.2-7.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153745" comment="libsqlite3-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140099" comment="libsqlite3-0-32bit-3.8.10.2-7.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153746" comment="libsqlite3-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140100" comment="sqlite3-3.8.10.2-7.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153747" comment="sqlite3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140101" comment="sqlite3-devel-3.8.10.2-7.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153748" comment="sqlite3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140102" comment="sqlite3-doc-3.8.10.2-7.9 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153749" comment="sqlite3-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166160" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6160</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6160" source="CVE"/>
    <description>
    tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service (segmentation fault) via a large frame, a related issue to CVE-2017-14266.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6160.html">CVE-2016-6160</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6160">SUSE bug 987846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6160">SUSE bug 987846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6160">SUSE bug 987846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6160">SUSE bug 987846</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6160">SUSE bug 987846</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136470" comment="tcpreplay-4.1.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154264" comment="tcpreplay is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6161</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6161" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6161" source="CVE"/>
    <description>
    The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6161.html">CVE-2016-6161</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6161">SUSE bug 988032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6161">SUSE bug 988032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6161">SUSE bug 988032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6161">SUSE bug 988032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6161">SUSE bug 988032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6161">SUSE bug 988032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6161">SUSE bug 988032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6161">SUSE bug 988032</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6170</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6170" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6170" source="CVE"/>
    <description>
    ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6170.html">CVE-2016-6170</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6170">SUSE bug 987866</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154515" comment="bind-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154516" comment="bind-chrootenv-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154517" comment="bind-devel-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153102" comment="bind-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154518" comment="bind-doc-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154519" comment="bind-libs-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154520" comment="bind-libs-32bit-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153103" comment="bind-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154521" comment="bind-lwresd-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153104" comment="bind-lwresd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154522" comment="bind-utils-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6185</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6185" source="CVE"/>
    <description>
    The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6185.html">CVE-2016-6185</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6185">SUSE bug 988311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6185">SUSE bug 988311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6185">SUSE bug 999993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6185">SUSE bug 988311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6185">SUSE bug 988311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6185">SUSE bug 988311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6185">SUSE bug 988311</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140286" comment="perl-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140287" comment="perl-32bit-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140288" comment="perl-base-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140289" comment="perl-doc-5.18.2-5.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166197" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6197</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6197" source="CVE"/>
    <description>
    fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6197.html">CVE-2016-6197</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6197">SUSE bug 988708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6197">SUSE bug 988708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6197">SUSE bug 988708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6197">SUSE bug 988708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6197">SUSE bug 988708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6197">SUSE bug 988708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6197">SUSE bug 988708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6197">SUSE bug 988708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6207</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6207" source="CVE"/>
    <description>
    Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6207.html">CVE-2016-6207</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6207">SUSE bug 991434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6207">SUSE bug 991434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6207">SUSE bug 991622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6207">SUSE bug 991434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6207">SUSE bug 991434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6207">SUSE bug 991434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6207">SUSE bug 991622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6207">SUSE bug 991622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6207">SUSE bug 991434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6207">SUSE bug 991622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6207">SUSE bug 991622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6210" source="CVE"/>
    <description>
    sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6210.html">CVE-2016-6210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 1001712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 989363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 1087412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6210">SUSE bug 1087412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6214</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6214" source="CVE"/>
    <description>
    gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6214.html">CVE-2016-6214</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6214">SUSE bug 987577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6214">SUSE bug 991436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6214">SUSE bug 991436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6214">SUSE bug 991436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6214">SUSE bug 991436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6214">SUSE bug 995034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6214">SUSE bug 991436</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6225</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6225" source="CVE"/>
    <description>
    xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6225.html">CVE-2016-6225</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6225">SUSE bug 1019858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6225">SUSE bug 1019858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6225">SUSE bug 1019858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147471" comment="xtrabackup-2.3.6-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153750" comment="xtrabackup is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147472" comment="xtrabackup-test-2.3.6-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153751" comment="xtrabackup-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6250</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6250" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6250" source="CVE"/>
    <description>
    Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6250.html">CVE-2016-6250</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6250">SUSE bug 989980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6250">SUSE bug 989980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6250">SUSE bug 989980</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136448" comment="bsdtar-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136449" comment="libarchive-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152671" comment="libarchive is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136450" comment="libarchive-devel-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136451" comment="libarchive13-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136452" comment="libarchive13-32bit-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152672" comment="libarchive13-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166255" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6255</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6255" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6255" source="CVE"/>
    <description>
    Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6255.html">CVE-2016-6255</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6255">SUSE bug 989948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6255">SUSE bug 989948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6255">SUSE bug 989948</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156367" comment="libupnp-1.6.21-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156371" comment="libupnp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156368" comment="libupnp-devel-1.6.21-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156372" comment="libupnp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156369" comment="libupnp6-1.6.21-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154113" comment="libupnp6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156370" comment="libupnp6-32bit-1.6.21-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156373" comment="libupnp6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6258</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6258" source="CVE"/>
    <description>
    The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6258.html">CVE-2016-6258</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6258">SUSE bug 988692</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6259</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6259" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6259" source="CVE"/>
    <description>
    Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6259.html">CVE-2016-6259</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6259">SUSE bug 988676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6259">SUSE bug 988676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6259">SUSE bug 988676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6259">SUSE bug 988676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6259">SUSE bug 988694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6259">SUSE bug 988676</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6259">SUSE bug 988676</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6261</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6261" source="CVE"/>
    <description>
    The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of input.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6261.html">CVE-2016-6261</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6261">SUSE bug 990190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6261">SUSE bug 990190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6261">SUSE bug 990190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6261">SUSE bug 990190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6261">SUSE bug 990190</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139877" comment="libidn-devel-1.28-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152666" comment="libidn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139878" comment="libidn11-1.28-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152668" comment="libidn11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6262</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6262" source="CVE"/>
    <description>
    idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6262.html">CVE-2016-6262</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 1014473</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 1014473</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 1014473</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6262">SUSE bug 990189</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139877" comment="libidn-devel-1.28-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152666" comment="libidn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139878" comment="libidn11-1.28-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152668" comment="libidn11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166263" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6263</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6263" source="CVE"/>
    <description>
    The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted UTF-8 data.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6263.html">CVE-2016-6263</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6263">SUSE bug 990191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6263">SUSE bug 990191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6263">SUSE bug 990191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6263">SUSE bug 990191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6263">SUSE bug 990191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6263">SUSE bug 990191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6263">SUSE bug 990191</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139877" comment="libidn-devel-1.28-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152666" comment="libidn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139878" comment="libidn11-1.28-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152668" comment="libidn11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166271" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6271</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6271" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6271" source="CVE"/>
    <description>
    The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle attackers to conduct spoofing attacks by leveraging a missing HVI check on DHPart2 packet reception.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6271.html">CVE-2016-6271</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6271">SUSE bug 1020844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6271">SUSE bug 1020844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6271">SUSE bug 1020844</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148027" comment="bzrtp-1.0.3-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153757" comment="bzrtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148028" comment="bzrtp-devel-1.0.3-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153758" comment="bzrtp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148029" comment="libbzrtp0-1.0.3-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153759" comment="libbzrtp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148030" comment="libbzrtp0-32bit-1.0.3-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153760" comment="libbzrtp0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6288</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6288" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6288" source="CVE"/>
    <description>
    The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via vectors involving the smart_str data type.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6288.html">CVE-2016-6288</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6288">SUSE bug 991433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6288">SUSE bug 991433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6288">SUSE bug 991433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6288">SUSE bug 991433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6288">SUSE bug 991433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6288">SUSE bug 991433</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6289</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6289" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6289" source="CVE"/>
    <description>
    Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted extract operation on a ZIP archive.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6289.html">CVE-2016-6289</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6289">SUSE bug 991428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6289">SUSE bug 991428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6289">SUSE bug 991428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6289">SUSE bug 991428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6289">SUSE bug 991428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6289">SUSE bug 991428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6289">SUSE bug 991428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6289">SUSE bug 991428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6289">SUSE bug 991428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6289">SUSE bug 991428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6289">SUSE bug 991428</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6290</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6290" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6290" source="CVE"/>
    <description>
    ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to session deserialization.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6290.html">CVE-2016-6290</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6290">SUSE bug 991429</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6291</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6291" source="CVE"/>
    <description>
    The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds array access and memory corruption), obtain sensitive information from process memory, or possibly have unspecified other impact via a crafted JPEG image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6291.html">CVE-2016-6291</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6291">SUSE bug 991427</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166292" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6292</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6292" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6292" source="CVE"/>
    <description>
    The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted JPEG image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6292.html">CVE-2016-6292</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6292">SUSE bug 991422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6292">SUSE bug 991422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6292">SUSE bug 991422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6292">SUSE bug 991422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6292">SUSE bug 991422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6292">SUSE bug 991422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6294</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6294" source="CVE"/>
    <description>
    The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restrict calls to the ICU uloc_acceptLanguageFromHTTP function, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long argument.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6294.html">CVE-2016-6294</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 990636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 990636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 990636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 990636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 990636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 990636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1044976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 990636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6294">SUSE bug 1035111</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157852" comment="apache2-mod_php5-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158083" comment="apache2-mod_php7-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157853" comment="php5-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157854" comment="php5-bcmath-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157855" comment="php5-bz2-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157856" comment="php5-calendar-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157857" comment="php5-ctype-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157858" comment="php5-curl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157859" comment="php5-dba-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157860" comment="php5-devel-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157861" comment="php5-dom-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157862" comment="php5-enchant-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157863" comment="php5-exif-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157864" comment="php5-fastcgi-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157865" comment="php5-fileinfo-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157866" comment="php5-firebird-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157867" comment="php5-fpm-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157868" comment="php5-ftp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157869" comment="php5-gd-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157870" comment="php5-gettext-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157871" comment="php5-gmp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157872" comment="php5-iconv-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157873" comment="php5-imap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157874" comment="php5-intl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157875" comment="php5-json-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157876" comment="php5-ldap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157877" comment="php5-mbstring-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157878" comment="php5-mcrypt-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157879" comment="php5-mssql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157880" comment="php5-mysql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157881" comment="php5-odbc-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157882" comment="php5-opcache-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157883" comment="php5-openssl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157884" comment="php5-pcntl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157885" comment="php5-pdo-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157886" comment="php5-pear-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157887" comment="php5-pgsql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157888" comment="php5-phar-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157889" comment="php5-posix-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157890" comment="php5-pspell-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157891" comment="php5-readline-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157892" comment="php5-shmop-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157893" comment="php5-snmp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157894" comment="php5-soap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157895" comment="php5-sockets-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157896" comment="php5-sqlite-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157897" comment="php5-suhosin-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157898" comment="php5-sysvmsg-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157899" comment="php5-sysvsem-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157900" comment="php5-sysvshm-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157901" comment="php5-tidy-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157902" comment="php5-tokenizer-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157903" comment="php5-wddx-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157904" comment="php5-xmlreader-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157905" comment="php5-xmlrpc-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157906" comment="php5-xmlwriter-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157907" comment="php5-xsl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157908" comment="php5-zip-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157909" comment="php5-zlib-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158084" comment="php7-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158085" comment="php7-bcmath-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158086" comment="php7-bz2-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158087" comment="php7-calendar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158088" comment="php7-ctype-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158089" comment="php7-curl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158090" comment="php7-dba-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158091" comment="php7-devel-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158092" comment="php7-dom-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158093" comment="php7-enchant-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158094" comment="php7-exif-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158095" comment="php7-fastcgi-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158096" comment="php7-fileinfo-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158097" comment="php7-firebird-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158098" comment="php7-fpm-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158099" comment="php7-ftp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158100" comment="php7-gd-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158101" comment="php7-gettext-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158102" comment="php7-gmp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158103" comment="php7-iconv-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158104" comment="php7-imap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158105" comment="php7-intl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158106" comment="php7-json-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158107" comment="php7-ldap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158108" comment="php7-mbstring-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158109" comment="php7-mcrypt-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158110" comment="php7-mysql-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158111" comment="php7-odbc-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158112" comment="php7-opcache-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158113" comment="php7-openssl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158114" comment="php7-pcntl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158115" comment="php7-pdo-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158116" comment="php7-pear-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158117" comment="php7-pear-Archive_Tar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158118" comment="php7-pgsql-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158119" comment="php7-phar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158120" comment="php7-posix-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158121" comment="php7-pspell-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158122" comment="php7-readline-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158123" comment="php7-shmop-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158124" comment="php7-snmp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158125" comment="php7-soap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158126" comment="php7-sockets-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158127" comment="php7-sqlite-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158128" comment="php7-sysvmsg-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158129" comment="php7-sysvsem-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158130" comment="php7-sysvshm-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158131" comment="php7-tidy-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158132" comment="php7-tokenizer-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158133" comment="php7-wddx-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158134" comment="php7-xmlreader-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158135" comment="php7-xmlrpc-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158136" comment="php7-xmlwriter-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158137" comment="php7-xsl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158138" comment="php7-zip-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158139" comment="php7-zlib-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6295</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6295" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6295" source="CVE"/>
    <description>
    ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via crafted serialized data, a related issue to CVE-2016-5773.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6295.html">CVE-2016-6295</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6295">SUSE bug 991424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6295">SUSE bug 991424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6295">SUSE bug 991424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6295">SUSE bug 991424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6295">SUSE bug 991424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6295">SUSE bug 991424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6295">SUSE bug 991424</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166296" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6296</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6296" source="CVE"/>
    <description>
    Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a long first argument to the PHP xmlrpc_encode_request function.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6296.html">CVE-2016-6296</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6296">SUSE bug 991437</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6297</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6297" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6297" source="CVE"/>
    <description>
    Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted zip:// URL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6297.html">CVE-2016-6297</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6297">SUSE bug 991426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6297">SUSE bug 991426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6297">SUSE bug 991426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6297">SUSE bug 991426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6297">SUSE bug 991426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6297">SUSE bug 991426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6297">SUSE bug 991426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6297">SUSE bug 991426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6297">SUSE bug 991426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6297">SUSE bug 991426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6297">SUSE bug 991426</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6302</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6302" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" source="CVE"/>
    <description>
    The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6302.html">CVE-2016-6302</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6302">SUSE bug 995324</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6303</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" source="CVE"/>
    <description>
    Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6303.html">CVE-2016-6303</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 994844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6303">SUSE bug 995377</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6304</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" source="CVE"/>
    <description>
    Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6304.html">CVE-2016-6304</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 1001706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 1003811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 1003811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 1005579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 1021375</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6304">SUSE bug 999666</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166306" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6306</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6306" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" source="CVE"/>
    <description>
    The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6306.html">CVE-2016-6306</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999665</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6306">SUSE bug 999668</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6313</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6313" source="CVE"/>
    <description>
    The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6313.html">CVE-2016-6313</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6313">SUSE bug 994157</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139859" comment="libgcrypt-devel-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151920" comment="libgcrypt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139860" comment="libgcrypt20-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139861" comment="libgcrypt20-32bit-1.6.1-33.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6318</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6318" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6318" source="CVE"/>
    <description>
    Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field, involving longbuffer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6318.html">CVE-2016-6318</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 992966</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6318">SUSE bug 1021932</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139344" comment="cracklib-2.9.0-7.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153761" comment="cracklib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139345" comment="cracklib-dict-small-2.9.0-7.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153764" comment="cracklib-dict-small is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139346" comment="libcrack2-2.9.0-7.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153765" comment="libcrack2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139347" comment="libcrack2-32bit-2.9.0-7.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153766" comment="libcrack2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166321" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6321</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6321" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6321" source="CVE"/>
    <description>
    Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6321.html">CVE-2016-6321</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6321">SUSE bug 1007188</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136443" comment="tar-1.27.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151391" comment="tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136444" comment="tar-backup-scripts-1.27.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153774" comment="tar-backup-scripts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136445" comment="tar-lang-1.27.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151392" comment="tar-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136446" comment="tar-tests-1.27.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153775" comment="tar-tests is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166328" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6328</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6328" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6328" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6328.html">CVE-2016-6328</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6328">SUSE bug 1055857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6328">SUSE bug 1055857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6328">SUSE bug 1055857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6328">SUSE bug 1055857</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170194" comment="libexif-0.6.21-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170195" comment="libexif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170196" comment="libexif-devel-0.6.21-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170197" comment="libexif12-0.6.21-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170198" comment="libexif12-32bit-0.6.21-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166329" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6329</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6329" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6329" source="CVE"/>
    <description>
    OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6329.html">CVE-2016-6329</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 1026864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 1026864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 1026864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 1026864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 1026864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 1026864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 1026864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 1026864</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6329">SUSE bug 995374</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157248" comment="openvpn-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157249" comment="openvpn-auth-pam-plugin-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157252" comment="openvpn-auth-pam-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157250" comment="openvpn-devel-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157253" comment="openvpn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157251" comment="openvpn-down-root-plugin-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157254" comment="openvpn-down-root-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6351</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6351" source="CVE"/>
    <description>
    The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or execute arbitrary code on the QEMU host via vectors involving DMA read into ESP command buffer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6351.html">CVE-2016-6351</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6351">SUSE bug 990835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6351">SUSE bug 990843</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6351">SUSE bug 990843</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6351">SUSE bug 990835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6351">SUSE bug 990843</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6351">SUSE bug 990843</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6351">SUSE bug 990835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6351">SUSE bug 990835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6351">SUSE bug 990835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6351">SUSE bug 990835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6351">SUSE bug 990843</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6352</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6352" source="CVE"/>
    <description>
    The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6352.html">CVE-2016-6352</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6352">SUSE bug 991450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139466" comment="gdk-pixbuf-devel-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151614" comment="gdk-pixbuf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139467" comment="gdk-pixbuf-lang-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139468" comment="gdk-pixbuf-query-loaders-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139469" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151617" comment="gdk-pixbuf-query-loaders-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139470" comment="libgdk_pixbuf-2_0-0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139471" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151619" comment="libgdk_pixbuf-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139472" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6354</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6354" source="CVE"/>
    <description>
    Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6354.html">CVE-2016-6354</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1026047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 990856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6354">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139174" comment="MozillaFirefox-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139175" comment="MozillaFirefox-translations-common-49.0.2-37.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139176" comment="MozillaThunderbird-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139177" comment="MozillaThunderbird-translations-common-45.4.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139262" comment="at-3.1.14-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153776" comment="at is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139263" comment="flex-2.5.37-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153777" comment="flex is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139264" comment="libbonobo-2.32.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153779" comment="libbonobo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139265" comment="libbonobo-devel-2.32.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153781" comment="libbonobo-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139266" comment="libbonobo-lang-2.32.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153783" comment="libbonobo-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139267" comment="libnetpbm-devel-10.66.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153784" comment="libnetpbm-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139268" comment="libnetpbm11-10.66.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153785" comment="libnetpbm11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139269" comment="netpbm-10.66.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153787" comment="netpbm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140265" comment="openslp-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151507" comment="openslp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140266" comment="openslp-devel-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151508" comment="openslp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140267" comment="openslp-server-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151509" comment="openslp-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148023" comment="seamonkey-2.46-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152817" comment="seamonkey is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148024" comment="seamonkey-translations-common-2.46-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152820" comment="seamonkey-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148025" comment="seamonkey-translations-other-2.46-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152821" comment="seamonkey-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6480</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6480" source="CVE"/>
    <description>
    Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a "double fetch" vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6480.html">CVE-2016-6480</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 992568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 992568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 992568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 992568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 992568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 992568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 1004418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 992568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 992568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 992568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 992568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991608</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6480">SUSE bug 991667</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6489</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6489" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6489" source="CVE"/>
    <description>
    The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6489.html">CVE-2016-6489</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6489">SUSE bug 991464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6489">SUSE bug 991464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6489">SUSE bug 991464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6489">SUSE bug 991464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6489">SUSE bug 991464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6489">SUSE bug 991464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6489">SUSE bug 991464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6489">SUSE bug 991464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6489">SUSE bug 991464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6489">SUSE bug 991464</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156789" comment="libhogweed2-2.7.1-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153222" comment="libhogweed2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156790" comment="libhogweed2-32bit-2.7.1-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153223" comment="libhogweed2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156791" comment="libnettle-2.7.1-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153224" comment="libnettle is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156792" comment="libnettle-devel-2.7.1-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153225" comment="libnettle-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156793" comment="libnettle-devel-32bit-2.7.1-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153226" comment="libnettle-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156794" comment="libnettle4-2.7.1-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153227" comment="libnettle4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156795" comment="libnettle4-32bit-2.7.1-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153228" comment="libnettle4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156796" comment="nettle-2.7.1-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153229" comment="nettle is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166490" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6490</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6490" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6490" source="CVE"/>
    <description>
    The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6490.html">CVE-2016-6490</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6490">SUSE bug 991466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6490">SUSE bug 991466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6490">SUSE bug 991466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6490">SUSE bug 991466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6490">SUSE bug 993854</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6490">SUSE bug 991466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6490">SUSE bug 991466</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6491</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6491" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6491" source="CVE"/>
    <description>
    Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6491.html">CVE-2016-6491</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6491">SUSE bug 991445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6491">SUSE bug 991445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6491">SUSE bug 991445</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6505</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6505" source="CVE"/>
    <description>
    epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6505.html">CVE-2016-6505</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6505">SUSE bug 991013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6505">SUSE bug 991013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6505">SUSE bug 991013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6505">SUSE bug 991013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6505">SUSE bug 991013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6505">SUSE bug 991013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6505">SUSE bug 991013</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6508</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6508" source="CVE"/>
    <description>
    epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (large loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6508.html">CVE-2016-6508</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6508">SUSE bug 991017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6508">SUSE bug 991017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6508">SUSE bug 991017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6508">SUSE bug 991017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6508">SUSE bug 991017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6508">SUSE bug 991017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6508">SUSE bug 991017</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6509</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6509" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6509" source="CVE"/>
    <description>
    epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6509.html">CVE-2016-6509</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6509">SUSE bug 991018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6509">SUSE bug 991018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6509">SUSE bug 991018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6509">SUSE bug 991018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6509">SUSE bug 991018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6509">SUSE bug 991018</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6509">SUSE bug 991018</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6510</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6510" source="CVE"/>
    <description>
    Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6510.html">CVE-2016-6510</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6510">SUSE bug 991019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6510">SUSE bug 991019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6510">SUSE bug 991019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6510">SUSE bug 991019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6510">SUSE bug 991019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6510">SUSE bug 991019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6510">SUSE bug 991019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6511</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6511" source="CVE"/>
    <description>
    epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6511.html">CVE-2016-6511</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6511">SUSE bug 991020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6511">SUSE bug 991020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6511">SUSE bug 991020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6511">SUSE bug 991020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6511">SUSE bug 991020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6511">SUSE bug 991020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6511">SUSE bug 991020</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6512</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6512" source="CVE"/>
    <description>
    epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet, related to the MMSE, WAP, WBXML, and WSP dissectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6512.html">CVE-2016-6512</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6512">SUSE bug 991021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6512">SUSE bug 991021</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6513</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6513" source="CVE"/>
    <description>
    epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6513.html">CVE-2016-6513</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6513">SUSE bug 991022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6513">SUSE bug 991022</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6515</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6515" source="CVE"/>
    <description>
    The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6515.html">CVE-2016-6515</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 992533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 1087412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6515">SUSE bug 1087412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140268" comment="openssh-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140269" comment="openssh-helpers-7.2p2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6520</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6520" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6520" source="CVE"/>
    <description>
    Buffer overflow in MagickCore/enhance.c in ImageMagick before 7.0.2-7 allows remote attackers to have unspecified impact via vectors related to pixel cache morphology.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6520.html">CVE-2016-6520</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6520">SUSE bug 991872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6520">SUSE bug 991872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6520">SUSE bug 991872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6520">SUSE bug 991872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6520">SUSE bug 991872</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6621</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6621" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6621" source="CVE"/>
    <description>
    The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6621.html">CVE-2016-6621</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6621">SUSE bug 994313</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148040" comment="phpMyAdmin-4.4.15.10-31.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153097" comment="phpMyAdmin is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6662</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6662" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6662" source="CVE"/>
    <description>
    Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6662.html">CVE-2016-6662</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 1005580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 1005580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 1001367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 1005580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 1001367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 1005580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 1020884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 1021755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 1020884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6662">SUSE bug 998309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139943" comment="libmysqlclient-devel-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139944" comment="libmysqlclient18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139945" comment="libmysqlclient_r18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139946" comment="libmysqld18-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139947" comment="mariadb-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139948" comment="mariadb-client-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139949" comment="mariadb-errormessages-10.0.27-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6663</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6663" source="CVE"/>
    <description>
    Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6663.html">CVE-2016-6663</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 1001367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 1001367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 1001367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 1001367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 1008253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 1008318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 1001367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 1001367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 1001367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 1001367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 1021755</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6663">SUSE bug 998309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136615" comment="libmysqlclient-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136616" comment="libmysqlclient18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136617" comment="libmysqlclient18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136618" comment="libmysqlclient_r18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136619" comment="libmysqlclient_r18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136620" comment="libmysqld-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136621" comment="libmysqld18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136622" comment="mariadb-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136623" comment="mariadb-bench-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136624" comment="mariadb-client-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136625" comment="mariadb-errormessages-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136626" comment="mariadb-test-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136627" comment="mariadb-tools-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6664</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6664" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6664" source="CVE"/>
    <description>
    mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6664.html">CVE-2016-6664</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1008253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1008253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1008253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1008253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1008253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1008253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1008253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1008253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1008253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6664">SUSE bug 998309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148484" comment="libmysqlclient-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148485" comment="libmysqlclient18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148486" comment="libmysqlclient18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148487" comment="libmysqlclient_r18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148488" comment="libmysqlclient_r18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148489" comment="libmysqld-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148490" comment="libmysqld18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148491" comment="mariadb-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148492" comment="mariadb-bench-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148493" comment="mariadb-client-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148494" comment="mariadb-errormessages-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148495" comment="mariadb-test-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148496" comment="mariadb-tools-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6794</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6794" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6794" source="CVE"/>
    <description>
    When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6794.html">CVE-2016-6794</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6794">SUSE bug 1007857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6794">SUSE bug 1007857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6794">SUSE bug 1007857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6794">SUSE bug 1007857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6794">SUSE bug 1007857</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142899" comment="apache-commons-dbcp-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153286" comment="apache-commons-dbcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142900" comment="apache-commons-dbcp-javadoc-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153287" comment="apache-commons-dbcp-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142901" comment="apache-commons-pool2-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153288" comment="apache-commons-pool2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142902" comment="apache-commons-pool2-javadoc-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153289" comment="apache-commons-pool2-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142923" comment="tomcat-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142924" comment="tomcat-admin-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142925" comment="tomcat-docs-webapp-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142926" comment="tomcat-el-3_0-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142927" comment="tomcat-embed-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142928" comment="tomcat-javadoc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142929" comment="tomcat-jsp-2_3-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142930" comment="tomcat-jsvc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142931" comment="tomcat-lib-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142932" comment="tomcat-servlet-3_1-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142933" comment="tomcat-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166796" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6796</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6796" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6796" source="CVE"/>
    <description>
    A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6796.html">CVE-2016-6796</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6796">SUSE bug 1007858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6796">SUSE bug 1007858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6796">SUSE bug 1007858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6796">SUSE bug 1007858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6796">SUSE bug 1007858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142899" comment="apache-commons-dbcp-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153286" comment="apache-commons-dbcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142900" comment="apache-commons-dbcp-javadoc-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153287" comment="apache-commons-dbcp-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142901" comment="apache-commons-pool2-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153288" comment="apache-commons-pool2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142902" comment="apache-commons-pool2-javadoc-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153289" comment="apache-commons-pool2-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142923" comment="tomcat-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142924" comment="tomcat-admin-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142925" comment="tomcat-docs-webapp-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142926" comment="tomcat-el-3_0-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142927" comment="tomcat-embed-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142928" comment="tomcat-javadoc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142929" comment="tomcat-jsp-2_3-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142930" comment="tomcat-jsvc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142931" comment="tomcat-lib-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142932" comment="tomcat-servlet-3_1-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142933" comment="tomcat-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6797</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6797" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6797" source="CVE"/>
    <description>
    The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6797.html">CVE-2016-6797</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6797">SUSE bug 1007853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6797">SUSE bug 1007853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6797">SUSE bug 1007853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6797">SUSE bug 1007853</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142899" comment="apache-commons-dbcp-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153286" comment="apache-commons-dbcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142900" comment="apache-commons-dbcp-javadoc-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153287" comment="apache-commons-dbcp-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142901" comment="apache-commons-pool2-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153288" comment="apache-commons-pool2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142902" comment="apache-commons-pool2-javadoc-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153289" comment="apache-commons-pool2-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142923" comment="tomcat-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142924" comment="tomcat-admin-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142925" comment="tomcat-docs-webapp-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142926" comment="tomcat-el-3_0-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142927" comment="tomcat-embed-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142928" comment="tomcat-javadoc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142929" comment="tomcat-jsp-2_3-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142930" comment="tomcat-jsvc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142931" comment="tomcat-lib-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142932" comment="tomcat-servlet-3_1-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142933" comment="tomcat-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6816</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6816" source="CVE"/>
    <description>
    The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack and/or obtain sensitive information from requests other then their own.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6816.html">CVE-2016-6816</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6816">SUSE bug 1011812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6816">SUSE bug 1011812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6816">SUSE bug 1011812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6816">SUSE bug 1011812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6816">SUSE bug 1011812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6816">SUSE bug 1011812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6816">SUSE bug 1011812</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142899" comment="apache-commons-dbcp-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153286" comment="apache-commons-dbcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142900" comment="apache-commons-dbcp-javadoc-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153287" comment="apache-commons-dbcp-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142901" comment="apache-commons-pool2-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153288" comment="apache-commons-pool2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142902" comment="apache-commons-pool2-javadoc-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153289" comment="apache-commons-pool2-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142923" comment="tomcat-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142924" comment="tomcat-admin-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142925" comment="tomcat-docs-webapp-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142926" comment="tomcat-el-3_0-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142927" comment="tomcat-embed-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142928" comment="tomcat-javadoc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142929" comment="tomcat-jsp-2_3-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142930" comment="tomcat-jsvc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142931" comment="tomcat-lib-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142932" comment="tomcat-servlet-3_1-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142933" comment="tomcat-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6823</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6823" source="CVE"/>
    <description>
    Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6823.html">CVE-2016-6823</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1002207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6823">SUSE bug 1001066</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142679" comment="ImageMagick-devel-32bit-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142683" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142684" comment="libMagick++-devel-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142685" comment="libMagick++-devel-32bit-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142687" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142689" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6828</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6828" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6828" source="CVE"/>
    <description>
    The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6828.html">CVE-2016-6828</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 994296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6828">SUSE bug 1052256</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6833</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6833" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6833" source="CVE"/>
    <description>
    Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6833.html">CVE-2016-6833</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994775</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994775</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994775</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994775</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994775</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994775</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994775</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994775</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994775</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994775</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994775</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6833">SUSE bug 994774</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6836" source="CVE"/>
    <description>
    The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6836.html">CVE-2016-6836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6836">SUSE bug 994760</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6855</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6855" source="CVE"/>
    <description>
    Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6855.html">CVE-2016-6855</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6855">SUSE bug 994819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6855">SUSE bug 994819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6855">SUSE bug 994819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6855">SUSE bug 994819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6855">SUSE bug 994819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6855">SUSE bug 994819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6855">SUSE bug 994819</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139413" comment="eog-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151978" comment="eog is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139414" comment="eog-lang-3.20.4-1.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151980" comment="eog-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6888</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6888" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6888" source="CVE"/>
    <description>
    Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6888.html">CVE-2016-6888</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994772</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6888">SUSE bug 994771</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6905</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6905" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6905" source="CVE"/>
    <description>
    The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6905.html">CVE-2016-6905</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6905">SUSE bug 995034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6905">SUSE bug 995034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6905">SUSE bug 995034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6905">SUSE bug 995034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6905">SUSE bug 995034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6905">SUSE bug 995034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6905">SUSE bug 995034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6905">SUSE bug 995034</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6906</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6906" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6906" source="CVE"/>
    <description>
    The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file, related to the decompression buffer.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6906.html">CVE-2016-6906</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6906">SUSE bug 1022553</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146236" comment="gd-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146237" comment="gd-32bit-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146238" comment="gd-devel-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153569" comment="gd-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6911</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6911" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6911" source="CVE"/>
    <description>
    The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6911.html">CVE-2016-6911</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6911">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6911">SUSE bug 1005274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6911">SUSE bug 1005274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6911">SUSE bug 1005274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6911">SUSE bug 1005274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6911">SUSE bug 1005274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6911">SUSE bug 1005274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6911">SUSE bug 1005274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6911">SUSE bug 1005274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6911">SUSE bug 1005274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6911">SUSE bug 1005274</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135735" comment="apache2-mod_php5-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135736" comment="php5-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135737" comment="php5-bcmath-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135738" comment="php5-bz2-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135739" comment="php5-calendar-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135740" comment="php5-ctype-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135741" comment="php5-curl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135742" comment="php5-dba-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135743" comment="php5-devel-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135744" comment="php5-dom-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135745" comment="php5-enchant-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135746" comment="php5-exif-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135747" comment="php5-fastcgi-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135748" comment="php5-fileinfo-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135749" comment="php5-firebird-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135750" comment="php5-fpm-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135751" comment="php5-ftp-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135752" comment="php5-gd-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135753" comment="php5-gettext-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135754" comment="php5-gmp-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135755" comment="php5-iconv-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135756" comment="php5-imap-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135757" comment="php5-intl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135758" comment="php5-json-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135759" comment="php5-ldap-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135760" comment="php5-mbstring-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135761" comment="php5-mcrypt-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135762" comment="php5-mssql-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135763" comment="php5-mysql-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135764" comment="php5-odbc-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135765" comment="php5-opcache-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135766" comment="php5-openssl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135767" comment="php5-pcntl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135768" comment="php5-pdo-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135769" comment="php5-pear-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135770" comment="php5-pgsql-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135771" comment="php5-phar-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135772" comment="php5-posix-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135773" comment="php5-pspell-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135774" comment="php5-readline-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135775" comment="php5-shmop-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135776" comment="php5-snmp-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135777" comment="php5-soap-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135778" comment="php5-sockets-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135779" comment="php5-sqlite-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135780" comment="php5-suhosin-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135781" comment="php5-sysvmsg-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135782" comment="php5-sysvsem-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135783" comment="php5-sysvshm-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135784" comment="php5-tidy-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135785" comment="php5-tokenizer-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135786" comment="php5-wddx-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135787" comment="php5-xmlreader-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135788" comment="php5-xmlrpc-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135789" comment="php5-xmlwriter-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135790" comment="php5-xsl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135791" comment="php5-zip-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135792" comment="php5-zlib-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20166912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-6912</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-6912" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6912" source="CVE"/>
    <description>
    Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-6912.html">CVE-2016-6912</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6912">SUSE bug 1022284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6912">SUSE bug 1022284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6912">SUSE bug 1022284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6912">SUSE bug 1022284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6912">SUSE bug 1022284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-6912">SUSE bug 1022284</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146236" comment="gd-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146237" comment="gd-32bit-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146238" comment="gd-devel-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153569" comment="gd-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7032</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7032" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7032" source="CVE"/>
    <description>
    sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7032.html">CVE-2016-7032</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1011975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1011976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7032">SUSE bug 1007766</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136374" comment="sudo-1.8.10p3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136375" comment="sudo-devel-1.8.10p3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152559" comment="sudo-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136376" comment="sudo-test-1.8.10p3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152560" comment="sudo-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7035</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7035" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7035" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7035.html">CVE-2016-7035</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7035">SUSE bug 1007433</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136202" comment="libpacemaker-devel-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153792" comment="libpacemaker-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136203" comment="libpacemaker3-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153793" comment="libpacemaker3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136204" comment="pacemaker-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153794" comment="pacemaker is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136205" comment="pacemaker-cli-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153795" comment="pacemaker-cli is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136206" comment="pacemaker-cts-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153796" comment="pacemaker-cts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136207" comment="pacemaker-remote-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153797" comment="pacemaker-remote is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7039</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7039" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7039" source="CVE"/>
    <description>
    The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for large crafted packets, as demonstrated by packets that contain only VLAN headers, a related issue to CVE-2016-8666.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7039.html">CVE-2016-7039</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1003964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1003964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1003964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1003964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1003964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1003964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7039">SUSE bug 1001487</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7042</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7042" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7042" source="CVE"/>
    <description>
    The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection (gcc) stack protector is enabled, uses an incorrect buffer size for certain timeout data, which allows local users to cause a denial of service (stack memory corruption and panic) by reading the /proc/keys file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7042.html">CVE-2016-7042</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7042">SUSE bug 1004517</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7044</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7044" source="CVE"/>
    <description>
    The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7044.html">CVE-2016-7044</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7044">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7044">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7044">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7044">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7044">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7044">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7044">SUSE bug 999199</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139609" comment="irssi-0.8.20-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7045</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7045" source="CVE"/>
    <description>
    The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7045.html">CVE-2016-7045</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7045">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7045">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7045">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7045">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7045">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7045">SUSE bug 999199</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7045">SUSE bug 999199</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139609" comment="irssi-0.8.20-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7052</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7052" source="CVE"/>
    <description>
    crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7052.html">CVE-2016-7052</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7052">SUSE bug 1001148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7052">SUSE bug 1001148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7052">SUSE bug 1001148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7052">SUSE bug 1001148</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7052">SUSE bug 1001148</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139955" comment="libopenssl-devel-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139956" comment="libopenssl1_0_0-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139957" comment="libopenssl1_0_0-32bit-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139958" comment="openssl-1.0.2j-2.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7055</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055" source="CVE"/>
    <description>
    There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker's direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7055.html">CVE-2016-7055</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1021641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7055">SUSE bug 1009528</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148529" comment="libopenssl-devel-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148530" comment="libopenssl-devel-32bit-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152703" comment="libopenssl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148531" comment="libopenssl1_0_0-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148532" comment="libopenssl1_0_0-32bit-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148533" comment="libopenssl1_0_0-hmac-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152704" comment="libopenssl1_0_0-hmac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148534" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152705" comment="libopenssl1_0_0-hmac-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150799" comment="nodejs4-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154256" comment="nodejs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150800" comment="nodejs4-devel-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154257" comment="nodejs4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150801" comment="nodejs4-docs-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154258" comment="nodejs4-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150802" comment="npm4-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154259" comment="npm4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148535" comment="openssl-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148536" comment="openssl-doc-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152718" comment="openssl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7056</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7056" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7056.html">CVE-2016-7056</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1025347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1025347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1018910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1018910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1018910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1018910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1018910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7056">SUSE bug 1019334</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148223" comment="libcrypto36-2.3.0-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152701" comment="libcrypto36 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148224" comment="libcrypto36-32bit-2.3.0-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152702" comment="libcrypto36-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148225" comment="libcrypto37-2.3.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154265" comment="libcrypto37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148226" comment="libcrypto37-32bit-2.3.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154266" comment="libcrypto37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155255" comment="libcrypto41-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155219" comment="libcrypto41 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155256" comment="libcrypto41-32bit-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155220" comment="libcrypto41-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155257" comment="libressl-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152706" comment="libressl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155258" comment="libressl-devel-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152707" comment="libressl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155259" comment="libressl-devel-32bit-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152708" comment="libressl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155260" comment="libressl-devel-doc-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152709" comment="libressl-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148231" comment="libssl37-2.3.0-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152712" comment="libssl37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148232" comment="libssl37-32bit-2.3.0-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152713" comment="libssl37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148233" comment="libssl38-2.3.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154267" comment="libssl38 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148234" comment="libssl38-32bit-2.3.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154268" comment="libssl38-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155261" comment="libssl43-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155221" comment="libssl43 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155262" comment="libssl43-32bit-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155222" comment="libssl43-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148235" comment="libtls10-2.3.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154269" comment="libtls10 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148236" comment="libtls10-32bit-2.3.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154270" comment="libtls10-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155263" comment="libtls15-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155223" comment="libtls15 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155264" comment="libtls15-32bit-2.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155224" comment="libtls15-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148237" comment="libtls9-2.3.0-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152716" comment="libtls9 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148238" comment="libtls9-32bit-2.3.0-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152717" comment="libtls9-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7067</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7067" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7067" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7067.html">CVE-2016-7067</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7067">SUSE bug 1007455</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135893" comment="monit-5.20.0-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152136" comment="monit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135894" comment="monit-doc-5.20.0-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152137" comment="monit-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7068</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7068" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7068" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7068.html">CVE-2016-7068</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7068">SUSE bug 1018326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7068">SUSE bug 1018326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7068">SUSE bug 1018326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7068">SUSE bug 1018326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7068">SUSE bug 1018326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7068">SUSE bug 1018326</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147273" comment="pdns-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152980" comment="pdns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147274" comment="pdns-backend-ldap-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152981" comment="pdns-backend-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147275" comment="pdns-backend-lua-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152982" comment="pdns-backend-lua is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147276" comment="pdns-backend-mydns-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152983" comment="pdns-backend-mydns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147277" comment="pdns-backend-mysql-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152984" comment="pdns-backend-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147278" comment="pdns-backend-postgresql-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152985" comment="pdns-backend-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147279" comment="pdns-backend-sqlite3-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152986" comment="pdns-backend-sqlite3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147396" comment="pdns-recursor-3.7.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153799" comment="pdns-recursor is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7072</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7072" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7072.html">CVE-2016-7072</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7072">SUSE bug 1018327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7072">SUSE bug 1018327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7072">SUSE bug 1018327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7072">SUSE bug 1018327</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147273" comment="pdns-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152980" comment="pdns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147274" comment="pdns-backend-ldap-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152981" comment="pdns-backend-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147275" comment="pdns-backend-lua-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152982" comment="pdns-backend-lua is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147276" comment="pdns-backend-mydns-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152983" comment="pdns-backend-mydns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147277" comment="pdns-backend-mysql-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152984" comment="pdns-backend-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147278" comment="pdns-backend-postgresql-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152985" comment="pdns-backend-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147279" comment="pdns-backend-sqlite3-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152986" comment="pdns-backend-sqlite3 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7073</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7073" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7073.html">CVE-2016-7073</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7073">SUSE bug 1018328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7073">SUSE bug 1018328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7073">SUSE bug 1018328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7073">SUSE bug 1018328</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147273" comment="pdns-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152980" comment="pdns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147274" comment="pdns-backend-ldap-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152981" comment="pdns-backend-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147275" comment="pdns-backend-lua-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152982" comment="pdns-backend-lua is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147276" comment="pdns-backend-mydns-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152983" comment="pdns-backend-mydns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147277" comment="pdns-backend-mysql-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152984" comment="pdns-backend-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147278" comment="pdns-backend-postgresql-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152985" comment="pdns-backend-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147279" comment="pdns-backend-sqlite3-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152986" comment="pdns-backend-sqlite3 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7074</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7074" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7074.html">CVE-2016-7074</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7074">SUSE bug 1018328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7074">SUSE bug 1018328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7074">SUSE bug 1018328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7074">SUSE bug 1018328</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147273" comment="pdns-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152980" comment="pdns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147274" comment="pdns-backend-ldap-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152981" comment="pdns-backend-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147275" comment="pdns-backend-lua-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152982" comment="pdns-backend-lua is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147276" comment="pdns-backend-mydns-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152983" comment="pdns-backend-mydns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147277" comment="pdns-backend-mysql-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152984" comment="pdns-backend-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147278" comment="pdns-backend-postgresql-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152985" comment="pdns-backend-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147279" comment="pdns-backend-sqlite3-3.4.9-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152986" comment="pdns-backend-sqlite3 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7076</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7076" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7076" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7076.html">CVE-2016-7076</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1011975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1011976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7076">SUSE bug 1007501</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136374" comment="sudo-1.8.10p3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136375" comment="sudo-devel-1.8.10p3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152559" comment="sudo-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136376" comment="sudo-test-1.8.10p3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152560" comment="sudo-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7092</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7092" source="CVE"/>
    <description>
    The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7092.html">CVE-2016-7092</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7092">SUSE bug 995785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7092">SUSE bug 995785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7092">SUSE bug 995785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7092">SUSE bug 995785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7092">SUSE bug 995785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7092">SUSE bug 995785</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7093</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7093" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7093" source="CVE"/>
    <description>
    Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7093.html">CVE-2016-7093</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7093">SUSE bug 995789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7093">SUSE bug 995789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7093">SUSE bug 995789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7093">SUSE bug 995789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7093">SUSE bug 995789</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7094</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7094" source="CVE"/>
    <description>
    Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7094.html">CVE-2016-7094</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7094">SUSE bug 995792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7094">SUSE bug 995792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7094">SUSE bug 995792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7094">SUSE bug 995792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7094">SUSE bug 995792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7094">SUSE bug 995792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7094">SUSE bug 995792</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140405" comment="xen-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140406" comment="xen-doc-html-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140407" comment="xen-libs-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140408" comment="xen-tools-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140409" comment="xen-tools-domU-4.7.0_12-1.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7097</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7097" source="CVE"/>
    <description>
    The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7097.html">CVE-2016-7097</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 870618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 870618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 1052256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7097">SUSE bug 1052256</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7098</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7098" source="CVE"/>
    <description>
    Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7098.html">CVE-2016-7098</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7098">SUSE bug 995964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146256" comment="wget-1.14-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7101</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7101" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7101" source="CVE"/>
    <description>
    The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row value in an sgi file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7101.html">CVE-2016-7101</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7101">SUSE bug 1001221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7101">SUSE bug 1001221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7101">SUSE bug 1001221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7101">SUSE bug 1001221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7101">SUSE bug 1002207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7101">SUSE bug 1001221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7101">SUSE bug 1001221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7101">SUSE bug 1001221</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7116</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7116" source="CVE"/>
    <description>
    Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7116.html">CVE-2016-7116</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7116">SUSE bug 996441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7116">SUSE bug 996441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7116">SUSE bug 996441</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7117</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7117" source="CVE"/>
    <description>
    Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7117.html">CVE-2016-7117</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1057478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7117">SUSE bug 1003077</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148375" comment="kernel-debug-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148376" comment="kernel-debug-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148377" comment="kernel-debug-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148378" comment="kernel-default-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148379" comment="kernel-default-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148380" comment="kernel-default-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148381" comment="kernel-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148382" comment="kernel-docs-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148383" comment="kernel-docs-html-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148384" comment="kernel-docs-pdf-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148385" comment="kernel-macros-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148386" comment="kernel-obs-build-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148387" comment="kernel-obs-qa-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148388" comment="kernel-source-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148389" comment="kernel-source-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148390" comment="kernel-syms-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148391" comment="kernel-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148392" comment="kernel-vanilla-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148393" comment="kernel-vanilla-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7124</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7124" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7124" source="CVE"/>
    <description>
    ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that leads to a (1) __destruct call or (2) magic method call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7124.html">CVE-2016-7124</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7124">SUSE bug 997206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7124">SUSE bug 997206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7124">SUSE bug 997206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7124">SUSE bug 997206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7124">SUSE bug 997206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7124">SUSE bug 997206</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7124">SUSE bug 997206</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7125</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7125" source="CVE"/>
    <description>
    ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to inject arbitrary-type session data by leveraging control of a session name, as demonstrated by object injection.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7125.html">CVE-2016-7125</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7125">SUSE bug 997207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7125">SUSE bug 997207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7125">SUSE bug 997207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7125">SUSE bug 997207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7125">SUSE bug 997207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7125">SUSE bug 997207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7125">SUSE bug 997207</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7125">SUSE bug 997207</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7126</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7126" source="CVE"/>
    <description>
    The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of colors, which allows remote attackers to cause a denial of service (select_colors allocation error and out-of-bounds write) or possibly have unspecified other impact via a large value in the third argument.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7126.html">CVE-2016-7126</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7126">SUSE bug 997208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7126">SUSE bug 997208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7126">SUSE bug 997208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7126">SUSE bug 997208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7126">SUSE bug 997208</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7126">SUSE bug 997208</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7127</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7127" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7127" source="CVE"/>
    <description>
    The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by providing different signs for the second and third arguments.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7127.html">CVE-2016-7127</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7127">SUSE bug 997210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7127">SUSE bug 997210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7127">SUSE bug 997210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7127">SUSE bug 997210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7127">SUSE bug 997210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7127">SUSE bug 997210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7127">SUSE bug 997210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7127">SUSE bug 997210</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7128</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7128" source="CVE"/>
    <description>
    The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7128.html">CVE-2016-7128</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7128">SUSE bug 997211</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7129</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7129" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7129" source="CVE"/>
    <description>
    The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via an invalid ISO 8601 time value, as demonstrated by a wddx_deserialize call that mishandles a dateTime element in a wddxPacket XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7129.html">CVE-2016-7129</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7129">SUSE bug 997220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7129">SUSE bug 997220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7129">SUSE bug 997220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7129">SUSE bug 997220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7129">SUSE bug 997220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7129">SUSE bug 997220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7129">SUSE bug 997220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7129">SUSE bug 997220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7129">SUSE bug 997220</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7130</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7130" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7130" source="CVE"/>
    <description>
    The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a wddx_deserialize call that mishandles a binary element in a wddxPacket XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7130.html">CVE-2016-7130</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7130">SUSE bug 997257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7130">SUSE bug 997257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7130">SUSE bug 997257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7130">SUSE bug 997257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7130">SUSE bug 997257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7130">SUSE bug 997257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7130">SUSE bug 997257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7130">SUSE bug 997257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7130">SUSE bug 997257</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7131</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7131" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7131" source="CVE"/>
    <description>
    ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via a malformed wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a tag that lacks a &lt; (less than) character.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7131.html">CVE-2016-7131</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7131">SUSE bug 997225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7131">SUSE bug 997225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7131">SUSE bug 997225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7131">SUSE bug 997225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7131">SUSE bug 997225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7131">SUSE bug 997225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7131">SUSE bug 997225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7131">SUSE bug 997225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7131">SUSE bug 997225</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7132</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7132" source="CVE"/>
    <description>
    ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a stray element inside a boolean element, leading to incorrect pop processing.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7132.html">CVE-2016-7132</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7132">SUSE bug 997230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7132">SUSE bug 997230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7132">SUSE bug 997230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7132">SUSE bug 997230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7132">SUSE bug 997230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7132">SUSE bug 997230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7132">SUSE bug 997230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7132">SUSE bug 997230</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7132">SUSE bug 997230</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7134</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7134" source="CVE"/>
    <description>
    ext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow, which allows remote attackers to cause a denial of service (allocation error and heap-based buffer overflow) or possibly have unspecified other impact via a long string that is mishandled in a curl_escape call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7134.html">CVE-2016-7134</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7134">SUSE bug 997248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7134">SUSE bug 997248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7134">SUSE bug 997248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7134">SUSE bug 997248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7134">SUSE bug 997248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7134">SUSE bug 997248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7134">SUSE bug 997248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7134">SUSE bug 997248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7141</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7141" source="CVE"/>
    <description>
    curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7141.html">CVE-2016-7141</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 991390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7141">SUSE bug 997420</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7155</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7155" source="CVE"/>
    <description>
    hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7155.html">CVE-2016-7155</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7155">SUSE bug 997858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7155">SUSE bug 997858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7155">SUSE bug 997858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7155">SUSE bug 997858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167156" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7156</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7156" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7156" source="CVE"/>
    <description>
    The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7156.html">CVE-2016-7156</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7156">SUSE bug 997859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7156">SUSE bug 997859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7156">SUSE bug 997859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7156">SUSE bug 997859</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167157" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7157</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7157" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7157" source="CVE"/>
    <description>
    The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via vectors involving MPTSAS_CONFIG_PACK.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7157.html">CVE-2016-7157</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7157">SUSE bug 997860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7157">SUSE bug 997860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7157">SUSE bug 997860</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7157">SUSE bug 997860</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140331" comment="qemu-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140332" comment="qemu-arm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140333" comment="qemu-block-curl-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140334" comment="qemu-block-dmg-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140335" comment="qemu-block-iscsi-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140336" comment="qemu-block-rbd-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140337" comment="qemu-block-ssh-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140338" comment="qemu-extra-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131281" comment="qemu-ipxe-1.0.0-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140339" comment="qemu-kvm-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140340" comment="qemu-lang-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140341" comment="qemu-ppc-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140342" comment="qemu-s390-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140343" comment="qemu-seabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131284" comment="qemu-sgabios-8-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140344" comment="qemu-tools-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140345" comment="qemu-vgabios-1.9.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140346" comment="qemu-x86-2.6.1-21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167161" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7161</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7161" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7161" source="CVE"/>
    <description>
    Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7161.html">CVE-2016-7161</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7161">SUSE bug 1001151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7161">SUSE bug 1001152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7161">SUSE bug 1001151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7161">SUSE bug 1001152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7161">SUSE bug 1001151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7161">SUSE bug 1001151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7161">SUSE bug 1001151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7161">SUSE bug 1001152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7161">SUSE bug 1001151</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7163</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7163" source="CVE"/>
    <description>
    Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7163.html">CVE-2016-7163</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7163">SUSE bug 997857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7163">SUSE bug 997857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7163">SUSE bug 997857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7163">SUSE bug 997857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7163">SUSE bug 997857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7163">SUSE bug 997857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7163">SUSE bug 997857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7163">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7163">SUSE bug 1007744</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162027" comment="libopenjp2-7-2.1.0-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162028" comment="libopenjp2-7-32bit-2.1.0-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162029" comment="openjpeg2-2.1.0-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162030" comment="openjpeg2-devel-2.1.0-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7167</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7167" source="CVE"/>
    <description>
    Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7167.html">CVE-2016-7167</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 1017590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 1017590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 1017590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 1017590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7167">SUSE bug 998760</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7170</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7170" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7170" source="CVE"/>
    <description>
    The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE_CURSOR svga command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7170.html">CVE-2016-7170</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7170">SUSE bug 998516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7170">SUSE bug 998516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7170">SUSE bug 998516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7170">SUSE bug 998516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7170">SUSE bug 998516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7170">SUSE bug 998516</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7170">SUSE bug 998516</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7175</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7175" source="CVE"/>
    <description>
    epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7175.html">CVE-2016-7175</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7175">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7175">SUSE bug 998761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7175">SUSE bug 998761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7175">SUSE bug 998761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7175">SUSE bug 998761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7175">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7175">SUSE bug 998761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7175">SUSE bug 998761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7175">SUSE bug 998761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7175">SUSE bug 998761</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7176</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7176" source="CVE"/>
    <description>
    epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7176.html">CVE-2016-7176</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7176">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7176">SUSE bug 998762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7176">SUSE bug 998762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7176">SUSE bug 998762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7176">SUSE bug 998762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7176">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7176">SUSE bug 998762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7176">SUSE bug 998762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7176">SUSE bug 998762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7176">SUSE bug 998762</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7177</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7177" source="CVE"/>
    <description>
    epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7177.html">CVE-2016-7177</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7177">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7177">SUSE bug 998763</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7177">SUSE bug 998763</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7177">SUSE bug 998763</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7177">SUSE bug 998763</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7177">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7177">SUSE bug 998763</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7177">SUSE bug 998763</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7177">SUSE bug 998763</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7177">SUSE bug 998763</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7178</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7178" source="CVE"/>
    <description>
    epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7178.html">CVE-2016-7178</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7178">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7178">SUSE bug 998964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7178">SUSE bug 998964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7178">SUSE bug 998964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7178">SUSE bug 998964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7178">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7178">SUSE bug 998964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7178">SUSE bug 998964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7178">SUSE bug 998964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7178">SUSE bug 998964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7179</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7179" source="CVE"/>
    <description>
    Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7179.html">CVE-2016-7179</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7179">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7179">SUSE bug 998963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7179">SUSE bug 998963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7179">SUSE bug 998963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7179">SUSE bug 998963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7179">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7179">SUSE bug 998963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7179">SUSE bug 998963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7179">SUSE bug 998963</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7179">SUSE bug 998963</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7180</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7180" source="CVE"/>
    <description>
    epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7180.html">CVE-2016-7180</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7180">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7180">SUSE bug 998800</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7180">SUSE bug 998800</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7180">SUSE bug 998099</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7180">SUSE bug 998800</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7180">SUSE bug 998800</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7180">SUSE bug 998800</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140400" comment="wireshark-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140401" comment="wireshark-ui-gtk-2.2.1-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7411</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7411" source="CVE"/>
    <description>
    ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7411.html">CVE-2016-7411</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7411">SUSE bug 999682</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7412</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7412" source="CVE"/>
    <description>
    ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNED_FLAG flag, which allows remote MySQL servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted field metadata.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7412.html">CVE-2016-7412</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7412">SUSE bug 999680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7412">SUSE bug 999680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7412">SUSE bug 999680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7412">SUSE bug 999680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7412">SUSE bug 999680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7412">SUSE bug 999680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7412">SUSE bug 999680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7412">SUSE bug 999680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7412">SUSE bug 999680</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167413" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7413</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7413" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7413" source="CVE"/>
    <description>
    Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a wddxPacket XML document that lacks an end-tag for a recordset field element, leading to mishandling in a wddx_deserialize call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7413.html">CVE-2016-7413</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7413">SUSE bug 999679</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7414</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7414" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7414" source="CVE"/>
    <description>
    The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed_filesize field is large enough, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a crafted PHAR archive, related to ext/phar/util.c and ext/phar/zip.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7414.html">CVE-2016-7414</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7414">SUSE bug 999820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7414">SUSE bug 999820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7414">SUSE bug 999820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7414">SUSE bug 999820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7414">SUSE bug 999820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7414">SUSE bug 999820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7414">SUSE bug 999820</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7416</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7416" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7416" source="CVE"/>
    <description>
    ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a MessageFormatter::formatMessage call with a long first argument.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7416.html">CVE-2016-7416</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7416">SUSE bug 999685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7416">SUSE bug 999685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7416">SUSE bug 999685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7416">SUSE bug 999685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7416">SUSE bug 999685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7416">SUSE bug 999685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7416">SUSE bug 999685</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7417</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7417" source="CVE"/>
    <description>
    ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7417.html">CVE-2016-7417</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7417">SUSE bug 999684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7417">SUSE bug 999684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7417">SUSE bug 999684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7417">SUSE bug 999684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7417">SUSE bug 999684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7417">SUSE bug 999684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7417">SUSE bug 999684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7417">SUSE bug 999684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7417">SUSE bug 999684</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7418</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7418" source="CVE"/>
    <description>
    The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service (invalid pointer access and out-of-bounds read) or possibly have unspecified other impact via an incorrect boolean element in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7418.html">CVE-2016-7418</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7418">SUSE bug 999819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7418">SUSE bug 999819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7418">SUSE bug 999819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7418">SUSE bug 999819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7418">SUSE bug 999819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7418">SUSE bug 999819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7418">SUSE bug 999819</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139215" comment="apache2-mod_php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139216" comment="php5-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139217" comment="php5-bcmath-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139218" comment="php5-bz2-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139219" comment="php5-calendar-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139220" comment="php5-ctype-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139221" comment="php5-curl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139222" comment="php5-dba-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139223" comment="php5-devel-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139224" comment="php5-dom-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139225" comment="php5-exif-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139226" comment="php5-fastcgi-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139227" comment="php5-ftp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139228" comment="php5-gd-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139229" comment="php5-gettext-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139230" comment="php5-gmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139231" comment="php5-iconv-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139232" comment="php5-imap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139233" comment="php5-json-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139234" comment="php5-ldap-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139235" comment="php5-mbstring-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139236" comment="php5-mcrypt-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139237" comment="php5-mysql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139238" comment="php5-odbc-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139239" comment="php5-openssl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139240" comment="php5-pdo-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139241" comment="php5-pear-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139242" comment="php5-pgsql-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139243" comment="php5-shmop-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139244" comment="php5-snmp-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139245" comment="php5-sockets-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139246" comment="php5-sqlite-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139247" comment="php5-suhosin-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139248" comment="php5-sysvsem-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139249" comment="php5-sysvshm-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139250" comment="php5-tidy-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139251" comment="php5-tokenizer-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139252" comment="php5-wddx-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139253" comment="php5-xmlreader-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139254" comment="php5-xmlwriter-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139255" comment="php5-xsl-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139256" comment="php5-zip-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139257" comment="php5-zlib-5.5.14-63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7422</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7422" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7422" source="CVE"/>
    <description>
    The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7422.html">CVE-2016-7422</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7422">SUSE bug 1000346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7422">SUSE bug 1000346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7422">SUSE bug 1000346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7422">SUSE bug 1000346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7422">SUSE bug 1000346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7422">SUSE bug 1000346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7422">SUSE bug 1000346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7422">SUSE bug 1000346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7422">SUSE bug 1000346</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7425</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7425" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7425" source="CVE"/>
    <description>
    The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7425.html">CVE-2016-7425</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7425">SUSE bug 999932</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7426</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7426" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7426" source="CVE"/>
    <description>
    NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7426.html">CVE-2016-7426</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7426">SUSE bug 1011406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7426">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7426">SUSE bug 1011406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7426">SUSE bug 1011406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7426">SUSE bug 1011406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7426">SUSE bug 1011406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7426">SUSE bug 1011406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7426">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7426">SUSE bug 1011406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7426">SUSE bug 1011406</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145996" comment="ntp-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145997" comment="ntp-doc-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7427</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7427" source="CVE"/>
    <description>
    The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7427.html">CVE-2016-7427</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7427">SUSE bug 1011390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7427">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7427">SUSE bug 1011390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7427">SUSE bug 1011390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7427">SUSE bug 1011390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7427">SUSE bug 1011390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7427">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7427">SUSE bug 1011390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7427">SUSE bug 1011390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7427">SUSE bug 1011390</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145996" comment="ntp-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145997" comment="ntp-doc-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7428</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7428" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7428" source="CVE"/>
    <description>
    ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a broadcast packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7428.html">CVE-2016-7428</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7428">SUSE bug 1011417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7428">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7428">SUSE bug 1011417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7428">SUSE bug 1011417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7428">SUSE bug 1011417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7428">SUSE bug 1011417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7428">SUSE bug 1011417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7428">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7428">SUSE bug 1011417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7428">SUSE bug 1011417</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145996" comment="ntp-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145997" comment="ntp-doc-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7429</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7429" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7429" source="CVE"/>
    <description>
    NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a response for a source to an interface the source does not use.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7429.html">CVE-2016-7429</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7429">SUSE bug 1011404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7429">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7429">SUSE bug 1011404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7429">SUSE bug 1011404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7429">SUSE bug 1011404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7429">SUSE bug 1011404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7429">SUSE bug 1011404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7429">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7429">SUSE bug 1011404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7429">SUSE bug 1011404</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145996" comment="ntp-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145997" comment="ntp-doc-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7431</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7431" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7431" source="CVE"/>
    <description>
    NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero.  NOTE: this vulnerability exists because of a CVE-2015-8138 regression.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7431.html">CVE-2016-7431</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7431">SUSE bug 1011395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7431">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7431">SUSE bug 1011395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7431">SUSE bug 1011395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7431">SUSE bug 1011395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7431">SUSE bug 1011395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7431">SUSE bug 1011395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7431">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7431">SUSE bug 1011395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7431">SUSE bug 1011395</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145996" comment="ntp-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145997" comment="ntp-doc-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7433</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7433" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7433" source="CVE"/>
    <description>
    NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7433.html">CVE-2016-7433</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7433">SUSE bug 1011411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7433">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7433">SUSE bug 1011411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7433">SUSE bug 1011411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7433">SUSE bug 1011411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7433">SUSE bug 1011411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7433">SUSE bug 1011411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7433">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7433">SUSE bug 1011411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7433">SUSE bug 1011411</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145996" comment="ntp-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145997" comment="ntp-doc-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7434</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7434" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7434" source="CVE"/>
    <description>
    The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7434.html">CVE-2016-7434</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7434">SUSE bug 1011398</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145996" comment="ntp-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145997" comment="ntp-doc-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7440</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7440" source="CVE"/>
    <description>
    The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differences.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7440.html">CVE-2016-7440</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7440">SUSE bug 1005581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7440">SUSE bug 1005581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7440">SUSE bug 1005581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7440">SUSE bug 1005581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7440">SUSE bug 1005581</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7440">SUSE bug 1008318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7440">SUSE bug 1005581</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136615" comment="libmysqlclient-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136616" comment="libmysqlclient18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136617" comment="libmysqlclient18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136618" comment="libmysqlclient_r18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136619" comment="libmysqlclient_r18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136620" comment="libmysqld-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136621" comment="libmysqld18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136622" comment="mariadb-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136623" comment="mariadb-bench-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136624" comment="mariadb-client-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136625" comment="mariadb-errormessages-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136626" comment="mariadb-test-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136627" comment="mariadb-tools-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7444</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7444" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7444" source="CVE"/>
    <description>
    The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7444.html">CVE-2016-7444</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7444">SUSE bug 999646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7444">SUSE bug 999646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7444">SUSE bug 999646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7444">SUSE bug 999646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7444">SUSE bug 999646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7444">SUSE bug 999646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7444">SUSE bug 999646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7444">SUSE bug 999646</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148097" comment="gnutls-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148098" comment="libgnutls-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148099" comment="libgnutls-devel-32bit-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153803" comment="libgnutls-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148100" comment="libgnutls-openssl-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153804" comment="libgnutls-openssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148101" comment="libgnutls-openssl27-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148102" comment="libgnutls28-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148103" comment="libgnutls28-32bit-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148104" comment="libgnutlsxx-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153805" comment="libgnutlsxx-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148105" comment="libgnutlsxx28-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153806" comment="libgnutlsxx28 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7445</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7445" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7445" source="CVE"/>
    <description>
    convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving the variable s.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7445.html">CVE-2016-7445</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 999817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 999817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 999817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 999817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 999817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 999817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 999817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 999817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 1015662</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7445">SUSE bug 999817</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139954" comment="libopenjpeg1-1.5.2-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151376" comment="libopenjpeg1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7466</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7466" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7466" source="CVE"/>
    <description>
    Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS administrators to cause a denial of service (memory consumption and possibly QEMU process crash) by repeatedly unplugging a USB device.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7466.html">CVE-2016-7466</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7466">SUSE bug 1000345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7466">SUSE bug 1000345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7466">SUSE bug 1000345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7466">SUSE bug 1000345</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7478</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7478" source="CVE"/>
    <description>
    Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7478.html">CVE-2016-7478</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7478">SUSE bug 1019550</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7479</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7479" source="CVE"/>
    <description>
    In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7479.html">CVE-2016-7479</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7479">SUSE bug 1019547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7479">SUSE bug 1019547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7479">SUSE bug 1019547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7479">SUSE bug 1019547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7479">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7479">SUSE bug 1019547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7479">SUSE bug 1019547</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7479">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7479">SUSE bug 1019550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7479">SUSE bug 1019547</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167480" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7480</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7480" source="CVE"/>
    <description>
    The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access) via crafted serialized data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7480.html">CVE-2016-7480</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7480">SUSE bug 1019568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7480">SUSE bug 1019568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7480">SUSE bug 1019568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7480">SUSE bug 1019568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7480">SUSE bug 1019568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7480">SUSE bug 1019568</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7513</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7513" source="CVE"/>
    <description>
    Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7513.html">CVE-2016-7513</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7513">SUSE bug 1000686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7513">SUSE bug 1000686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7513">SUSE bug 1000686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7513">SUSE bug 1000686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7513">SUSE bug 1000686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7513">SUSE bug 1000686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7513">SUSE bug 1000686</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7514</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7514" source="CVE"/>
    <description>
    The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7514.html">CVE-2016-7514</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7514">SUSE bug 1000688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7514">SUSE bug 1000688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7514">SUSE bug 1000688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7514">SUSE bug 1000688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7514">SUSE bug 1000688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7514">SUSE bug 1000688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7514">SUSE bug 1000688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7514">SUSE bug 1000688</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7515</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7515" source="CVE"/>
    <description>
    The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the number of pixels.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7515.html">CVE-2016-7515</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7515">SUSE bug 1000689</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167516" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7516</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7516" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7516" source="CVE"/>
    <description>
    The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted VIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7516.html">CVE-2016-7516</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7516">SUSE bug 1000692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7516">SUSE bug 1000692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7516">SUSE bug 1000693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7516">SUSE bug 1000695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7516">SUSE bug 1000692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7516">SUSE bug 1000692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7516">SUSE bug 1000692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7516">SUSE bug 1000692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7516">SUSE bug 1000692</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167517" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7517</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7517" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7517" source="CVE"/>
    <description>
    The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PICT file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7517.html">CVE-2016-7517</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7517">SUSE bug 1000693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7517">SUSE bug 1000693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7517">SUSE bug 1000693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7517">SUSE bug 1000693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7517">SUSE bug 1000693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7517">SUSE bug 1000693</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7518</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7518" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7518" source="CVE"/>
    <description>
    The ReadSUNImage function in coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SUN file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7518.html">CVE-2016-7518</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7518">SUSE bug 1000694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7518">SUSE bug 1000694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7518">SUSE bug 1000694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7518">SUSE bug 1000694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7518">SUSE bug 1000694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7518">SUSE bug 1000694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7518">SUSE bug 1000694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7518">SUSE bug 1028079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7518">SUSE bug 1028079</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167519" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7519</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7519" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7519" source="CVE"/>
    <description>
    The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7519.html">CVE-2016-7519</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7519">SUSE bug 1000695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7519">SUSE bug 1000689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7519">SUSE bug 1000695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7519">SUSE bug 1000695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7519">SUSE bug 1000695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7519">SUSE bug 1000695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7519">SUSE bug 1000695</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7520</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7520" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7520" source="CVE"/>
    <description>
    Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted HDR file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7520.html">CVE-2016-7520</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7520">SUSE bug 1000696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7520">SUSE bug 1000696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7520">SUSE bug 1000696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7520">SUSE bug 1000696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7520">SUSE bug 1000696</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7521</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7521" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7521" source="CVE"/>
    <description>
    Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7521.html">CVE-2016-7521</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7521">SUSE bug 1000697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7521">SUSE bug 1000697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7521">SUSE bug 1000697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7521">SUSE bug 1000697</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7521">SUSE bug 1000697</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167522" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7522</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7522" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7522" source="CVE"/>
    <description>
    The ReadPSDImage function in MagickCore/locale.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7522.html">CVE-2016-7522</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7522">SUSE bug 1000698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7522">SUSE bug 1000698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7522">SUSE bug 1000698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7522">SUSE bug 1000698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7522">SUSE bug 1000698</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7522">SUSE bug 1000698</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7523</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7523" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7523.html">CVE-2016-7523</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7523">SUSE bug 1000699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7523">SUSE bug 1000699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7523">SUSE bug 1000699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7523">SUSE bug 1000699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7523">SUSE bug 1000699</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7524</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7524" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7524.html">CVE-2016-7524</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7524">SUSE bug 1000700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7524">SUSE bug 1000700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7524">SUSE bug 1002422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7524">SUSE bug 1000700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7524">SUSE bug 1000700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7524">SUSE bug 1000700</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7525</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7525" source="CVE"/>
    <description>
    Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7525.html">CVE-2016-7525</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7525">SUSE bug 1000701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7525">SUSE bug 1000701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7525">SUSE bug 1000701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7525">SUSE bug 1000688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7525">SUSE bug 1000701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7525">SUSE bug 1000701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7525">SUSE bug 1000701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7526</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7526" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7526" source="CVE"/>
    <description>
    coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7526.html">CVE-2016-7526</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7526">SUSE bug 1000702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7526">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7526">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7526">SUSE bug 1000702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7526">SUSE bug 1000702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7526">SUSE bug 1000702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7526">SUSE bug 1000702</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7527</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7527" source="CVE"/>
    <description>
    coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7527.html">CVE-2016-7527</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7527">SUSE bug 1000436</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7528</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7528" source="CVE"/>
    <description>
    The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted VIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7528.html">CVE-2016-7528</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7528">SUSE bug 1000434</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7529</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7529" source="CVE"/>
    <description>
    coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted XCF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7529.html">CVE-2016-7529</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7529">SUSE bug 1054924</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167530" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7530</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7530" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7530" source="CVE"/>
    <description>
    The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7530.html">CVE-2016-7530</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1000703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1000399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1000703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1000703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1000703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1000703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1000703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1000703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1000703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1000703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1054924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1054924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7530">SUSE bug 1054924</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166915" comment="ImageMagick-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166916" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166917" comment="libMagick++-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166918" comment="libMagick++-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166919" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166920" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7531</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7531" source="CVE"/>
    <description>
    MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PDB file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7531.html">CVE-2016-7531</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7531">SUSE bug 1000704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7531">SUSE bug 1000704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7531">SUSE bug 1000704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7531">SUSE bug 1000704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7531">SUSE bug 1000704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7531">SUSE bug 1000704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7531">SUSE bug 1000704</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7532</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7532" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7532" source="CVE"/>
    <description>
    coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7532.html">CVE-2016-7532</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7532">SUSE bug 1000706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7532">SUSE bug 1000706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7532">SUSE bug 1000706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7532">SUSE bug 1000706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7532">SUSE bug 1000706</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7533</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7533" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7533" source="CVE"/>
    <description>
    The ReadWPGImage function in coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WPG file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7533.html">CVE-2016-7533</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7533">SUSE bug 1000707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7533">SUSE bug 1000707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7533">SUSE bug 1000707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7533">SUSE bug 1000707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7533">SUSE bug 1000707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7533">SUSE bug 1000707</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7534</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7534" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7534" source="CVE"/>
    <description>
    The generic decoder in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7534.html">CVE-2016-7534</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7534">SUSE bug 1000708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7534">SUSE bug 1000708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7534">SUSE bug 1000708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7534">SUSE bug 1000708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7534">SUSE bug 1000708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7535</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7535" source="CVE"/>
    <description>
    coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PSD file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7535.html">CVE-2016-7535</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7535">SUSE bug 1000709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7535">SUSE bug 1000709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7535">SUSE bug 1000709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7535">SUSE bug 1000709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7535">SUSE bug 1000709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7537</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7537" source="CVE"/>
    <description>
    MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted PDB file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7537.html">CVE-2016-7537</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7537">SUSE bug 1000711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7537">SUSE bug 1000711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7537">SUSE bug 1000711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7537">SUSE bug 1000711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7537">SUSE bug 1000711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7537">SUSE bug 1000711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7537">SUSE bug 1000711</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7538" source="CVE"/>
    <description>
    coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7538.html">CVE-2016-7538</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7538">SUSE bug 1000712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7538">SUSE bug 1000712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7538">SUSE bug 1000712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7538">SUSE bug 1000712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7538">SUSE bug 1000712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7538">SUSE bug 1000712</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7539</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7539" source="CVE"/>
    <description>
    Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7539.html">CVE-2016-7539</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7539">SUSE bug 1000715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7539">SUSE bug 1000715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7539">SUSE bug 1000715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7539">SUSE bug 1000715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7539">SUSE bug 1000715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7539">SUSE bug 1000715</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167540" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7540</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7540" source="CVE"/>
    <description>
    coders/rgf.c in ImageMagick before 6.9.4-10 allows remote attackers to cause a denial of service (assertion failure) by converting an image to rgf format.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7540.html">CVE-2016-7540</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7540">SUSE bug 1000394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7540">SUSE bug 1000394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7540">SUSE bug 1000394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7540">SUSE bug 1000394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7540">SUSE bug 1000394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7540">SUSE bug 1000394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7540">SUSE bug 1000394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7540">SUSE bug 1000394</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167553" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7553</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7553" source="CVE"/>
    <description>
    The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7553.html">CVE-2016-7553</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7553">SUSE bug 1001215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7553">SUSE bug 1001215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7553">SUSE bug 1001215</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139609" comment="irssi-0.8.20-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167567" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7567</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7567" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7567" source="CVE"/>
    <description>
    Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7567.html">CVE-2016-7567</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7567">SUSE bug 1001600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7567">SUSE bug 1001600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7567">SUSE bug 1074356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7567">SUSE bug 1074356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7567">SUSE bug 1001600</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140265" comment="openslp-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151507" comment="openslp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140266" comment="openslp-devel-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151508" comment="openslp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140267" comment="openslp-server-2.0.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151509" comment="openslp-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7568</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7568" source="CVE"/>
    <description>
    Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted imagewebp and imagedestroy calls.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7568.html">CVE-2016-7568</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7568">SUSE bug 1001900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7568">SUSE bug 1001900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7568">SUSE bug 1001900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7568">SUSE bug 1001900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7568">SUSE bug 1001900</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7568">SUSE bug 1001900</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135735" comment="apache2-mod_php5-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135736" comment="php5-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135737" comment="php5-bcmath-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135738" comment="php5-bz2-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135739" comment="php5-calendar-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135740" comment="php5-ctype-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135741" comment="php5-curl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135742" comment="php5-dba-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135743" comment="php5-devel-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135744" comment="php5-dom-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135745" comment="php5-enchant-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135746" comment="php5-exif-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135747" comment="php5-fastcgi-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135748" comment="php5-fileinfo-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135749" comment="php5-firebird-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135750" comment="php5-fpm-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135751" comment="php5-ftp-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135752" comment="php5-gd-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135753" comment="php5-gettext-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135754" comment="php5-gmp-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135755" comment="php5-iconv-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135756" comment="php5-imap-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135757" comment="php5-intl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135758" comment="php5-json-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135759" comment="php5-ldap-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135760" comment="php5-mbstring-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135761" comment="php5-mcrypt-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135762" comment="php5-mssql-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135763" comment="php5-mysql-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135764" comment="php5-odbc-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135765" comment="php5-opcache-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135766" comment="php5-openssl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135767" comment="php5-pcntl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135768" comment="php5-pdo-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135769" comment="php5-pear-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135770" comment="php5-pgsql-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135771" comment="php5-phar-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135772" comment="php5-posix-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135773" comment="php5-pspell-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135774" comment="php5-readline-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135775" comment="php5-shmop-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135776" comment="php5-snmp-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135777" comment="php5-soap-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135778" comment="php5-sockets-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135779" comment="php5-sqlite-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135780" comment="php5-suhosin-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135781" comment="php5-sysvmsg-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135782" comment="php5-sysvsem-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135783" comment="php5-sysvshm-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135784" comment="php5-tidy-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135785" comment="php5-tokenizer-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135786" comment="php5-wddx-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135787" comment="php5-xmlreader-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135788" comment="php5-xmlrpc-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135789" comment="php5-xmlwriter-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135790" comment="php5-xsl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135791" comment="php5-zip-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135792" comment="php5-zlib-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7586</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7586" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7586" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7586.html">CVE-2016-7586</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7586">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7586">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7586">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7586">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7586">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7586">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7589</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7589" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7589.html">CVE-2016-7589</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7589">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7589">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7589">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7589">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7589">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7592</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7592" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component, which allows remote attackers to obtain sensitive information via crafted JavaScript prompts on a web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7592.html">CVE-2016-7592</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7592">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7592">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7592">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7592">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7592">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7599</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7599" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7599" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site that uses HTTP redirects.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7599.html">CVE-2016-7599</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7599">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7599">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7599">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7599">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7599">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7623</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7623" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7623" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a blob URL on a web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7623.html">CVE-2016-7623</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7623">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7623">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7623">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7623">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7623">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7632</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7632" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7632.html">CVE-2016-7632</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7632">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7632">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7632">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7632">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7632">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7632">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7635</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7635" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7635" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7635.html">CVE-2016-7635</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7635">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7635">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7635">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7635">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7635">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167639" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7639</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7639" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7639" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7639.html">CVE-2016-7639</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7639">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7639">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7639">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7639">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7639">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7639">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7641</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7641" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7641.html">CVE-2016-7641</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7641">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7641">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7641">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7641">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7641">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7641">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7645</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7645" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7645" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7645.html">CVE-2016-7645</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7645">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7645">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7645">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7645">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7645">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7645">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7652</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7652" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7652.html">CVE-2016-7652</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7652">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7652">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7652">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7652">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7652">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7654</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7654" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7654.html">CVE-2016-7654</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7654">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7654">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7654">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7654">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7654">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167656" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7656</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7656" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7656" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7656.html">CVE-2016-7656</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7656">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7656">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7656">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7656">SUSE bug 1020950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7656">SUSE bug 1020950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7777</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7777" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7777" source="CVE"/>
    <description>
    Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7777.html">CVE-2016-7777</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7777">SUSE bug 1000106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7777">SUSE bug 1000106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7777">SUSE bug 1000106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7777">SUSE bug 1000106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7777">SUSE bug 1000106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7777">SUSE bug 1000106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7777">SUSE bug 1000106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7777">SUSE bug 1000106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7777">SUSE bug 1000106</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167795" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7795</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7795" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7795" source="CVE"/>
    <description>
    The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7795.html">CVE-2016-7795</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7795">SUSE bug 1001765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7795">SUSE bug 1001765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7795">SUSE bug 1001765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7795">SUSE bug 1001765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7795">SUSE bug 1001765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7795">SUSE bug 1001765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7795">SUSE bug 1001765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7795">SUSE bug 1001765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7795">SUSE bug 1001765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7795">SUSE bug 1001765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7795">SUSE bug 1001765</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140121" comment="libsystemd0-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140122" comment="libsystemd0-32bit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140123" comment="libudev-devel-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151690" comment="libudev-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140124" comment="libudev1-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140125" comment="libudev1-32bit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140126" comment="systemd-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140127" comment="systemd-32bit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140128" comment="systemd-bash-completion-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151695" comment="systemd-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140129" comment="systemd-logger-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151696" comment="systemd-logger is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140130" comment="systemd-sysvinit-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009140131" comment="udev-228-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167797" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7797</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7797" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7797" source="CVE"/>
    <description>
    Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7797.html">CVE-2016-7797</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7797">SUSE bug 1002767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7797">SUSE bug 1002767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7797">SUSE bug 1002767</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136202" comment="libpacemaker-devel-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153792" comment="libpacemaker-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136203" comment="libpacemaker3-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153793" comment="libpacemaker3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136204" comment="pacemaker-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153794" comment="pacemaker is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136205" comment="pacemaker-cli-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153795" comment="pacemaker-cli is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136206" comment="pacemaker-cts-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153796" comment="pacemaker-cts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136207" comment="pacemaker-remote-1.1.15-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153797" comment="pacemaker-remote is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7799</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7799" source="CVE"/>
    <description>
    MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7799.html">CVE-2016-7799</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7799">SUSE bug 1002421</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7800</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7800" source="CVE"/>
    <description>
    Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7800.html">CVE-2016-7800</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7800">SUSE bug 1002422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7800">SUSE bug 1002422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7800">SUSE bug 1002422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7800">SUSE bug 1002422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7800">SUSE bug 1002422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7800">SUSE bug 1002422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7800">SUSE bug 1002422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7837" source="CVE"/>
    <description>
    Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7837.html">CVE-2016-7837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7837">SUSE bug 1026652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7837">SUSE bug 1026652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7837">SUSE bug 1026652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7837">SUSE bug 1026652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7837">SUSE bug 1026652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7837">SUSE bug 1026652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7837">SUSE bug 1026652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7837">SUSE bug 1026652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7837">SUSE bug 1026652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7837">SUSE bug 1026652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7837">SUSE bug 1026652</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165943" comment="bluez-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165945" comment="bluez-cups-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165946" comment="bluez-cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165947" comment="bluez-devel-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165948" comment="bluez-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165949" comment="bluez-devel-32bit-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165950" comment="bluez-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165951" comment="bluez-test-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165952" comment="bluez-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165953" comment="libbluetooth3-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165955" comment="libbluetooth3-32bit-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165956" comment="libbluetooth3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7907</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7907" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7907" source="CVE"/>
    <description>
    The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7907.html">CVE-2016-7907</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7907">SUSE bug 1002549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7907">SUSE bug 1002549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7907">SUSE bug 1002549</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7907">SUSE bug 1002549</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7908</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7908" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7908" source="CVE"/>
    <description>
    The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7908.html">CVE-2016-7908</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7908">SUSE bug 1002550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7908">SUSE bug 1002550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7908">SUSE bug 1003030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7908">SUSE bug 1002550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7908">SUSE bug 1003030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7908">SUSE bug 1003030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7908">SUSE bug 1002550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7908">SUSE bug 1002550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7908">SUSE bug 1002550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7908">SUSE bug 1002550</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7909</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7909" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7909" source="CVE"/>
    <description>
    The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7909.html">CVE-2016-7909</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7909">SUSE bug 1002557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7909">SUSE bug 1002557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7909">SUSE bug 1003032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7909">SUSE bug 1002557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7909">SUSE bug 1003032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7909">SUSE bug 1003032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7909">SUSE bug 1002557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7909">SUSE bug 1002557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7909">SUSE bug 1002557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7909">SUSE bug 1002557</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7913</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7913" source="CVE"/>
    <description>
    The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7913.html">CVE-2016-7913</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7913">SUSE bug 1010478</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167917" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7917</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7917" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7917" source="CVE"/>
    <description>
    The nfnetlink_rcv_batch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length field is large enough, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (infinite loop or out-of-bounds read) by leveraging the CAP_NET_ADMIN capability.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7917.html">CVE-2016-7917</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7917">SUSE bug 1010444</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7922</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7922" source="CVE"/>
    <description>
    The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7922.html">CVE-2016-7922</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7922">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7922">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7922">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7922">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7922">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7922">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7922">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7923</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7923" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7923" source="CVE"/>
    <description>
    The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7923.html">CVE-2016-7923</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7923">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7923">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7923">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7923">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7923">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7923">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7923">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167924" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7924</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7924" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7924" source="CVE"/>
    <description>
    The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7924.html">CVE-2016-7924</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7924">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7924">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7924">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7924">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7924">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7924">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7924">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167925" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7925</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7925" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7925" source="CVE"/>
    <description>
    The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7925.html">CVE-2016-7925</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7925">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7925">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7925">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7925">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7925">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7925">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7925">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167926" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7926</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7926" source="CVE"/>
    <description>
    The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7926.html">CVE-2016-7926</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7926">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7926">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7926">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7926">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7926">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7926">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7926">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167927" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7927</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7927" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7927" source="CVE"/>
    <description>
    The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7927.html">CVE-2016-7927</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7927">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7927">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7927">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7927">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7927">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7927">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7927">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7928</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7928" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7928" source="CVE"/>
    <description>
    The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7928.html">CVE-2016-7928</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7928">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7928">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7928">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7928">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7928">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7928">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7928">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167929" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7929</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7929" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7929" source="CVE"/>
    <description>
    The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7929.html">CVE-2016-7929</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7929">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7929">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7929">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7929">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7929">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7929">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7929">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167930" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7930</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7930" source="CVE"/>
    <description>
    The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7930.html">CVE-2016-7930</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7930">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7930">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7930">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7930">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7930">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7930">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7930">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167931" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7931</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7931" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7931" source="CVE"/>
    <description>
    The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7931.html">CVE-2016-7931</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7931">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7931">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7931">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7931">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7931">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7931">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7931">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7932</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7932" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7932" source="CVE"/>
    <description>
    The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7932.html">CVE-2016-7932</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7932">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7932">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7932">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7932">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7932">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7932">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7932">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7933</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7933" source="CVE"/>
    <description>
    The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7933.html">CVE-2016-7933</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7933">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7933">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7933">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7933">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7933">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7933">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7933">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7934</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7934" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7934" source="CVE"/>
    <description>
    The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7934.html">CVE-2016-7934</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7934">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7934">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7934">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7934">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7934">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7934">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7934">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7934">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7935</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7935" source="CVE"/>
    <description>
    The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7935.html">CVE-2016-7935</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7935">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7935">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7935">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7935">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7935">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7935">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7935">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7935">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7936</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7936" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7936" source="CVE"/>
    <description>
    The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7936.html">CVE-2016-7936</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7936">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7936">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7936">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7936">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7936">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7936">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7936">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7937</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7937" source="CVE"/>
    <description>
    The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7937.html">CVE-2016-7937</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7937">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7937">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7937">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7937">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7937">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7937">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7937">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7937">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7938</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7938" source="CVE"/>
    <description>
    The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7938.html">CVE-2016-7938</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7938">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7938">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7938">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7938">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7938">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7938">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7938">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7939</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7939" source="CVE"/>
    <description>
    The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7939.html">CVE-2016-7939</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7939">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7939">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7939">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7939">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7939">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7939">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7939">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167940" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7940</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7940" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7940" source="CVE"/>
    <description>
    The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7940.html">CVE-2016-7940</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7940">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7940">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7940">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7940">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7940">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7940">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7940">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7942</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7942" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7942" source="CVE"/>
    <description>
    The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7942.html">CVE-2016-7942</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7942">SUSE bug 1002991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136715" comment="libX11-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153718" comment="libX11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139704" comment="libX11-6-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139705" comment="libX11-6-32bit-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151818" comment="libX11-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139706" comment="libX11-data-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139707" comment="libX11-devel-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151820" comment="libX11-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136720" comment="libX11-devel-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153719" comment="libX11-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139708" comment="libX11-xcb1-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139709" comment="libX11-xcb1-32bit-1.6.3-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151822" comment="libX11-xcb1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136723" comment="libXi-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153722" comment="libXi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136724" comment="libXi-devel-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151829" comment="libXi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136725" comment="libXi-devel-32bit-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153723" comment="libXi-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136726" comment="libXi6-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151830" comment="libXi6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136727" comment="libXi6-32bit-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151831" comment="libXi6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136728" comment="libXrandr-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153724" comment="libXrandr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136729" comment="libXrandr-devel-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151835" comment="libXrandr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136730" comment="libXrandr-devel-32bit-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153725" comment="libXrandr-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136731" comment="libXrandr2-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151836" comment="libXrandr2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136732" comment="libXrandr2-32bit-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151837" comment="libXrandr2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167944" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7944</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7944" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7944" source="CVE"/>
    <description>
    Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7944.html">CVE-2016-7944</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7944">SUSE bug 1002995</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139718" comment="libXfixes-devel-5.0.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151826" comment="libXfixes-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139719" comment="libXfixes3-5.0.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151827" comment="libXfixes3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139720" comment="libXfixes3-32bit-5.0.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151828" comment="libXfixes3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167945" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7945</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7945" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7945" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7945.html">CVE-2016-7945</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7945">SUSE bug 1002998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136715" comment="libX11-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153718" comment="libX11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136716" comment="libX11-6-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136717" comment="libX11-6-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151818" comment="libX11-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136718" comment="libX11-data-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136719" comment="libX11-devel-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151820" comment="libX11-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136720" comment="libX11-devel-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153719" comment="libX11-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136721" comment="libX11-xcb1-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136722" comment="libX11-xcb1-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151822" comment="libX11-xcb1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136723" comment="libXi-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153722" comment="libXi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139723" comment="libXi-devel-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151829" comment="libXi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136725" comment="libXi-devel-32bit-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153723" comment="libXi-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139724" comment="libXi6-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151830" comment="libXi6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139725" comment="libXi6-32bit-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151831" comment="libXi6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136728" comment="libXrandr-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153724" comment="libXrandr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136729" comment="libXrandr-devel-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151835" comment="libXrandr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136730" comment="libXrandr-devel-32bit-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153725" comment="libXrandr-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136731" comment="libXrandr2-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151836" comment="libXrandr2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136732" comment="libXrandr2-32bit-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151837" comment="libXrandr2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7946</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7946" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7946" source="CVE"/>
    <description>
    X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7946.html">CVE-2016-7946</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7946">SUSE bug 1002998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136715" comment="libX11-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153718" comment="libX11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136716" comment="libX11-6-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136717" comment="libX11-6-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151818" comment="libX11-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136718" comment="libX11-data-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136719" comment="libX11-devel-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151820" comment="libX11-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136720" comment="libX11-devel-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153719" comment="libX11-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136721" comment="libX11-xcb1-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136722" comment="libX11-xcb1-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151822" comment="libX11-xcb1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136723" comment="libXi-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153722" comment="libXi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139723" comment="libXi-devel-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151829" comment="libXi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136725" comment="libXi-devel-32bit-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153723" comment="libXi-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139724" comment="libXi6-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151830" comment="libXi6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139725" comment="libXi6-32bit-1.7.5-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151831" comment="libXi6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136728" comment="libXrandr-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153724" comment="libXrandr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136729" comment="libXrandr-devel-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151835" comment="libXrandr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136730" comment="libXrandr-devel-32bit-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153725" comment="libXrandr-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136731" comment="libXrandr2-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151836" comment="libXrandr2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136732" comment="libXrandr2-32bit-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151837" comment="libXrandr2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167947" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7947</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7947" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7947.html">CVE-2016-7947</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7947">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7947">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7947">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7947">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7947">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7947">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7947">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7947">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7947">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7947">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7947">SUSE bug 1003000</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136715" comment="libX11-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153718" comment="libX11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136716" comment="libX11-6-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136717" comment="libX11-6-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151818" comment="libX11-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136718" comment="libX11-data-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136719" comment="libX11-devel-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151820" comment="libX11-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136720" comment="libX11-devel-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153719" comment="libX11-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136721" comment="libX11-xcb1-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136722" comment="libX11-xcb1-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151822" comment="libX11-xcb1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136723" comment="libXi-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153722" comment="libXi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136724" comment="libXi-devel-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151829" comment="libXi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136725" comment="libXi-devel-32bit-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153723" comment="libXi-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136726" comment="libXi6-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151830" comment="libXi6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136727" comment="libXi6-32bit-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151831" comment="libXi6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136728" comment="libXrandr-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153724" comment="libXrandr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136729" comment="libXrandr-devel-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151835" comment="libXrandr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136730" comment="libXrandr-devel-32bit-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153725" comment="libXrandr-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136731" comment="libXrandr2-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151836" comment="libXrandr2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136732" comment="libXrandr2-32bit-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151837" comment="libXrandr2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167948" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7948</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7948" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7948" source="CVE"/>
    <description>
    X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7948.html">CVE-2016-7948</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7948">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7948">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7948">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7948">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7948">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7948">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7948">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7948">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7948">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7948">SUSE bug 1003000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7948">SUSE bug 1003000</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136715" comment="libX11-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153718" comment="libX11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136716" comment="libX11-6-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151817" comment="libX11-6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136717" comment="libX11-6-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151818" comment="libX11-6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136718" comment="libX11-data-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151819" comment="libX11-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136719" comment="libX11-devel-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151820" comment="libX11-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136720" comment="libX11-devel-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153719" comment="libX11-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136721" comment="libX11-xcb1-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151821" comment="libX11-xcb1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136722" comment="libX11-xcb1-32bit-1.6.3-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151822" comment="libX11-xcb1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136723" comment="libXi-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153722" comment="libXi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136724" comment="libXi-devel-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151829" comment="libXi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136725" comment="libXi-devel-32bit-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153723" comment="libXi-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136726" comment="libXi6-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151830" comment="libXi6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136727" comment="libXi6-32bit-1.7.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151831" comment="libXi6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136728" comment="libXrandr-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153724" comment="libXrandr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136729" comment="libXrandr-devel-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151835" comment="libXrandr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136730" comment="libXrandr-devel-32bit-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153725" comment="libXrandr-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136731" comment="libXrandr2-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151836" comment="libXrandr2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136732" comment="libXrandr2-32bit-1.5.0-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151837" comment="libXrandr2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167949" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7949</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7949" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7949" source="CVE"/>
    <description>
    Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7949.html">CVE-2016-7949</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1015442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7949">SUSE bug 1003002</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139734" comment="libXrender-devel-0.9.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151838" comment="libXrender-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139735" comment="libXrender1-0.9.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151839" comment="libXrender1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139736" comment="libXrender1-32bit-0.9.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151840" comment="libXrender1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167950" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7950</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7950" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7950" source="CVE"/>
    <description>
    The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7950.html">CVE-2016-7950</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1015442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7950">SUSE bug 1003002</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139734" comment="libXrender-devel-0.9.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151838" comment="libXrender-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139735" comment="libXrender1-0.9.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151839" comment="libXrender1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139736" comment="libXrender1-32bit-0.9.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151840" comment="libXrender1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7951</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7951" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7951" source="CVE"/>
    <description>
    Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of-bounds memory access operations by leveraging the lack of range checks.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7951.html">CVE-2016-7951</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7951">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7951">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7951">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7951">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7951">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7951">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7951">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7951">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7951">SUSE bug 1003012</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139740" comment="libXtst-devel-1.2.2-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151864" comment="libXtst-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139741" comment="libXtst6-1.2.2-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151865" comment="libXtst6 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167952" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7952</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7952" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7952" source="CVE"/>
    <description>
    X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7952.html">CVE-2016-7952</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7952">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7952">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7952">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7952">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7952">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7952">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7952">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7952">SUSE bug 1003012</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7952">SUSE bug 1003012</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139740" comment="libXtst-devel-1.2.2-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151864" comment="libXtst-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139741" comment="libXtst6-1.2.2-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151865" comment="libXtst6 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7953</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7953" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7953" source="CVE"/>
    <description>
    Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7953.html">CVE-2016-7953</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7953">SUSE bug 1003023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7953">SUSE bug 1003023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7953">SUSE bug 1003023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7953">SUSE bug 1003023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7953">SUSE bug 1003023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7953">SUSE bug 1003023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7953">SUSE bug 1003023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7953">SUSE bug 1003023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7953">SUSE bug 1003023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7953">SUSE bug 1003023</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139745" comment="libXvMC-devel-1.0.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151846" comment="libXvMC-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139746" comment="libXvMC1-1.0.9-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151847" comment="libXvMC1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7966</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7966" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7966" source="CVE"/>
    <description>
    Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign (=) or a space into the injected HTML, which greatly reduces the available HTML functionality. Although it is possible to include an HTML comment indicator to hide content.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7966.html">CVE-2016-7966</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7966">SUSE bug 1002977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7966">SUSE bug 1002977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7966">SUSE bug 1002977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7966">SUSE bug 1002977</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139617" comment="kcoreaddons-5.26.0-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153836" comment="kcoreaddons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139618" comment="kcoreaddons-devel-5.26.0-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153837" comment="kcoreaddons-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139619" comment="kcoreaddons-lang-5.26.0-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153839" comment="kcoreaddons-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139620" comment="libKF5CoreAddons5-5.26.0-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153840" comment="libKF5CoreAddons5 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7969</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7969" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7969" source="CVE"/>
    <description>
    The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to "0/3 line wrapping equalization."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7969.html">CVE-2016-7969</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7969">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7969">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7969">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7969">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7969">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7969">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7969">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7969">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7969">SUSE bug 1002982</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139759" comment="libass5-0.13.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153844" comment="libass5 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7972</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7972" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7972" source="CVE"/>
    <description>
    The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7972.html">CVE-2016-7972</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7972">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7972">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7972">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7972">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7972">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7972">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7972">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7972">SUSE bug 1002982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7972">SUSE bug 1002982</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139759" comment="libass5-0.13.4-1.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153844" comment="libass5 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7973</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7973" source="CVE"/>
    <description>
    The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7973.html">CVE-2016-7973</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7973">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7973">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7973">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7973">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7973">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7973">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7973">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7974</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7974" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7974" source="CVE"/>
    <description>
    The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7974.html">CVE-2016-7974</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7974">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7974">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7974">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7974">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7974">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7974">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7974">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7975</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7975" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7975" source="CVE"/>
    <description>
    The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7975.html">CVE-2016-7975</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7975">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7975">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7975">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7975">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7975">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7975">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7975">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7978</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7978" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7978" source="CVE"/>
    <description>
    Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7978.html">CVE-2016-7978</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7978">SUSE bug 1001951</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139482" comment="ghostscript-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139483" comment="ghostscript-devel-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151934" comment="ghostscript-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139484" comment="ghostscript-x11-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7979</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7979" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7979" source="CVE"/>
    <description>
    Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7979.html">CVE-2016-7979</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7979">SUSE bug 1001951</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139482" comment="ghostscript-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139483" comment="ghostscript-devel-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151934" comment="ghostscript-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139484" comment="ghostscript-x11-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7983</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7983" source="CVE"/>
    <description>
    The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7983.html">CVE-2016-7983</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7983">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7983">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7983">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7983">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7983">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7983">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7983">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7984</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7984" source="CVE"/>
    <description>
    The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7984.html">CVE-2016-7984</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7984">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7984">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7984">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7984">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7984">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7984">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7984">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7984">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7985</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7985" source="CVE"/>
    <description>
    The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7985.html">CVE-2016-7985</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7985">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7985">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7985">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7985">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7985">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7985">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7985">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7985">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7986</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7986" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7986" source="CVE"/>
    <description>
    The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7986.html">CVE-2016-7986</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7986">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7986">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7986">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7986">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7986">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7986">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7986">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7992</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7992" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7992" source="CVE"/>
    <description>
    The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cip_if_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7992.html">CVE-2016-7992</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7992">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7992">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7992">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7992">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7992">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7992">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7992">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7993</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7993" source="CVE"/>
    <description>
    A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7993.html">CVE-2016-7993</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7993">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7993">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7993">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7993">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7993">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7993">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7993">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7994</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7994" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7994" source="CVE"/>
    <description>
    Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_CREATE_2D commands.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7994.html">CVE-2016-7994</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7994">SUSE bug 1003613</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7994">SUSE bug 1003613</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7994">SUSE bug 1003613</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7994">SUSE bug 1003613</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7995</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7995" source="CVE"/>
    <description>
    Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of crafted buffer page select (PG) indexes.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7995.html">CVE-2016-7995</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7995">SUSE bug 1003612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7995">SUSE bug 1003612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7995">SUSE bug 1003870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7995">SUSE bug 1003870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7995">SUSE bug 1003870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7995">SUSE bug 1003870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7995">SUSE bug 1003612</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7995">SUSE bug 1003612</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7996</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7996" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7996" source="CVE"/>
    <description>
    Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7996.html">CVE-2016-7996</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7996">SUSE bug 1003629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7996">SUSE bug 1003629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7996">SUSE bug 1003629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7996">SUSE bug 1003629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7996">SUSE bug 1003629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7996">SUSE bug 1003629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7996">SUSE bug 1067184</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20167997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-7997</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-7997" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7997" source="CVE"/>
    <description>
    The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assertion failure and crash) via vectors related to a ReferenceBlob and a NULL pointer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-7997.html">CVE-2016-7997</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7997">SUSE bug 1003629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7997">SUSE bug 1003629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7997">SUSE bug 1003629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7997">SUSE bug 1003629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7997">SUSE bug 1003629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-7997">SUSE bug 1003629</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8283</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8283" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8283" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8283.html">CVE-2016-8283</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8283">SUSE bug 1005582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8283">SUSE bug 1005582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8283">SUSE bug 1005582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8283">SUSE bug 1008318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8283">SUSE bug 1005582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8283">SUSE bug 1005582</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136615" comment="libmysqlclient-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136616" comment="libmysqlclient18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136617" comment="libmysqlclient18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136618" comment="libmysqlclient_r18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136619" comment="libmysqlclient_r18-32bit-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136620" comment="libmysqld-devel-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136621" comment="libmysqld18-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136622" comment="mariadb-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136623" comment="mariadb-bench-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136624" comment="mariadb-client-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136625" comment="mariadb-errormessages-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136626" comment="mariadb-test-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136627" comment="mariadb-tools-10.0.28-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168284" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8284</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8284" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8284" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows local users to affect availability via vectors related to Server: Replication.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8284.html">CVE-2016-8284</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8284">SUSE bug 1005583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8284">SUSE bug 1005583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8284">SUSE bug 1008117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8284">SUSE bug 1008133</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8284">SUSE bug 1008141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8284">SUSE bug 1008150</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8284">SUSE bug 1008151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8284">SUSE bug 1008152</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8284">SUSE bug 1005583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8284">SUSE bug 1011266</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8284">SUSE bug 1011267</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8288</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8288" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8288" source="CVE"/>
    <description>
    Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect integrity via vectors related to Server: InnoDB Plugin.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8288.html">CVE-2016-8288</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8288">SUSE bug 1005586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8288">SUSE bug 1005586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8288">SUSE bug 1005586</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135440" comment="libmysql56client18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135441" comment="libmysql56client18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135442" comment="libmysql56client_r18-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135443" comment="libmysql56client_r18-32bit-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135444" comment="mysql-community-server-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135445" comment="mysql-community-server-bench-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135446" comment="mysql-community-server-client-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135447" comment="mysql-community-server-errormessages-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135448" comment="mysql-community-server-test-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135449" comment="mysql-community-server-tools-5.6.34-19.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8318</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8318" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8318" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.8 (Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8318.html">CVE-2016-8318</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8318">SUSE bug 1020872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8318">SUSE bug 1020872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8318">SUSE bug 1020872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8318">SUSE bug 1020872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8318">SUSE bug 1020872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8318">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8318">SUSE bug 1020872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8318">SUSE bug 1020872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8318">SUSE bug 1020872</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168327" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8327</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8327" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8327" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8327.html">CVE-2016-8327</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8327">SUSE bug 1020893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8327">SUSE bug 1020893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8327">SUSE bug 1020893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8327">SUSE bug 1020893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8327">SUSE bug 1020893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8327">SUSE bug 1020893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8327">SUSE bug 1020893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8327">SUSE bug 1020893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8327">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8327">SUSE bug 1020893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8327">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8332</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8332" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8332" source="CVE"/>
    <description>
    A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8332.html">CVE-2016-8332</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1002414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1002414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1002414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1002414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1002414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1002414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1002414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1002414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1002414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1002414</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8332">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168568" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8568</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8568" source="CVE"/>
    <description>
    The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8568.html">CVE-2016-8568</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1019036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8568">SUSE bug 1003810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136287" comment="libgit2-0.24.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153557" comment="libgit2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136288" comment="libgit2-24-0.24.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154200" comment="libgit2-24 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142717" comment="libgit2-24-32bit-0.24.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154201" comment="libgit2-24-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142718" comment="libgit2-devel-0.24.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153560" comment="libgit2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168569" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8569</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8569" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8569" source="CVE"/>
    <description>
    The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8569.html">CVE-2016-8569</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1019036</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1003810</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8569">SUSE bug 1003810</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136287" comment="libgit2-0.24.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153557" comment="libgit2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136288" comment="libgit2-24-0.24.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154200" comment="libgit2-24 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142717" comment="libgit2-24-32bit-0.24.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154201" comment="libgit2-24-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142718" comment="libgit2-devel-0.24.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153560" comment="libgit2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8574</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8574" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8574" source="CVE"/>
    <description>
    The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8574.html">CVE-2016-8574</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8574">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8574">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8574">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8574">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8574">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8574">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8574">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8575</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8575" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8575" source="CVE"/>
    <description>
    The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8575.html">CVE-2016-8575</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8575">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8575">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8575">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8575">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8575">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8575">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8575">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8576</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8576" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8576" source="CVE"/>
    <description>
    The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8576.html">CVE-2016-8576</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8576">SUSE bug 1003878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8576">SUSE bug 1003878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8576">SUSE bug 1004016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8576">SUSE bug 1003878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8576">SUSE bug 1004016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8576">SUSE bug 1004016</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8576">SUSE bug 1003878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8576">SUSE bug 1003878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8576">SUSE bug 1003878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8576">SUSE bug 1003878</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8577</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8577" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577" source="CVE"/>
    <description>
    Memory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors related to an I/O read operation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8577.html">CVE-2016-8577</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8577">SUSE bug 1003893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8577">SUSE bug 1003893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8577">SUSE bug 1004021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8577">SUSE bug 1004021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8577">SUSE bug 1003893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8577">SUSE bug 1003893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8577">SUSE bug 1003893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8577">SUSE bug 1003893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8577">SUSE bug 1003893</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8578</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8578" source="CVE"/>
    <description>
    The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) by sending an empty string parameter to a 9P operation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8578.html">CVE-2016-8578</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8578">SUSE bug 1003894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8578">SUSE bug 1003894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8578">SUSE bug 1004023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8578">SUSE bug 1004023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8578">SUSE bug 1003894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8578">SUSE bug 1003894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8578">SUSE bug 1003894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8578">SUSE bug 1003894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8578">SUSE bug 1003894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8602</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8602" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8602" source="CVE"/>
    <description>
    The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8602.html">CVE-2016-8602</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1001951</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8602">SUSE bug 1004237</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139482" comment="ghostscript-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139483" comment="ghostscript-devel-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151934" comment="ghostscript-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139484" comment="ghostscript-x11-9.15-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8605</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8605" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8605" source="CVE"/>
    <description>
    The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create directories as 0777. This is fixed in Guile 2.0.13. Prior versions are affected.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8605.html">CVE-2016-8605</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8605">SUSE bug 1004221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8605">SUSE bug 1004221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8605">SUSE bug 1004221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8605">SUSE bug 1004221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8605">SUSE bug 1004221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8605">SUSE bug 1004221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8605">SUSE bug 1004221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8605">SUSE bug 1004221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8605">SUSE bug 1004221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8605">SUSE bug 1004221</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8605">SUSE bug 1004221</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148507" comment="guile-2.0.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153846" comment="guile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148508" comment="guile-devel-2.0.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153847" comment="guile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148509" comment="guile-modules-2_0-2.0.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153848" comment="guile-modules-2_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148510" comment="libguile-2_0-22-2.0.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153850" comment="libguile-2_0-22 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148511" comment="libguilereadline-v-18-18-2.0.9-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153858" comment="libguilereadline-v-18-18 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168610" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8610</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8610" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610" source="CVE"/>
    <description>
    A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8610.html">CVE-2016-8610</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1025347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1025347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8610">SUSE bug 1005878</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148097" comment="gnutls-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148098" comment="libgnutls-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148099" comment="libgnutls-devel-32bit-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153803" comment="libgnutls-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148100" comment="libgnutls-openssl-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153804" comment="libgnutls-openssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148101" comment="libgnutls-openssl27-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148102" comment="libgnutls28-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148103" comment="libgnutls28-32bit-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148104" comment="libgnutlsxx-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153805" comment="libgnutlsxx-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148105" comment="libgnutlsxx28-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153806" comment="libgnutlsxx28 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168614" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8614</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8614" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8614" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8614.html">CVE-2016-8614</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8614">SUSE bug 1008038</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166856" comment="ansible-2.4.1.0-2.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8615</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8615" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8615.html">CVE-2016-8615</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8615">SUSE bug 1005633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8615">SUSE bug 1005633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8615">SUSE bug 1005633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8615">SUSE bug 1005633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8615">SUSE bug 1005633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8615">SUSE bug 1005633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8615">SUSE bug 1005633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8615">SUSE bug 1005633</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8616</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8616" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8616" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8616.html">CVE-2016-8616</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8616">SUSE bug 1005634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8616">SUSE bug 1005634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8616">SUSE bug 1005634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8616">SUSE bug 1005634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8616">SUSE bug 1005634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8616">SUSE bug 1005634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8616">SUSE bug 1005634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8616">SUSE bug 1005634</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8617</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8617.html">CVE-2016-8617</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8617">SUSE bug 1005635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8617">SUSE bug 1005635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8617">SUSE bug 1005635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8617">SUSE bug 1005635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8617">SUSE bug 1005635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8617">SUSE bug 1005635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8617">SUSE bug 1005635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8617">SUSE bug 1005635</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8618</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8618" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8618" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8618.html">CVE-2016-8618</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8618">SUSE bug 1005637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8618">SUSE bug 1005637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8618">SUSE bug 1005637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8618">SUSE bug 1005637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8618">SUSE bug 1005637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8618">SUSE bug 1005637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8618">SUSE bug 1005637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8618">SUSE bug 1005637</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8619</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8619" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8619.html">CVE-2016-8619</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8619">SUSE bug 1005638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8619">SUSE bug 1005638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8619">SUSE bug 1005638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8619">SUSE bug 1005638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8619">SUSE bug 1005638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8619">SUSE bug 1005638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8619">SUSE bug 1005638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8619">SUSE bug 1005638</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8620</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8620" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8620" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8620.html">CVE-2016-8620</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8620">SUSE bug 1005640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8620">SUSE bug 1005640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8620">SUSE bug 1005640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8620">SUSE bug 1005640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8620">SUSE bug 1005640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8620">SUSE bug 1005640</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8621</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8621" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8621" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8621.html">CVE-2016-8621</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8621">SUSE bug 1005642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8621">SUSE bug 1005642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8621">SUSE bug 1005642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8621">SUSE bug 1005642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8621">SUSE bug 1005642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8621">SUSE bug 1005642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8621">SUSE bug 1005642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8621">SUSE bug 1005642</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8622</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8622" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8622" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8622.html">CVE-2016-8622</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8622">SUSE bug 1005643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8622">SUSE bug 1005643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8622">SUSE bug 1005643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8622">SUSE bug 1005643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8622">SUSE bug 1005643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8622">SUSE bug 1005643</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8623</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8623" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8623" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8623.html">CVE-2016-8623</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8623">SUSE bug 1005645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8623">SUSE bug 1005645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8623">SUSE bug 1005645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8623">SUSE bug 1005645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8623">SUSE bug 1005645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8623">SUSE bug 1005645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8623">SUSE bug 1005645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8623">SUSE bug 1005645</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8624</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8624" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8624.html">CVE-2016-8624</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8624">SUSE bug 1005646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8624">SUSE bug 1005646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8624">SUSE bug 1005646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8624">SUSE bug 1005646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8624">SUSE bug 1005646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8624">SUSE bug 1005646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8624">SUSE bug 1005646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8624">SUSE bug 1005646</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8624">SUSE bug 1005646</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110168" comment="curl-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110170" comment="libcurl-devel-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009110172" comment="libcurl4-7.37.0-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8628</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8628" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8628" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8628.html">CVE-2016-8628</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8628">SUSE bug 1008037</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166856" comment="ansible-2.4.1.0-2.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8632</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8632" source="CVE"/>
    <description>
    The tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not validate the relationship between the minimum fragment length and the maximum packet size, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8632.html">CVE-2016-8632</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1008831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8632">SUSE bug 1012852</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8637</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8637" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8637" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8637.html">CVE-2016-8637</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8637">SUSE bug 1008340</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154597" comment="dracut-044-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151760" comment="dracut is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154598" comment="dracut-fips-044-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153859" comment="dracut-fips is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154599" comment="dracut-tools-044-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156749" comment="dracut-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8645</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8645" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8645" source="CVE"/>
    <description>
    The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system crash) via a crafted application that makes sendto system calls, related to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8645.html">CVE-2016-8645</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8645">SUSE bug 1009969</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148375" comment="kernel-debug-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148376" comment="kernel-debug-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148377" comment="kernel-debug-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148378" comment="kernel-default-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148379" comment="kernel-default-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148380" comment="kernel-default-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148381" comment="kernel-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148382" comment="kernel-docs-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148383" comment="kernel-docs-html-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148384" comment="kernel-docs-pdf-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148385" comment="kernel-macros-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148386" comment="kernel-obs-build-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148387" comment="kernel-obs-qa-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148388" comment="kernel-source-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148389" comment="kernel-source-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148390" comment="kernel-syms-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148391" comment="kernel-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148392" comment="kernel-vanilla-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148393" comment="kernel-vanilla-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8649</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8649" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8649" source="CVE"/>
    <description>
    lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8649.html">CVE-2016-8649</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8649">SUSE bug 1010933</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8649">SUSE bug 1010933</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8649">SUSE bug 1010933</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8649">SUSE bug 1010933</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8649">SUSE bug 1010933</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8649">SUSE bug 1010933</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8649">SUSE bug 1010933</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8649">SUSE bug 1010933</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8649">SUSE bug 1010933</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143100" comment="lxc-1.1.2-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153860" comment="lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143101" comment="lxc-devel-1.1.2-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153861" comment="lxc-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168654" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8654</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8654" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8654.html">CVE-2016-8654</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8654">SUSE bug 1012530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8654">SUSE bug 1012530</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146872" comment="jasper-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146873" comment="libjasper-devel-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146874" comment="libjasper1-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146875" comment="libjasper1-32bit-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168655" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8655</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8655" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8655" source="CVE"/>
    <description>
    Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8655.html">CVE-2016-8655</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1013822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1013822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1012759</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8655">SUSE bug 1052365</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8658</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8658" source="CVE"/>
    <description>
    Stack-based buffer overflow in the brcmf_cfg80211_start_ap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.7.5 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a long SSID Information Element in a command to a Netlink socket.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8658.html">CVE-2016-8658</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8658">SUSE bug 1004462</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139638" comment="kernel-default-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139639" comment="kernel-default-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139640" comment="kernel-devel-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139641" comment="kernel-docs-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139642" comment="kernel-macros-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139643" comment="kernel-source-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139644" comment="kernel-syms-4.4.27-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168666" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8666</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8666" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8666" source="CVE"/>
    <description>
    The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8666.html">CVE-2016-8666</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1003964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1003964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001487</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1003964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1001486</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8666">SUSE bug 1003964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8667</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8667" source="CVE"/>
    <description>
    The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8667.html">CVE-2016-8667</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8667">SUSE bug 1004702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8667">SUSE bug 1004702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8667">SUSE bug 1005004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8667">SUSE bug 1004702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8667">SUSE bug 1005004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8667">SUSE bug 1005004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8667">SUSE bug 1004702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8667">SUSE bug 1005004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8667">SUSE bug 1004702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8667">SUSE bug 1004702</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8668</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8668" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8668" source="CVE"/>
    <description>
    The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8668.html">CVE-2016-8668</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8668">SUSE bug 1004706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8668">SUSE bug 1004706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8668">SUSE bug 1004706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8668">SUSE bug 1004706</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8669</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8669" source="CVE"/>
    <description>
    The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8669.html">CVE-2016-8669</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8669">SUSE bug 1004707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8669">SUSE bug 1004707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8669">SUSE bug 1005005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8669">SUSE bug 1004707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8669">SUSE bug 1005005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8669">SUSE bug 1005005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8669">SUSE bug 1004707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8669">SUSE bug 1004707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8669">SUSE bug 1004707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8669">SUSE bug 1004707</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8670</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8670" source="CVE"/>
    <description>
    Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted imagecreatefromstring call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8670.html">CVE-2016-8670</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8670">SUSE bug 1004924</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135735" comment="apache2-mod_php5-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139464" comment="gd-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139465" comment="gd-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135736" comment="php5-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135737" comment="php5-bcmath-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135738" comment="php5-bz2-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135739" comment="php5-calendar-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135740" comment="php5-ctype-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135741" comment="php5-curl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135742" comment="php5-dba-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135743" comment="php5-devel-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135744" comment="php5-dom-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135745" comment="php5-enchant-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135746" comment="php5-exif-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135747" comment="php5-fastcgi-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135748" comment="php5-fileinfo-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135749" comment="php5-firebird-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135750" comment="php5-fpm-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135751" comment="php5-ftp-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135752" comment="php5-gd-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135753" comment="php5-gettext-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135754" comment="php5-gmp-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135755" comment="php5-iconv-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135756" comment="php5-imap-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135757" comment="php5-intl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135758" comment="php5-json-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135759" comment="php5-ldap-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135760" comment="php5-mbstring-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135761" comment="php5-mcrypt-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135762" comment="php5-mssql-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135763" comment="php5-mysql-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135764" comment="php5-odbc-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135765" comment="php5-opcache-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135766" comment="php5-openssl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135767" comment="php5-pcntl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135768" comment="php5-pdo-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135769" comment="php5-pear-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135770" comment="php5-pgsql-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135771" comment="php5-phar-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135772" comment="php5-posix-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135773" comment="php5-pspell-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135774" comment="php5-readline-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135775" comment="php5-shmop-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135776" comment="php5-snmp-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135777" comment="php5-soap-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135778" comment="php5-sockets-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135779" comment="php5-sqlite-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135780" comment="php5-suhosin-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135781" comment="php5-sysvmsg-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135782" comment="php5-sysvsem-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135783" comment="php5-sysvshm-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135784" comment="php5-tidy-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135785" comment="php5-tokenizer-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135786" comment="php5-wddx-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135787" comment="php5-xmlreader-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135788" comment="php5-xmlrpc-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135789" comment="php5-xmlwriter-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135790" comment="php5-xsl-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135791" comment="php5-zip-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135792" comment="php5-zlib-5.5.14-65.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168677" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8677</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8677" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8677" source="CVE"/>
    <description>
    The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8677.html">CVE-2016-8677</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8677">SUSE bug 1005328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8677">SUSE bug 1005328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8677">SUSE bug 1005328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8677">SUSE bug 1005328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8677">SUSE bug 1005328</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8682</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8682" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8682" source="CVE"/>
    <description>
    The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8682.html">CVE-2016-8682</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8682">SUSE bug 1005125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8682">SUSE bug 1005125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8682">SUSE bug 1005125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8682">SUSE bug 1005125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8682">SUSE bug 1005125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8682">SUSE bug 1005125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8682">SUSE bug 1005125</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8683</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8683" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8683" source="CVE"/>
    <description>
    The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8683.html">CVE-2016-8683</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8683">SUSE bug 1005127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8683">SUSE bug 1005127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8683">SUSE bug 1005127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8683">SUSE bug 1005127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8683">SUSE bug 1005127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8683">SUSE bug 1005127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8683">SUSE bug 1005127</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168684" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8684</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8684" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8684" source="CVE"/>
    <description>
    The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8684.html">CVE-2016-8684</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8684">SUSE bug 1005123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8684">SUSE bug 1005123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8684">SUSE bug 1005123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8684">SUSE bug 1005123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8684">SUSE bug 1005123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8684">SUSE bug 1005123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8684">SUSE bug 1005123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8684">SUSE bug 1005123</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139163" comment="ImageMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139164" comment="ImageMagick-devel-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139165" comment="ImageMagick-doc-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139166" comment="ImageMagick-extra-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139167" comment="libMagick++-6_Q16-3-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139168" comment="libMagickCore-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139169" comment="libMagickWand-6_Q16-1-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139170" comment="perl-PerlMagick-6.8.8.1-20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8685</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8685" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8685" source="CVE"/>
    <description>
    The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8685.html">CVE-2016-8685</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8685">SUSE bug 1005026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8685">SUSE bug 1005026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8685">SUSE bug 1005026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8685">SUSE bug 1005026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8685">SUSE bug 1005026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8685">SUSE bug 1005026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8685">SUSE bug 1005026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8685">SUSE bug 1005027</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8685">SUSE bug 1005026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8685">SUSE bug 1005026</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149444" comment="libpotrace0-1.14-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151954" comment="libpotrace0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149445" comment="potrace-1.14-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151955" comment="potrace is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149446" comment="potrace-devel-1.14-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151956" comment="potrace-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8686</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8686" source="CVE"/>
    <description>
    The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8686.html">CVE-2016-8686</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8686">SUSE bug 1005027</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8686">SUSE bug 1005027</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8686">SUSE bug 1005026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8686">SUSE bug 1005026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8686">SUSE bug 1005026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8686">SUSE bug 1005027</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149444" comment="libpotrace0-1.14-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151954" comment="libpotrace0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149445" comment="potrace-1.14-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151955" comment="potrace is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149446" comment="potrace-devel-1.14-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151956" comment="potrace-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8687</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8687" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8687" source="CVE"/>
    <description>
    Stack-based buffer overflow in the safe_fprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8687.html">CVE-2016-8687</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8687">SUSE bug 1005070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8687">SUSE bug 1005070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8687">SUSE bug 1005070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8687">SUSE bug 1005070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8687">SUSE bug 1005070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8687">SUSE bug 1005070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8687">SUSE bug 1005070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8687">SUSE bug 1005070</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136448" comment="bsdtar-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136449" comment="libarchive-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152671" comment="libarchive is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136450" comment="libarchive-devel-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136451" comment="libarchive13-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136452" comment="libarchive13-32bit-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152672" comment="libarchive13-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8688</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8688" source="CVE"/>
    <description>
    The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service (crash) via a crafted file, which triggers an invalid read in the (1) detect_form or (2) bid_entry function in libarchive/archive_read_support_format_mtree.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8688.html">CVE-2016-8688</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8688">SUSE bug 1005076</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136448" comment="bsdtar-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136449" comment="libarchive-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152671" comment="libarchive is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136450" comment="libarchive-devel-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136451" comment="libarchive13-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136452" comment="libarchive13-32bit-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152672" comment="libarchive13-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8689</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8689" source="CVE"/>
    <description>
    The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) via multiple EmptyStream attributes in a header in a 7zip archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8689.html">CVE-2016-8689</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8689">SUSE bug 1005072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8689">SUSE bug 1005072</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136448" comment="bsdtar-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151800" comment="bsdtar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136449" comment="libarchive-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152671" comment="libarchive is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136450" comment="libarchive-devel-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151801" comment="libarchive-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136451" comment="libarchive13-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151802" comment="libarchive13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136452" comment="libarchive13-32bit-3.1.2-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152672" comment="libarchive13-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8690</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8690" source="CVE"/>
    <description>
    The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8690.html">CVE-2016-8690</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8690">SUSE bug 1005084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8691</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8691" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8691" source="CVE"/>
    <description>
    The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8691.html">CVE-2016-8691</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8691">SUSE bug 1005090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8691">SUSE bug 1005090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8691">SUSE bug 1005090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8691">SUSE bug 1005090</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168692" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8692</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8692" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8692" source="CVE"/>
    <description>
    The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8692.html">CVE-2016-8692</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8692">SUSE bug 1005090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8692">SUSE bug 1005090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8692">SUSE bug 1005090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8692">SUSE bug 1005090</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8693</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8693" source="CVE"/>
    <description>
    Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8693.html">CVE-2016-8693</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8693">SUSE bug 1005242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8693">SUSE bug 1005242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8693">SUSE bug 1005242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8693">SUSE bug 1005242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8693">SUSE bug 1005242</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8704</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8704" source="CVE"/>
    <description>
    An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8704.html">CVE-2016-8704</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8704">SUSE bug 1007719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8704">SUSE bug 1007866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8704">SUSE bug 1007871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8704">SUSE bug 1007871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8704">SUSE bug 1007871</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8704">SUSE bug 1007871</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135793" comment="memcached-1.4.33-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153862" comment="memcached is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135794" comment="memcached-devel-1.4.33-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153863" comment="memcached-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8705</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8705" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8705" source="CVE"/>
    <description>
    Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8705.html">CVE-2016-8705</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1056865</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8705">SUSE bug 1007870</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135793" comment="memcached-1.4.33-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153862" comment="memcached is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135794" comment="memcached-devel-1.4.33-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153863" comment="memcached-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168706" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8706</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8706" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8706" source="CVE"/>
    <description>
    An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8706.html">CVE-2016-8706</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8706">SUSE bug 1007866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8706">SUSE bug 1007869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8706">SUSE bug 1007869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8706">SUSE bug 1007869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8706">SUSE bug 1007869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8706">SUSE bug 1007869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8706">SUSE bug 1007869</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8706">SUSE bug 1007869</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135793" comment="memcached-1.4.33-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153862" comment="memcached is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135794" comment="memcached-devel-1.4.33-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153863" comment="memcached-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168707" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8707</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8707" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8707" source="CVE"/>
    <description>
    An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8707.html">CVE-2016-8707</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8707">SUSE bug 1014159</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128810" comment="ImageMagick-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128815" comment="ImageMagick-devel-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146409" comment="ImageMagick-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146410" comment="ImageMagick-doc-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146411" comment="ImageMagick-extra-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128811" comment="libMagick++-6_Q16-3-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146412" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128816" comment="libMagick++-devel-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146413" comment="libMagick++-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128812" comment="libMagickCore-6_Q16-1-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128813" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128814" comment="libMagickWand-6_Q16-1-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146414" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128817" comment="perl-PerlMagick-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8728</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8728" source="CVE"/>
    <description>
    An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file can cause a out of bounds write resulting in heap metadata and sensitive process memory corruption leading to potential code execution. Victim needs to open the specially crafted file in a vulnerable reader in order to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8728.html">CVE-2016-8728</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8728">SUSE bug 1039850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8728">SUSE bug 1039850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167061" comment="mupdf-1.11-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167062" comment="mupdf-devel-static-1.11-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8729</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8729" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8729" source="CVE"/>
    <description>
    An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corruption and potential code execution. An attacker can specially craft a PDF and send to the victim to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8729.html">CVE-2016-8729</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8729">SUSE bug 1039931</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167061" comment="mupdf-1.11-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167062" comment="mupdf-devel-static-1.11-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168734" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8734</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8734" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8734" source="CVE"/>
    <description>
    Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8734.html">CVE-2016-8734</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8734">SUSE bug 1011552</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8734">SUSE bug 1011552</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8734">SUSE bug 1011552</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8734">SUSE bug 1011552</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8734">SUSE bug 1011552</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8734">SUSE bug 1011552</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8734">SUSE bug 1011552</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8734">SUSE bug 1011552</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8734">SUSE bug 1011552</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142188" comment="libsvn_auth_gnome_keyring-1-0-1.9.5-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142189" comment="libsvn_auth_kwallet-1-0-1.9.5-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142190" comment="subversion-1.9.5-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142191" comment="subversion-bash-completion-1.9.5-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142192" comment="subversion-devel-1.9.5-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142193" comment="subversion-perl-1.9.5-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142194" comment="subversion-python-1.9.5-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142195" comment="subversion-python-ctypes-1.9.5-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154271" comment="subversion-python-ctypes is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142196" comment="subversion-ruby-1.9.5-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152698" comment="subversion-ruby is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142197" comment="subversion-server-1.9.5-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142198" comment="subversion-tools-1.9.5-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8735</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8735" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8735" source="CVE"/>
    <description>
    Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8735.html">CVE-2016-8735</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8735">SUSE bug 1011805</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142899" comment="apache-commons-dbcp-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153286" comment="apache-commons-dbcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142900" comment="apache-commons-dbcp-javadoc-2.1.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153287" comment="apache-commons-dbcp-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142901" comment="apache-commons-pool2-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153288" comment="apache-commons-pool2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142902" comment="apache-commons-pool2-javadoc-2.4.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153289" comment="apache-commons-pool2-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142923" comment="tomcat-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142924" comment="tomcat-admin-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142925" comment="tomcat-docs-webapp-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142926" comment="tomcat-el-3_0-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142927" comment="tomcat-embed-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142928" comment="tomcat-javadoc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142929" comment="tomcat-jsp-2_3-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142930" comment="tomcat-jsvc-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142931" comment="tomcat-lib-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142932" comment="tomcat-servlet-3_1-api-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142933" comment="tomcat-webapps-8.0.36-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8740</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8740" source="CVE"/>
    <description>
    The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to cause a denial of service (memory consumption) via crafted CONTINUATION frames in an HTTP/2 request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8740.html">CVE-2016-8740</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8740">SUSE bug 1013648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8740">SUSE bug 1013648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8740">SUSE bug 1013648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8740">SUSE bug 1013648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8740">SUSE bug 1013648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8740">SUSE bug 1013648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8740">SUSE bug 1013648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8740">SUSE bug 1013648</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147872" comment="apache2-2.4.23-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147873" comment="apache2-devel-2.4.23-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147874" comment="apache2-doc-2.4.23-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147875" comment="apache2-event-2.4.23-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153274" comment="apache2-event is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147876" comment="apache2-example-pages-2.4.23-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147877" comment="apache2-prefork-2.4.23-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147878" comment="apache2-utils-2.4.23-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147879" comment="apache2-worker-2.4.23-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153275" comment="apache2-worker is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8743</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8743" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8743" source="CVE"/>
    <description>
    Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8743.html">CVE-2016-8743</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1033513</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 930944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 930944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1016715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1086774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1086774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8743">SUSE bug 1086774</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150428" comment="apache2-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150429" comment="apache2-devel-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150430" comment="apache2-doc-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150431" comment="apache2-event-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153274" comment="apache2-event is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150432" comment="apache2-example-pages-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150433" comment="apache2-prefork-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150434" comment="apache2-utils-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150435" comment="apache2-worker-2.4.23-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153275" comment="apache2-worker is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8745</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8745" source="CVE"/>
    <description>
    A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted in the current Processor object being added to the Processor cache multiple times. This in turn meant that the same Processor could be used for concurrent requests. Sharing a Processor can result in information leakage between requests including, not not limited to, session ID and the response body. The bug was first noticed in 8.5.x onwards where it appears the refactoring of the Connector code for 8.5.x onwards made it more likely that the bug was observed. Initially it was thought that the 8.5.x refactoring introduced the bug but further investigation has shown that the bug is present in all currently supported Tomcat versions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8745.html">CVE-2016-8745</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8745">SUSE bug 1015119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155481" comment="tomcat-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155482" comment="tomcat-admin-webapps-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155483" comment="tomcat-docs-webapp-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155484" comment="tomcat-el-3_0-api-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155485" comment="tomcat-embed-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155486" comment="tomcat-javadoc-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155487" comment="tomcat-jsp-2_3-api-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155488" comment="tomcat-jsvc-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155489" comment="tomcat-lib-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155490" comment="tomcat-servlet-3_1-api-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155491" comment="tomcat-webapps-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8858</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8858" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8858" source="CVE"/>
    <description>
    ** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests.  NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8858.html">CVE-2016-8858</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1039572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1039572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1039572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1039572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1039572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1039572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1039572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1039572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1039572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1005480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1039572</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1087412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8858">SUSE bug 1087412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147999" comment="openssh-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148000" comment="openssh-askpass-gnome-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153167" comment="openssh-askpass-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148001" comment="openssh-cavs-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153168" comment="openssh-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148002" comment="openssh-fips-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153169" comment="openssh-fips is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148003" comment="openssh-helpers-7.2p2-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8859</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8859" source="CVE"/>
    <description>
    Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8859.html">CVE-2016-8859</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8859">SUSE bug 1005483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8859">SUSE bug 1005483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8859">SUSE bug 1005483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8859">SUSE bug 1005483</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170199" comment="agrep-0.8.0_git201402282055-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170200" comment="agrep is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170201" comment="libtre5-0.8.0_git201402282055-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170202" comment="libtre5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170203" comment="python-tre-0.8.0_git201402282055-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170204" comment="python-tre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170205" comment="tre-0.8.0_git201402282055-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170206" comment="tre is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170207" comment="tre-devel-0.8.0_git201402282055-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170208" comment="tre-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170209" comment="tre-lang-0.8.0_git201402282055-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170210" comment="tre-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8862</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8862" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8862" source="CVE"/>
    <description>
    The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8862.html">CVE-2016-8862</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1031267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8862">SUSE bug 1009318</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142677" comment="ImageMagick-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142678" comment="ImageMagick-devel-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142679" comment="ImageMagick-devel-32bit-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142680" comment="ImageMagick-doc-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142681" comment="ImageMagick-extra-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142682" comment="libMagick++-6_Q16-3-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142683" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142684" comment="libMagick++-devel-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142685" comment="libMagick++-devel-32bit-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142686" comment="libMagickCore-6_Q16-1-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142687" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142688" comment="libMagickWand-6_Q16-1-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142689" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142690" comment="perl-PerlMagick-6.8.8.1-22.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8863</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8863" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8863" source="CVE"/>
    <description>
    Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the CALLBACK header of an SUBSCRIBE request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8863.html">CVE-2016-8863</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8863">SUSE bug 1006256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8863">SUSE bug 1006256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8863">SUSE bug 1006256</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156367" comment="libupnp-1.6.21-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156371" comment="libupnp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156368" comment="libupnp-devel-1.6.21-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156372" comment="libupnp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156369" comment="libupnp6-1.6.21-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154113" comment="libupnp6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156370" comment="libupnp6-32bit-1.6.21-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156373" comment="libupnp6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8864</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8864" source="CVE"/>
    <description>
    named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8864.html">CVE-2016-8864</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8864">SUSE bug 1007829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8864">SUSE bug 1007829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8864">SUSE bug 1007829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8864">SUSE bug 1007829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8864">SUSE bug 1007829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8864">SUSE bug 1007829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8864">SUSE bug 1020526</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8864">SUSE bug 1024130</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139295" comment="bind-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139296" comment="bind-chrootenv-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139297" comment="bind-doc-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139298" comment="bind-libs-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009139299" comment="bind-utils-9.9.9P1-41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8866</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8866" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8866" source="CVE"/>
    <description>
    The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8866.html">CVE-2016-8866</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1007245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1031267</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8866">SUSE bug 1009318</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145778" comment="GraphicsMagick-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145779" comment="GraphicsMagick-devel-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128810" comment="ImageMagick-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128815" comment="ImageMagick-devel-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146409" comment="ImageMagick-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146410" comment="ImageMagick-doc-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146411" comment="ImageMagick-extra-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145780" comment="libGraphicsMagick++-Q16-11-1.3.21-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152593" comment="libGraphicsMagick++-Q16-11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145781" comment="libGraphicsMagick++-Q16-12-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145783" comment="libGraphicsMagick++-devel-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145784" comment="libGraphicsMagick-Q16-3-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145785" comment="libGraphicsMagick3-config-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145786" comment="libGraphicsMagickWand-Q16-2-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128811" comment="libMagick++-6_Q16-3-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146412" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128816" comment="libMagick++-devel-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146413" comment="libMagick++-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128812" comment="libMagickCore-6_Q16-1-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128813" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128814" comment="libMagickWand-6_Q16-1-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146414" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145787" comment="perl-GraphicsMagick-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128817" comment="perl-PerlMagick-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8867</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8867" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8867" source="CVE"/>
    <description>
    Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user permissions to access files within the container filesystem or mounted volumes.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8867.html">CVE-2016-8867</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8867">SUSE bug 1007249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8867">SUSE bug 1007249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8867">SUSE bug 1007249</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136434" comment="containerd-0.2.4+gitr565_0366d7e-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153864" comment="containerd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136435" comment="containerd-ctr-0.2.4+gitr565_0366d7e-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153865" comment="containerd-ctr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136436" comment="containerd-test-0.2.4+gitr565_0366d7e-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153866" comment="containerd-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136437" comment="docker-1.12.3-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152505" comment="docker is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136438" comment="docker-bash-completion-1.12.3-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152506" comment="docker-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136439" comment="docker-test-1.12.3-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152507" comment="docker-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136440" comment="docker-zsh-completion-1.12.3-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152508" comment="docker-zsh-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136441" comment="runc-0.1.1+gitr2816_02f8fa7-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153867" comment="runc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136442" comment="runc-test-0.1.1+gitr2816_02f8fa7-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153868" comment="runc-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168880" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8880</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8880" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8880" source="CVE"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4516. Reason: This candidate is a duplicate of CVE-2011-4516. Notes: All CVE users should reference CVE-2011-4516 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8880.html">CVE-2016-8880</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8880">SUSE bug 1006591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8880">SUSE bug 1006591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8880">SUSE bug 1006591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8880">SUSE bug 1006591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8880">SUSE bug 1006591</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8881</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8881" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8881" source="CVE"/>
    <description>
    ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4517. Reason: This candidate is a duplicate of CVE-2011-4517. Notes: All CVE users should reference CVE-2011-4517 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8881.html">CVE-2016-8881</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8881">SUSE bug 1006593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8881">SUSE bug 1006593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8881">SUSE bug 1006593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8881">SUSE bug 1006593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8881">SUSE bug 1006593</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168882" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8882</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8882" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8882" source="CVE"/>
    <description>
    The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8882.html">CVE-2016-8882</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8882">SUSE bug 1006597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8882">SUSE bug 1006597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8882">SUSE bug 1006597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8882">SUSE bug 1006597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8882">SUSE bug 1006597</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8882">SUSE bug 1006597</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168883" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8883</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8883" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8883" source="CVE"/>
    <description>
    The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8883.html">CVE-2016-8883</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8883">SUSE bug 1006598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8883">SUSE bug 1006598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8883">SUSE bug 1006598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8883">SUSE bug 1006598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8883">SUSE bug 1006598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8883">SUSE bug 1006598</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168884" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8884</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8884" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8884" source="CVE"/>
    <description>
    The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8884.html">CVE-2016-8884</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8884">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8884">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8884">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8884">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8884">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8884">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8884">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8884">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8884">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8884">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8884">SUSE bug 1005084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8885</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8885" source="CVE"/>
    <description>
    The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8885.html">CVE-2016-8885</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8885">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8885">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8885">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8885">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8885">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8885">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8885">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8885">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8885">SUSE bug 1005084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8885">SUSE bug 1007009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8885">SUSE bug 1005084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168886" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8886</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8886" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8886" source="CVE"/>
    <description>
    The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8886.html">CVE-2016-8886</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8886">SUSE bug 1006599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8886">SUSE bug 1006599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8886">SUSE bug 1006599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8886">SUSE bug 1006599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8886">SUSE bug 1006599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8886">SUSE bug 1006599</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8887</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8887" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8887" source="CVE"/>
    <description>
    The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8887.html">CVE-2016-8887</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8887">SUSE bug 1006836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8887">SUSE bug 1006839</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8887">SUSE bug 1006836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8887">SUSE bug 1006836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8887">SUSE bug 1006836</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8887">SUSE bug 1006836</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135730" comment="jasper-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135731" comment="libjasper-devel-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135732" comment="libjasper1-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135733" comment="libjasper1-32bit-1.900.14-167.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168909" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8909</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8909" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8909" source="CVE"/>
    <description>
    The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8909.html">CVE-2016-8909</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8909">SUSE bug 1006536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8909">SUSE bug 1006536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8909">SUSE bug 1006536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8909">SUSE bug 1007160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8909">SUSE bug 1006536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8909">SUSE bug 1007160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8909">SUSE bug 1007160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8909">SUSE bug 1006536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8909">SUSE bug 1006536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8909">SUSE bug 1006536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8909">SUSE bug 1006536</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20168910" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-8910</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-8910" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8910" source="CVE"/>
    <description>
    The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-8910.html">CVE-2016-8910</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1006538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1006538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1006538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1007157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1006538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1007157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1007157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1007157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1024178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1006538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1006538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1006538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1007157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1006538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-8910">SUSE bug 1007157</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9042</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9042" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9042" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9042.html">CVE-2016-9042</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9042">SUSE bug 1030050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154733" comment="ntp-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154734" comment="ntp-doc-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9063</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9063" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9063.html">CVE-2016-9063</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1010424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1010424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1010424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1010424</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9063">SUSE bug 1047240</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162539" comment="libexpat-devel-2.1.0-21.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163116" comment="libexpat-devel-32bit-2.1.0-21.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151785" comment="libexpat-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9064</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9064" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9064" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9064.html">CVE-2016-9064</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9064">SUSE bug 1010402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9064">SUSE bug 1010402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9064">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9064">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9064">SUSE bug 1010402</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9064">SUSE bug 1010402</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9066</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9066" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9066" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9066.html">CVE-2016-9066</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9066">SUSE bug 1010404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9066">SUSE bug 1010404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9066">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9066">SUSE bug 1010404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9066">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9066">SUSE bug 1010404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9066">SUSE bug 1010404</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9067</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9067" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9067" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9067.html">CVE-2016-9067</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9067">SUSE bug 1010405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9067">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9067">SUSE bug 1010405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9067">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9067">SUSE bug 1010405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9067">SUSE bug 1010405</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9068</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9068" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9068" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9068.html">CVE-2016-9068</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9068">SUSE bug 1010406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9068">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9068">SUSE bug 1010406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9068">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9068">SUSE bug 1010406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9068">SUSE bug 1010406</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9069</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9069" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9069.html">CVE-2016-9069</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9069">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9069">SUSE bug 1010405</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9069">SUSE bug 1010405</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9070</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9070" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9070.html">CVE-2016-9070</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9070">SUSE bug 1010420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9070">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9070">SUSE bug 1010420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9070">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9070">SUSE bug 1010420</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9070">SUSE bug 1010420</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9071</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9071" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9071.html">CVE-2016-9071</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9071">SUSE bug 1010425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9071">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9071">SUSE bug 1010425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9071">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9071">SUSE bug 1010425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9071">SUSE bug 1010425</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9073</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9073" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9073.html">CVE-2016-9073</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9073">SUSE bug 1010421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9073">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9073">SUSE bug 1010421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9073">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9073">SUSE bug 1010421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9073">SUSE bug 1010421</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9074</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9074" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9074.html">CVE-2016-9074</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9074">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9074">SUSE bug 1010422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9074">SUSE bug 1010422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9074">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9074">SUSE bug 1010422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9074">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9074">SUSE bug 1010422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9074">SUSE bug 1010422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9075</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9075" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9075.html">CVE-2016-9075</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9075">SUSE bug 1010408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9075">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9075">SUSE bug 1010408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9075">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9075">SUSE bug 1010408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9075">SUSE bug 1010408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9076</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9076" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9076" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9076.html">CVE-2016-9076</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9076">SUSE bug 1010423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9076">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9076">SUSE bug 1010423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9076">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9076">SUSE bug 1010423</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9076">SUSE bug 1010423</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9077</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9077" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9077.html">CVE-2016-9077</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9077">SUSE bug 1010409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9077">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9077">SUSE bug 1010409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9077">SUSE bug 1009026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9077">SUSE bug 1010409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9077">SUSE bug 1010409</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135723" comment="MozillaFirefox-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135724" comment="MozillaFirefox-branding-upstream-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135725" comment="MozillaFirefox-buildsymbols-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135726" comment="MozillaFirefox-devel-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135727" comment="MozillaFirefox-translations-common-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135728" comment="MozillaFirefox-translations-other-50.0-39.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135690" comment="libfreebl3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135691" comment="libfreebl3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135692" comment="libsoftokn3-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135693" comment="libsoftokn3-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135694" comment="mozilla-nss-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135695" comment="mozilla-nss-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135696" comment="mozilla-nss-certs-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135697" comment="mozilla-nss-certs-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135698" comment="mozilla-nss-devel-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135699" comment="mozilla-nss-sysinit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135700" comment="mozilla-nss-sysinit-32bit-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135701" comment="mozilla-nss-tools-3.26.2-32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9078</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9078" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9078.html">CVE-2016-9078</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9078">SUSE bug 1012807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9078">SUSE bug 1012807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9078">SUSE bug 1012807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9078">SUSE bug 1012807</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136329" comment="MozillaFirefox-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136330" comment="MozillaFirefox-branding-upstream-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136331" comment="MozillaFirefox-buildsymbols-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136332" comment="MozillaFirefox-devel-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136333" comment="MozillaFirefox-translations-common-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136334" comment="MozillaFirefox-translations-other-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9079</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9079" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9079.html">CVE-2016-9079</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9079">SUSE bug 1012964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136329" comment="MozillaFirefox-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136330" comment="MozillaFirefox-branding-upstream-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136331" comment="MozillaFirefox-buildsymbols-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136332" comment="MozillaFirefox-devel-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136333" comment="MozillaFirefox-translations-common-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136334" comment="MozillaFirefox-translations-other-50.0.2-42.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136335" comment="MozillaThunderbird-45.5.1-28.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136336" comment="MozillaThunderbird-buildsymbols-45.5.1-28.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136337" comment="MozillaThunderbird-devel-45.5.1-28.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136338" comment="MozillaThunderbird-translations-common-45.5.1-28.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136339" comment="MozillaThunderbird-translations-other-45.5.1-28.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9080</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9080" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9080.html">CVE-2016-9080</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9080">SUSE bug 1015542</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9082</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9082" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9082" source="CVE"/>
    <description>
    Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9082.html">CVE-2016-9082</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9082">SUSE bug 1007255</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158022" comment="cairo-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158148" comment="cairo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158023" comment="cairo-devel-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158149" comment="cairo-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158024" comment="cairo-devel-32bit-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158150" comment="cairo-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158025" comment="cairo-tools-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158151" comment="cairo-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158026" comment="libcairo-gobject2-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158152" comment="libcairo-gobject2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158027" comment="libcairo-gobject2-32bit-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158153" comment="libcairo-gobject2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158028" comment="libcairo-script-interpreter2-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158154" comment="libcairo-script-interpreter2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158029" comment="libcairo-script-interpreter2-32bit-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158155" comment="libcairo-script-interpreter2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158030" comment="libcairo2-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158156" comment="libcairo2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158031" comment="libcairo2-32bit-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158157" comment="libcairo2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9083</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9083" source="CVE"/>
    <description>
    drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a "state machine confusion bug."
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9083.html">CVE-2016-9083</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9083">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9083">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9083">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9083">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9083">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9083">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9083">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9083">SUSE bug 1007197</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9084</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9084" source="CVE"/>
    <description>
    drivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function, which allows local users to cause a denial of service (integer overflow) or have unspecified other impact by leveraging access to a vfio PCI device file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9084.html">CVE-2016-9084</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9084">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9084">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9084">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9084">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9084">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9084">SUSE bug 1007197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9084">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9084">SUSE bug 1007197</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9101</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9101" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9101" source="CVE"/>
    <description>
    Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9101.html">CVE-2016-9101</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1024181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1024181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1024181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1007391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9101">SUSE bug 1013668</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9102</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9102" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9102" source="CVE"/>
    <description>
    Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) via a large number of Txattrcreate messages with the same fid number.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9102.html">CVE-2016-9102</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9102">SUSE bug 1007450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9102">SUSE bug 1007450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9102">SUSE bug 1014256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9102">SUSE bug 1007450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9102">SUSE bug 1014256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9102">SUSE bug 1014256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9102">SUSE bug 1007450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9102">SUSE bug 1007450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9102">SUSE bug 1007450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9102">SUSE bug 1007450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147323" comment="qemu-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147324" comment="qemu-arm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147325" comment="qemu-block-curl-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147326" comment="qemu-block-dmg-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147327" comment="qemu-block-iscsi-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147328" comment="qemu-block-rbd-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147329" comment="qemu-block-ssh-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147330" comment="qemu-extra-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147331" comment="qemu-guest-agent-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147332" comment="qemu-ipxe-1.0.0-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147333" comment="qemu-kvm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147334" comment="qemu-lang-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147335" comment="qemu-linux-user-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147336" comment="qemu-ppc-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147337" comment="qemu-s390-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147338" comment="qemu-seabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147339" comment="qemu-sgabios-8-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147340" comment="qemu-testsuite-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147341" comment="qemu-tools-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147342" comment="qemu-vgabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147343" comment="qemu-x86-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9103</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9103" source="CVE"/>
    <description>
    The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before writing to them.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9103.html">CVE-2016-9103</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9103">SUSE bug 1007454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9103">SUSE bug 1007454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9103">SUSE bug 1014259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9103">SUSE bug 1007454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9103">SUSE bug 1014259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9103">SUSE bug 1014259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9103">SUSE bug 1007454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9103">SUSE bug 1007454</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9103">SUSE bug 1007454</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147323" comment="qemu-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147324" comment="qemu-arm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147325" comment="qemu-block-curl-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147326" comment="qemu-block-dmg-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147327" comment="qemu-block-iscsi-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147328" comment="qemu-block-rbd-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147329" comment="qemu-block-ssh-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147330" comment="qemu-extra-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147331" comment="qemu-guest-agent-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147332" comment="qemu-ipxe-1.0.0-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147333" comment="qemu-kvm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147334" comment="qemu-lang-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147335" comment="qemu-linux-user-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147336" comment="qemu-ppc-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147337" comment="qemu-s390-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147338" comment="qemu-seabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147339" comment="qemu-sgabios-8-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147340" comment="qemu-testsuite-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147341" comment="qemu-tools-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147342" comment="qemu-vgabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147343" comment="qemu-x86-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9104</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9104" source="CVE"/>
    <description>
    Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via a crafted offset, which triggers an out-of-bounds access.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9104.html">CVE-2016-9104</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9104">SUSE bug 1007493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9104">SUSE bug 1007493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9104">SUSE bug 1014297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9104">SUSE bug 1007493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9104">SUSE bug 1014297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9104">SUSE bug 1014297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9104">SUSE bug 1007493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9104">SUSE bug 1007493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9104">SUSE bug 1034990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9104">SUSE bug 1007493</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9104">SUSE bug 1007493</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9105</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9105" source="CVE"/>
    <description>
    Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors involving a reference to the source fid object.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9105.html">CVE-2016-9105</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9105">SUSE bug 1007494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9105">SUSE bug 1007494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9105">SUSE bug 1014279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9105">SUSE bug 1007494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9105">SUSE bug 1014279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9105">SUSE bug 1014279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9105">SUSE bug 1007494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9105">SUSE bug 1007494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9105">SUSE bug 1007494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9105">SUSE bug 1007494</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9106</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9106" source="CVE"/>
    <description>
    Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) by leveraging failure to free an IO vector.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9106.html">CVE-2016-9106</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9106">SUSE bug 1007495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9106">SUSE bug 1007495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9106">SUSE bug 1014299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9106">SUSE bug 1007495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9106">SUSE bug 1007495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9106">SUSE bug 1014299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9106">SUSE bug 1014299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9106">SUSE bug 1007495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9106">SUSE bug 1007495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9106">SUSE bug 1007495</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9106">SUSE bug 1007495</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145816" comment="qemu-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145817" comment="qemu-arm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145818" comment="qemu-block-curl-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145819" comment="qemu-block-dmg-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145820" comment="qemu-block-iscsi-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145821" comment="qemu-block-rbd-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145822" comment="qemu-block-ssh-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145823" comment="qemu-extra-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145824" comment="qemu-guest-agent-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145825" comment="qemu-ipxe-1.0.0-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145826" comment="qemu-kvm-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145827" comment="qemu-lang-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145828" comment="qemu-linux-user-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145829" comment="qemu-ppc-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145830" comment="qemu-s390-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145831" comment="qemu-seabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145832" comment="qemu-sgabios-8-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145833" comment="qemu-testsuite-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145834" comment="qemu-tools-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145835" comment="qemu-vgabios-1.9.1-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145836" comment="qemu-x86-2.6.2-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9112</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9112" source="CVE"/>
    <description>
    Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9112.html">CVE-2016-9112</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1056396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9112">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9113</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9113" source="CVE"/>
    <description>
    There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image-&gt;comps[0].data is not assigned a value after initialization(NULL). Impact is Denial of Service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9113.html">CVE-2016-9113</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9113">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9114</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9114" source="CVE"/>
    <description>
    There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image-&gt;comps[compno].data is not assigned a value after initialization(NULL). Impact is Denial of Service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9114.html">CVE-2016-9114</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9114">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9115</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9115" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9115" source="CVE"/>
    <description>
    Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9115.html">CVE-2016-9115</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9115">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9116</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9116" source="CVE"/>
    <description>
    NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9116.html">CVE-2016-9116</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9116">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9117</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9117" source="CVE"/>
    <description>
    NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9117.html">CVE-2016-9117</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9117">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9118</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9118" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9118" source="CVE"/>
    <description>
    Heap Buffer Overflow (WRITE of size 4) in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9118.html">CVE-2016-9118</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007747</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9118">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9131</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9131" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9131" source="CVE"/>
    <description>
    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9131.html">CVE-2016-9131</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9131">SUSE bug 1018699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9131">SUSE bug 1018700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9131">SUSE bug 1018700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9131">SUSE bug 1018700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9131">SUSE bug 1018699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9131">SUSE bug 1018700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9131">SUSE bug 1018700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9131">SUSE bug 1018699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9131">SUSE bug 1018700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9131">SUSE bug 1018700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9131">SUSE bug 1018700</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147306" comment="bind-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147307" comment="bind-chrootenv-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147308" comment="bind-devel-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153102" comment="bind-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147309" comment="bind-doc-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147310" comment="bind-libs-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147311" comment="bind-libs-32bit-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153103" comment="bind-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147312" comment="bind-lwresd-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153104" comment="bind-lwresd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147313" comment="bind-utils-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9137</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9137" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9137" source="CVE"/>
    <description>
    Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during __wakeup processing.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9137.html">CVE-2016-9137</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9137">SUSE bug 1008029</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142464" comment="apache2-mod_php5-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142620" comment="apache2-mod_php7-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142465" comment="php5-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142466" comment="php5-bcmath-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142467" comment="php5-bz2-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142468" comment="php5-calendar-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142469" comment="php5-ctype-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142470" comment="php5-curl-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142471" comment="php5-dba-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142472" comment="php5-devel-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142473" comment="php5-dom-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142474" comment="php5-enchant-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142475" comment="php5-exif-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142476" comment="php5-fastcgi-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142477" comment="php5-fileinfo-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142478" comment="php5-firebird-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142479" comment="php5-fpm-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142480" comment="php5-ftp-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142481" comment="php5-gd-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142482" comment="php5-gettext-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142483" comment="php5-gmp-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142484" comment="php5-iconv-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142485" comment="php5-imap-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142486" comment="php5-intl-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142487" comment="php5-json-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142488" comment="php5-ldap-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142489" comment="php5-mbstring-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142490" comment="php5-mcrypt-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142491" comment="php5-mssql-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142492" comment="php5-mysql-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142493" comment="php5-odbc-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142494" comment="php5-opcache-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142495" comment="php5-openssl-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142496" comment="php5-pcntl-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142497" comment="php5-pdo-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142498" comment="php5-pear-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142499" comment="php5-pgsql-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142500" comment="php5-phar-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142501" comment="php5-posix-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142502" comment="php5-pspell-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142503" comment="php5-readline-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142504" comment="php5-shmop-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142505" comment="php5-snmp-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142506" comment="php5-soap-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142507" comment="php5-sockets-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142508" comment="php5-sqlite-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142509" comment="php5-suhosin-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142510" comment="php5-sysvmsg-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142511" comment="php5-sysvsem-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142512" comment="php5-sysvshm-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142513" comment="php5-tidy-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142514" comment="php5-tokenizer-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142515" comment="php5-wddx-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142516" comment="php5-xmlreader-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142517" comment="php5-xmlrpc-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142518" comment="php5-xmlwriter-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142519" comment="php5-xsl-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142520" comment="php5-zip-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142521" comment="php5-zlib-5.5.14-69.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142621" comment="php7-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142622" comment="php7-bcmath-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142623" comment="php7-bz2-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142624" comment="php7-calendar-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142625" comment="php7-ctype-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142626" comment="php7-curl-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142627" comment="php7-dba-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142628" comment="php7-devel-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142629" comment="php7-dom-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142630" comment="php7-enchant-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142631" comment="php7-exif-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142632" comment="php7-fastcgi-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142633" comment="php7-fileinfo-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142634" comment="php7-firebird-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142635" comment="php7-fpm-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142636" comment="php7-ftp-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142637" comment="php7-gd-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142638" comment="php7-gettext-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142639" comment="php7-gmp-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142640" comment="php7-iconv-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142641" comment="php7-imap-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142642" comment="php7-intl-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142643" comment="php7-json-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142644" comment="php7-ldap-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142645" comment="php7-mbstring-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142646" comment="php7-mcrypt-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142647" comment="php7-mysql-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142648" comment="php7-odbc-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142649" comment="php7-opcache-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142650" comment="php7-openssl-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142651" comment="php7-pcntl-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142652" comment="php7-pdo-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142653" comment="php7-pear-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142654" comment="php7-pear-Archive_Tar-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142655" comment="php7-pgsql-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142656" comment="php7-phar-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142657" comment="php7-posix-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142658" comment="php7-pspell-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142659" comment="php7-readline-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142660" comment="php7-shmop-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142661" comment="php7-snmp-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142662" comment="php7-soap-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142663" comment="php7-sockets-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142664" comment="php7-sqlite-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142665" comment="php7-sysvmsg-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142666" comment="php7-sysvsem-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142667" comment="php7-sysvshm-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142668" comment="php7-tidy-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142669" comment="php7-tokenizer-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142670" comment="php7-wddx-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142671" comment="php7-xmlreader-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142672" comment="php7-xmlrpc-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142673" comment="php7-xmlwriter-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142674" comment="php7-xsl-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142675" comment="php7-zip-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142676" comment="php7-zlib-7.0.7-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9138</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9138" source="CVE"/>
    <description>
    PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::__toString with DateInterval::__wakeup.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9138.html">CVE-2016-9138</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9138">SUSE bug 1008026</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9139</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9139" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9139" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16, 4.0.x before 4.0.19, and 5.0.x before 5.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9139.html">CVE-2016-9139</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9139">SUSE bug 1008017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9139">SUSE bug 1008017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9139">SUSE bug 1008017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9139">SUSE bug 1008017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9139">SUSE bug 1008017</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135720" comment="otrs-3.3.16-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154272" comment="otrs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135721" comment="otrs-doc-3.3.16-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154273" comment="otrs-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135722" comment="otrs-itsm-3.3.14-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154274" comment="otrs-itsm is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9147</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9147" source="CVE"/>
    <description>
    named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related RRsets.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9147.html">CVE-2016-9147</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9147">SUSE bug 1018701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147306" comment="bind-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147307" comment="bind-chrootenv-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147308" comment="bind-devel-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153102" comment="bind-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147309" comment="bind-doc-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147310" comment="bind-libs-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147311" comment="bind-libs-32bit-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153103" comment="bind-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147312" comment="bind-lwresd-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153104" comment="bind-lwresd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147313" comment="bind-utils-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9179</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9179" source="CVE"/>
    <description>
    lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9179.html">CVE-2016-9179</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9179">SUSE bug 1008642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9179">SUSE bug 1008642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9179">SUSE bug 1008642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9179">SUSE bug 1008642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9179">SUSE bug 1008642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9179">SUSE bug 1008642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9179">SUSE bug 1008642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9179">SUSE bug 1008642</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149468" comment="lynx-2.8.7-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151020" comment="lynx is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9181</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9181" source="CVE"/>
    <description>
    perl-Image-Info: When parsing an SVG file, external entity expansion (XXE) was not disabled. An attacker could craft an SVG file which, when processed by an application using perl-Image-Info, could cause denial of service or, potentially, information disclosure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9181.html">CVE-2016-9181</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9181">SUSE bug 1008647</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149464" comment="perl-Image-Info-1.39-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153869" comment="perl-Image-Info is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9191" source="CVE"/>
    <description>
    The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service (system hang) by leveraging access to a container environment for executing a crafted application, as demonstrated by trinity.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9191.html">CVE-2016-9191</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9191">SUSE bug 1008842</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150470" comment="kernel-debug-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150471" comment="kernel-debug-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150472" comment="kernel-debug-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150473" comment="kernel-default-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150474" comment="kernel-default-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150475" comment="kernel-default-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150476" comment="kernel-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150477" comment="kernel-docs-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150478" comment="kernel-docs-html-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150479" comment="kernel-docs-pdf-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150480" comment="kernel-macros-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150481" comment="kernel-obs-build-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150482" comment="kernel-obs-qa-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150483" comment="kernel-source-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150484" comment="kernel-source-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150485" comment="kernel-syms-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150486" comment="kernel-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150487" comment="kernel-vanilla-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150488" comment="kernel-vanilla-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9262</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9262" source="CVE"/>
    <description>
    Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9262.html">CVE-2016-9262</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9262">SUSE bug 1009994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9262">SUSE bug 1009994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9262">SUSE bug 1009994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9262">SUSE bug 1009994</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159464" comment="jasper-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159465" comment="libjasper-devel-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159466" comment="libjasper1-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159467" comment="libjasper1-32bit-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9273</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9273" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9273" source="CVE"/>
    <description>
    tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9273.html">CVE-2016-9273</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9273">SUSE bug 1010163</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146600" comment="libtiff-devel-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146601" comment="libtiff-devel-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146602" comment="libtiff5-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146603" comment="libtiff5-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146604" comment="tiff-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169297" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9297</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9297" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9297" source="CVE"/>
    <description>
    The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII tag values.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9297.html">CVE-2016-9297</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9297">SUSE bug 1011103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146600" comment="libtiff-devel-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146601" comment="libtiff-devel-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146602" comment="libtiff5-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146603" comment="libtiff5-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146604" comment="tiff-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169310" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9310</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9310" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9310" source="CVE"/>
    <description>
    The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9310.html">CVE-2016-9310</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9310">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9310">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9310">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9310">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9310">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9310">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9310">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9310">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9310">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9310">SUSE bug 1011377</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145996" comment="ntp-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145997" comment="ntp-doc-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169311" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9311</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9311" source="CVE"/>
    <description>
    ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9311.html">CVE-2016-9311</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9311">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9311">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9311">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9311">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9311">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9311">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9311">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9311">SUSE bug 1011421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9311">SUSE bug 1011377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9311">SUSE bug 1011377</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145996" comment="ntp-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145997" comment="ntp-doc-4.2.8p9-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9317</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9317" source="CVE"/>
    <description>
    The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9317.html">CVE-2016-9317</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9317">SUSE bug 1022283</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146236" comment="gd-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146237" comment="gd-32bit-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146238" comment="gd-devel-2.1.0-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153569" comment="gd-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9318</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9318" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9318" source="CVE"/>
    <description>
    libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9318.html">CVE-2016-9318</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1019074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1013930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9318">SUSE bug 1010675</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148333" comment="libxml2-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148334" comment="libxml2-2-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148335" comment="libxml2-2-32bit-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148336" comment="libxml2-devel-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148337" comment="libxml2-devel-32bit-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148338" comment="libxml2-doc-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148339" comment="libxml2-tools-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148340" comment="python-libxml2-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169372" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9372</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9372" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9372" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in plugins/profinet/packet-pn-rtc-one.c by rejecting input with too many I/O objects.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9372.html">CVE-2016-9372</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9372">SUSE bug 1010807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9372">SUSE bug 1010807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9372">SUSE bug 1010807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9372">SUSE bug 1010807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9372">SUSE bug 1010807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9372">SUSE bug 1010807</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135991" comment="wireshark-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135992" comment="wireshark-devel-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135993" comment="wireshark-ui-gtk-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135994" comment="wireshark-ui-qt-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9373</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9373" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private strings.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9373.html">CVE-2016-9373</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9373">SUSE bug 1010754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9373">SUSE bug 1010754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9373">SUSE bug 1010754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9373">SUSE bug 1010754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9373">SUSE bug 1010911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9373">SUSE bug 1010754</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9373">SUSE bug 1010754</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135991" comment="wireshark-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135992" comment="wireshark-devel-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135993" comment="wireshark-ui-gtk-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135994" comment="wireshark-ui-qt-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9374</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9374" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer over-read, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-alljoyn.c by ensuring that a length variable properly tracked the state of a signature variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9374.html">CVE-2016-9374</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9374">SUSE bug 1010752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9374">SUSE bug 1010752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9374">SUSE bug 1010752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9374">SUSE bug 1010752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9374">SUSE bug 1010911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9374">SUSE bug 1010752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9374">SUSE bug 1010752</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135991" comment="wireshark-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135992" comment="wireshark-devel-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135993" comment="wireshark-ui-gtk-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135994" comment="wireshark-ui-qt-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9375</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9375" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dtn.c by checking whether SDNV evaluation was successful.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9375.html">CVE-2016-9375</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9375">SUSE bug 1010740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9375">SUSE bug 1010740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9375">SUSE bug 1010740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9375">SUSE bug 1010740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9375">SUSE bug 1010911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9375">SUSE bug 1010740</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9375">SUSE bug 1010740</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135991" comment="wireshark-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135992" comment="wireshark-devel-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135993" comment="wireshark-ui-gtk-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135994" comment="wireshark-ui-qt-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9376</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9376" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflow_v5.c by ensuring that certain length values were sufficiently large.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9376.html">CVE-2016-9376</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9376">SUSE bug 1010735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9376">SUSE bug 1010735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9376">SUSE bug 1010735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9376">SUSE bug 1010735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9376">SUSE bug 1010911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9376">SUSE bug 1010735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9376">SUSE bug 1010735</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135991" comment="wireshark-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135992" comment="wireshark-devel-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135993" comment="wireshark-ui-gtk-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135994" comment="wireshark-ui-qt-2.2.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9377</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9377" source="CVE"/>
    <description>
    Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging IDT entry miscalculation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9377.html">CVE-2016-9377</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9377">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9377">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9377">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9377">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9377">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9377">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9377">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9377">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9377">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9377">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9377">SUSE bug 1009108</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9378</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9378" source="CVE"/>
    <description>
    Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging an incorrect choice for software interrupt delivery.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9378.html">CVE-2016-9378</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9378">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9378">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9378">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9378">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9378">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9378">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9378">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9378">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9378">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9378">SUSE bug 1009108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9378">SUSE bug 1009108</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9379</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9379" source="CVE"/>
    <description>
    The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9379.html">CVE-2016-9379</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9379">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9379">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9379">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9379">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9379">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9379">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9379">SUSE bug 1009111</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9380</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9380" source="CVE"/>
    <description>
    The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9380.html">CVE-2016-9380</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9380">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9380">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9380">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9380">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9380">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9380">SUSE bug 1009111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9380">SUSE bug 1009111</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9381</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9381" source="CVE"/>
    <description>
    Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9381.html">CVE-2016-9381</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9381">SUSE bug 1009109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147323" comment="qemu-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147324" comment="qemu-arm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147325" comment="qemu-block-curl-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147326" comment="qemu-block-dmg-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147327" comment="qemu-block-iscsi-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147328" comment="qemu-block-rbd-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147329" comment="qemu-block-ssh-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147330" comment="qemu-extra-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147331" comment="qemu-guest-agent-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147332" comment="qemu-ipxe-1.0.0-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147333" comment="qemu-kvm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147334" comment="qemu-lang-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147335" comment="qemu-linux-user-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147336" comment="qemu-ppc-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147337" comment="qemu-s390-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147338" comment="qemu-seabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147339" comment="qemu-sgabios-8-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147340" comment="qemu-testsuite-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147341" comment="qemu-tools-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147342" comment="qemu-vgabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147343" comment="qemu-x86-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9382</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9382" source="CVE"/>
    <description>
    Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9382.html">CVE-2016-9382</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9382">SUSE bug 1009103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9383</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9383" source="CVE"/>
    <description>
    Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information, cause a denial of service (host crash), or execute arbitrary code on the host by leveraging broken emulation of bit test instructions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9383.html">CVE-2016-9383</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9383">SUSE bug 1009107</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9384</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9384" source="CVE"/>
    <description>
    Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9384.html">CVE-2016-9384</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9384">SUSE bug 1009105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9384">SUSE bug 1009105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9384">SUSE bug 1009105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9384">SUSE bug 1009105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9384">SUSE bug 1009105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9384">SUSE bug 1009105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9384">SUSE bug 1009105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9384">SUSE bug 1009105</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9385</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9385" source="CVE"/>
    <description>
    The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical address checks.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9385.html">CVE-2016-9385</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9385">SUSE bug 1009104</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9386</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9386" source="CVE"/>
    <description>
    The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9386.html">CVE-2016-9386</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9386">SUSE bug 1009100</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9388</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9388" source="CVE"/>
    <description>
    The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9388.html">CVE-2016-9388</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9388">SUSE bug 1010975</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159464" comment="jasper-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159465" comment="libjasper-devel-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159466" comment="libjasper1-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159467" comment="libjasper1-32bit-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9389</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9389" source="CVE"/>
    <description>
    The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9389.html">CVE-2016-9389</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9389">SUSE bug 1010968</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159464" comment="jasper-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159465" comment="libjasper-devel-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159466" comment="libjasper1-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159467" comment="libjasper1-32bit-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9390</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9390" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9390" source="CVE"/>
    <description>
    The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9390.html">CVE-2016-9390</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9390">SUSE bug 1010774</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159464" comment="jasper-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159465" comment="libjasper-devel-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159466" comment="libjasper1-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159467" comment="libjasper1-32bit-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9391</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9391" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9391" source="CVE"/>
    <description>
    The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9391.html">CVE-2016-9391</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9391">SUSE bug 1010782</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159464" comment="jasper-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159465" comment="libjasper-devel-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159466" comment="libjasper1-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159467" comment="libjasper1-32bit-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9392</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9392" source="CVE"/>
    <description>
    The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9392.html">CVE-2016-9392</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9392">SUSE bug 1010757</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159464" comment="jasper-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159465" comment="libjasper-devel-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159466" comment="libjasper1-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159467" comment="libjasper1-32bit-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9393</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9393" source="CVE"/>
    <description>
    The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9393.html">CVE-2016-9393</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9393">SUSE bug 1010766</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159464" comment="jasper-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159465" comment="libjasper-devel-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159466" comment="libjasper1-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159467" comment="libjasper1-32bit-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9394</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9394" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9394" source="CVE"/>
    <description>
    The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9394.html">CVE-2016-9394</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9394">SUSE bug 1010756</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159464" comment="jasper-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159465" comment="libjasper-devel-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159466" comment="libjasper1-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159467" comment="libjasper1-32bit-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9395</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9395" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9395" source="CVE"/>
    <description>
    The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9395.html">CVE-2016-9395</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9395">SUSE bug 1010977</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146872" comment="jasper-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146873" comment="libjasper-devel-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146874" comment="libjasper1-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146875" comment="libjasper1-32bit-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9398</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9398" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9398" source="CVE"/>
    <description>
    The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9398.html">CVE-2016-9398</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9398">SUSE bug 1010979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9398">SUSE bug 1010979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9398">SUSE bug 1010979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9398">SUSE bug 1010979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9398">SUSE bug 1010979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9398">SUSE bug 1010979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9398">SUSE bug 1010979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146872" comment="jasper-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146873" comment="libjasper-devel-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146874" comment="libjasper1-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146875" comment="libjasper1-32bit-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9401</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9401" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9401" source="CVE"/>
    <description>
    popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9401.html">CVE-2016-9401</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9401">SUSE bug 1010845</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156056" comment="bash-4.3-80.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152102" comment="bash is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156057" comment="bash-devel-4.3-80.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152210" comment="bash-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156058" comment="bash-doc-4.3-80.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152103" comment="bash-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156059" comment="bash-lang-4.3-80.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152104" comment="bash-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156060" comment="bash-loadables-4.3-80.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152211" comment="bash-loadables is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156061" comment="libreadline6-6.3-80.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152107" comment="libreadline6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156062" comment="libreadline6-32bit-6.3-80.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152212" comment="libreadline6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156063" comment="readline-devel-6.3-80.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152108" comment="readline-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156064" comment="readline-devel-32bit-6.3-80.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152213" comment="readline-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156065" comment="readline-doc-6.3-80.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152109" comment="readline-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9427</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9427" source="CVE"/>
    <description>
    Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9427.html">CVE-2016-9427</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9427">SUSE bug 1011276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9427">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9427">SUSE bug 1011276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9427">SUSE bug 1011276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9427">SUSE bug 1011276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9427">SUSE bug 1011276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9427">SUSE bug 1011276</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9427">SUSE bug 1011293</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142915" comment="gc-7.2d-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153870" comment="gc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142916" comment="gc-devel-7.2d-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153871" comment="gc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142917" comment="libgc1-7.2d-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151722" comment="libgc1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9434</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9434" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9434" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9434.html">CVE-2016-9434</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9434">SUSE bug 1011283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9434">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9434">SUSE bug 1011283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9434">SUSE bug 1011283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9434">SUSE bug 1011283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9434">SUSE bug 1011283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9434">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9434">SUSE bug 1011283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9434">SUSE bug 1011283</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9435</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9435" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9435" source="CVE"/>
    <description>
    The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to &lt;dd&gt; tags.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9435.html">CVE-2016-9435</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9435">SUSE bug 1011284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9435">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9435">SUSE bug 1011284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9435">SUSE bug 1011284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9435">SUSE bug 1011284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9435">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9435">SUSE bug 1011284</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9435">SUSE bug 1011284</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9436</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9436" source="CVE"/>
    <description>
    parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a &lt;i&gt; tag.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9436.html">CVE-2016-9436</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9436">SUSE bug 1011285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9436">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9436">SUSE bug 1011285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9436">SUSE bug 1011285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9436">SUSE bug 1011285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9436">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9436">SUSE bug 1011285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9436">SUSE bug 1011285</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9437</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9437" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9437" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) and possibly memory corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9437.html">CVE-2016-9437</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9437">SUSE bug 1011286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9437">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9437">SUSE bug 1011286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9437">SUSE bug 1011286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9437">SUSE bug 1011286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9437">SUSE bug 1011286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9437">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9437">SUSE bug 1011286</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9437">SUSE bug 1011286</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9438</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9438" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9438" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9438.html">CVE-2016-9438</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9438">SUSE bug 1011287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9438">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9438">SUSE bug 1011287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9438">SUSE bug 1011287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9438">SUSE bug 1011287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9438">SUSE bug 1011293</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9439</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9439" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9439.html">CVE-2016-9439</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9439">SUSE bug 1011288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9439">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9439">SUSE bug 1011288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9439">SUSE bug 1011288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9439">SUSE bug 1011288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9439">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9439">SUSE bug 1011288</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9439">SUSE bug 1011288</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9440</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9440" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9440.html">CVE-2016-9440</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9440">SUSE bug 1011289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9440">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9440">SUSE bug 1011289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9440">SUSE bug 1011289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9440">SUSE bug 1011289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9440">SUSE bug 1011289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9440">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9440">SUSE bug 1011289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9440">SUSE bug 1011289</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9441</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9441" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9441" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9441.html">CVE-2016-9441</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9441">SUSE bug 1011290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9441">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9441">SUSE bug 1011290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9441">SUSE bug 1011290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9441">SUSE bug 1011290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9441">SUSE bug 1011290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9441">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9441">SUSE bug 1011290</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9441">SUSE bug 1011290</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9442</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9442" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9442" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause memory corruption in certain conditions via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9442.html">CVE-2016-9442</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9442">SUSE bug 1011291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9442">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9442">SUSE bug 1011291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9442">SUSE bug 1011291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9442">SUSE bug 1011291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9442">SUSE bug 1011291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9442">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9442">SUSE bug 1011291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9442">SUSE bug 1011291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9443</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9443" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9443" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9443.html">CVE-2016-9443</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9443">SUSE bug 1011292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9443">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9443">SUSE bug 1011292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9443">SUSE bug 1011292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9443">SUSE bug 1011292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9443">SUSE bug 1011292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9443">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9443">SUSE bug 1011292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9443">SUSE bug 1011292</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9444</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9444" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9444" source="CVE"/>
    <description>
    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9444.html">CVE-2016-9444</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9444">SUSE bug 1018702</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147306" comment="bind-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147307" comment="bind-chrootenv-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147308" comment="bind-devel-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153102" comment="bind-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147309" comment="bind-doc-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147310" comment="bind-libs-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147311" comment="bind-libs-32bit-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153103" comment="bind-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147312" comment="bind-lwresd-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153104" comment="bind-lwresd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147313" comment="bind-utils-9.9.9P1-43.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9445</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9445" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9445" source="CVE"/>
    <description>
    Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9445.html">CVE-2016-9445</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9445">SUSE bug 1010829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146826" comment="gstreamer-0_10-plugins-bad-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152622" comment="gstreamer-0_10-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146827" comment="gstreamer-0_10-plugins-bad-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153873" comment="gstreamer-0_10-plugins-bad-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146828" comment="gstreamer-0_10-plugins-bad-devel-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153874" comment="gstreamer-0_10-plugins-bad-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146829" comment="gstreamer-0_10-plugins-bad-doc-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153875" comment="gstreamer-0_10-plugins-bad-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146830" comment="gstreamer-0_10-plugins-bad-lang-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152623" comment="gstreamer-0_10-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146793" comment="gstreamer-plugins-bad-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153876" comment="gstreamer-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146794" comment="gstreamer-plugins-bad-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153877" comment="gstreamer-plugins-bad-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146795" comment="gstreamer-plugins-bad-devel-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153878" comment="gstreamer-plugins-bad-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146796" comment="gstreamer-plugins-bad-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153879" comment="gstreamer-plugins-bad-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146797" comment="gstreamer-plugins-bad-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153880" comment="gstreamer-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146798" comment="libgstadaptivedemux-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154275" comment="libgstadaptivedemux-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146799" comment="libgstadaptivedemux-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154276" comment="libgstadaptivedemux-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146800" comment="libgstbadaudio-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154277" comment="libgstbadaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146801" comment="libgstbadaudio-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154278" comment="libgstbadaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146802" comment="libgstbadbase-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153881" comment="libgstbadbase-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146803" comment="libgstbadbase-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153882" comment="libgstbadbase-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146804" comment="libgstbadvideo-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153883" comment="libgstbadvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146805" comment="libgstbadvideo-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153884" comment="libgstbadvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146831" comment="libgstbasecamerabinsrc-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152624" comment="libgstbasecamerabinsrc-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146832" comment="libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153885" comment="libgstbasecamerabinsrc-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146806" comment="libgstbasecamerabinsrc-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153886" comment="libgstbasecamerabinsrc-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146807" comment="libgstbasecamerabinsrc-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153887" comment="libgstbasecamerabinsrc-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146833" comment="libgstbasevideo-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152625" comment="libgstbasevideo-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146834" comment="libgstbasevideo-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153888" comment="libgstbasevideo-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146835" comment="libgstcodecparsers-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152626" comment="libgstcodecparsers-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146836" comment="libgstcodecparsers-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153889" comment="libgstcodecparsers-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146808" comment="libgstcodecparsers-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153890" comment="libgstcodecparsers-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146809" comment="libgstcodecparsers-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153891" comment="libgstcodecparsers-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146810" comment="libgstgl-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153892" comment="libgstgl-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146811" comment="libgstgl-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153893" comment="libgstgl-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146812" comment="libgstinsertbin-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153894" comment="libgstinsertbin-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146813" comment="libgstinsertbin-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153895" comment="libgstinsertbin-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146814" comment="libgstmpegts-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153896" comment="libgstmpegts-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146815" comment="libgstmpegts-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153897" comment="libgstmpegts-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146837" comment="libgstphotography-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152627" comment="libgstphotography-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146838" comment="libgstphotography-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153898" comment="libgstphotography-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146816" comment="libgstphotography-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153899" comment="libgstphotography-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146817" comment="libgstphotography-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153900" comment="libgstphotography-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146818" comment="libgstplayer-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154279" comment="libgstplayer-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146819" comment="libgstplayer-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154280" comment="libgstplayer-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146839" comment="libgstsignalprocessor-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152628" comment="libgstsignalprocessor-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146840" comment="libgstsignalprocessor-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153901" comment="libgstsignalprocessor-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146820" comment="libgsturidownloader-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153902" comment="libgsturidownloader-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146821" comment="libgsturidownloader-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153903" comment="libgsturidownloader-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146841" comment="libgstvdp-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152629" comment="libgstvdp-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146842" comment="libgstvdp-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153904" comment="libgstvdp-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146822" comment="libgstvdpau-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154281" comment="libgstvdpau is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146823" comment="libgstvdpau-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154282" comment="libgstvdpau-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146824" comment="libgstwayland-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153905" comment="libgstwayland-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146825" comment="libgstwayland-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153906" comment="libgstwayland-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9446</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9446" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9446" source="CVE"/>
    <description>
    The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9446.html">CVE-2016-9446</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9446">SUSE bug 1010829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146826" comment="gstreamer-0_10-plugins-bad-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152622" comment="gstreamer-0_10-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146827" comment="gstreamer-0_10-plugins-bad-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153873" comment="gstreamer-0_10-plugins-bad-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146828" comment="gstreamer-0_10-plugins-bad-devel-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153874" comment="gstreamer-0_10-plugins-bad-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146829" comment="gstreamer-0_10-plugins-bad-doc-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153875" comment="gstreamer-0_10-plugins-bad-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146830" comment="gstreamer-0_10-plugins-bad-lang-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152623" comment="gstreamer-0_10-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146793" comment="gstreamer-plugins-bad-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153876" comment="gstreamer-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146794" comment="gstreamer-plugins-bad-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153877" comment="gstreamer-plugins-bad-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146795" comment="gstreamer-plugins-bad-devel-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153878" comment="gstreamer-plugins-bad-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146796" comment="gstreamer-plugins-bad-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153879" comment="gstreamer-plugins-bad-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146797" comment="gstreamer-plugins-bad-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153880" comment="gstreamer-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146798" comment="libgstadaptivedemux-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154275" comment="libgstadaptivedemux-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146799" comment="libgstadaptivedemux-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154276" comment="libgstadaptivedemux-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146800" comment="libgstbadaudio-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154277" comment="libgstbadaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146801" comment="libgstbadaudio-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154278" comment="libgstbadaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146802" comment="libgstbadbase-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153881" comment="libgstbadbase-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146803" comment="libgstbadbase-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153882" comment="libgstbadbase-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146804" comment="libgstbadvideo-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153883" comment="libgstbadvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146805" comment="libgstbadvideo-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153884" comment="libgstbadvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146831" comment="libgstbasecamerabinsrc-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152624" comment="libgstbasecamerabinsrc-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146832" comment="libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153885" comment="libgstbasecamerabinsrc-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146806" comment="libgstbasecamerabinsrc-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153886" comment="libgstbasecamerabinsrc-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146807" comment="libgstbasecamerabinsrc-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153887" comment="libgstbasecamerabinsrc-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146833" comment="libgstbasevideo-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152625" comment="libgstbasevideo-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146834" comment="libgstbasevideo-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153888" comment="libgstbasevideo-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146835" comment="libgstcodecparsers-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152626" comment="libgstcodecparsers-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146836" comment="libgstcodecparsers-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153889" comment="libgstcodecparsers-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146808" comment="libgstcodecparsers-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153890" comment="libgstcodecparsers-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146809" comment="libgstcodecparsers-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153891" comment="libgstcodecparsers-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146810" comment="libgstgl-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153892" comment="libgstgl-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146811" comment="libgstgl-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153893" comment="libgstgl-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146812" comment="libgstinsertbin-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153894" comment="libgstinsertbin-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146813" comment="libgstinsertbin-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153895" comment="libgstinsertbin-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146814" comment="libgstmpegts-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153896" comment="libgstmpegts-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146815" comment="libgstmpegts-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153897" comment="libgstmpegts-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146837" comment="libgstphotography-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152627" comment="libgstphotography-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146838" comment="libgstphotography-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153898" comment="libgstphotography-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146816" comment="libgstphotography-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153899" comment="libgstphotography-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146817" comment="libgstphotography-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153900" comment="libgstphotography-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146818" comment="libgstplayer-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154279" comment="libgstplayer-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146819" comment="libgstplayer-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154280" comment="libgstplayer-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146839" comment="libgstsignalprocessor-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152628" comment="libgstsignalprocessor-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146840" comment="libgstsignalprocessor-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153901" comment="libgstsignalprocessor-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146820" comment="libgsturidownloader-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153902" comment="libgsturidownloader-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146821" comment="libgsturidownloader-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153903" comment="libgsturidownloader-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146841" comment="libgstvdp-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152629" comment="libgstvdp-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146842" comment="libgstvdp-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153904" comment="libgstvdp-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146822" comment="libgstvdpau-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154281" comment="libgstvdpau is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146823" comment="libgstvdpau-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154282" comment="libgstvdpau-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146824" comment="libgstwayland-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153905" comment="libgstwayland-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146825" comment="libgstwayland-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153906" comment="libgstwayland-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9447</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9447" source="CVE"/>
    <description>
    The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9447.html">CVE-2016-9447</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9447">SUSE bug 1010514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9447">SUSE bug 1010514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9447">SUSE bug 1010514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9447">SUSE bug 1010514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9447">SUSE bug 1010514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9447">SUSE bug 1010514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9447">SUSE bug 1010514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9447">SUSE bug 1010514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9447">SUSE bug 1010514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9447">SUSE bug 1010514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9447">SUSE bug 1010514</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146826" comment="gstreamer-0_10-plugins-bad-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152622" comment="gstreamer-0_10-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146827" comment="gstreamer-0_10-plugins-bad-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153873" comment="gstreamer-0_10-plugins-bad-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146828" comment="gstreamer-0_10-plugins-bad-devel-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153874" comment="gstreamer-0_10-plugins-bad-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146829" comment="gstreamer-0_10-plugins-bad-doc-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153875" comment="gstreamer-0_10-plugins-bad-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146830" comment="gstreamer-0_10-plugins-bad-lang-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152623" comment="gstreamer-0_10-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146831" comment="libgstbasecamerabinsrc-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152624" comment="libgstbasecamerabinsrc-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146832" comment="libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153885" comment="libgstbasecamerabinsrc-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146833" comment="libgstbasevideo-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152625" comment="libgstbasevideo-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146834" comment="libgstbasevideo-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153888" comment="libgstbasevideo-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146835" comment="libgstcodecparsers-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152626" comment="libgstcodecparsers-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146836" comment="libgstcodecparsers-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153889" comment="libgstcodecparsers-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146837" comment="libgstphotography-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152627" comment="libgstphotography-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146838" comment="libgstphotography-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153898" comment="libgstphotography-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146839" comment="libgstsignalprocessor-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152628" comment="libgstsignalprocessor-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146840" comment="libgstsignalprocessor-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153901" comment="libgstsignalprocessor-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146841" comment="libgstvdp-0_10-23-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152629" comment="libgstvdp-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146842" comment="libgstvdp-0_10-23-32bit-0.10.23-24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153904" comment="libgstvdp-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9448</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9448" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9448" source="CVE"/>
    <description>
    The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9297.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9448.html">CVE-2016-9448</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1010161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9448">SUSE bug 1011103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146600" comment="libtiff-devel-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146601" comment="libtiff-devel-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146602" comment="libtiff5-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146603" comment="libtiff5-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146604" comment="tiff-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9453</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9453" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9453" source="CVE"/>
    <description>
    The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9453.html">CVE-2016-9453</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1007280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9453">SUSE bug 1011107</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146600" comment="libtiff-devel-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146601" comment="libtiff-devel-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146602" comment="libtiff5-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146603" comment="libtiff5-32bit-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146604" comment="tiff-4.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9555</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9555" source="CVE"/>
    <description>
    The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9555.html">CVE-2016-9555</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1011685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9555">SUSE bug 1012183</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9556</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9556" source="CVE"/>
    <description>
    The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9556.html">CVE-2016-9556</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9556">SUSE bug 1011130</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142180" comment="GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142181" comment="GraphicsMagick-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128810" comment="ImageMagick-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128815" comment="ImageMagick-devel-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146409" comment="ImageMagick-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146410" comment="ImageMagick-doc-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146411" comment="ImageMagick-extra-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142182" comment="libGraphicsMagick++-Q16-12-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142183" comment="libGraphicsMagick++-devel-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142184" comment="libGraphicsMagick-Q16-3-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142185" comment="libGraphicsMagick3-config-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142186" comment="libGraphicsMagickWand-Q16-2-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128811" comment="libMagick++-6_Q16-3-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146412" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128816" comment="libMagick++-devel-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146413" comment="libMagick++-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128812" comment="libMagickCore-6_Q16-1-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128813" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128814" comment="libMagickWand-6_Q16-1-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146414" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142187" comment="perl-GraphicsMagick-1.3.25-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128817" comment="perl-PerlMagick-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9559</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9559" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9559" source="CVE"/>
    <description>
    coders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9559.html">CVE-2016-9559</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9559">SUSE bug 1011136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9559">SUSE bug 1011136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9559">SUSE bug 1011136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9559">SUSE bug 1011136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9559">SUSE bug 1011136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9559">SUSE bug 1011136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9559">SUSE bug 1011136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9559">SUSE bug 1011136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9559">SUSE bug 1011136</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128810" comment="ImageMagick-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128815" comment="ImageMagick-devel-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146409" comment="ImageMagick-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146410" comment="ImageMagick-doc-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146411" comment="ImageMagick-extra-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128811" comment="libMagick++-6_Q16-3-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146412" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128816" comment="libMagick++-devel-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146413" comment="libMagick++-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128812" comment="libMagickCore-6_Q16-1-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128813" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128814" comment="libMagickWand-6_Q16-1-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146414" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128817" comment="perl-PerlMagick-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169560" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9560</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9560" source="CVE"/>
    <description>
    Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9560.html">CVE-2016-9560</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9560">SUSE bug 1011830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9560">SUSE bug 1011830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9560">SUSE bug 1011830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9560">SUSE bug 1011830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9560">SUSE bug 1011830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9560">SUSE bug 1011830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9560">SUSE bug 1011830</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146872" comment="jasper-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146873" comment="libjasper-devel-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146874" comment="libjasper1-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146875" comment="libjasper1-32bit-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9561</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9561" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9561" source="CVE"/>
    <description>
    The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service (allocation of huge memory, and being killed by the OS) via a crafted MOV file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9561.html">CVE-2016-9561</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9561">SUSE bug 1015120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9561">SUSE bug 1015120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9561">SUSE bug 1015120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9561">SUSE bug 1015120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9561">SUSE bug 1015120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9561">SUSE bug 1015120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9561">SUSE bug 1015120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9561">SUSE bug 1015120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9561">SUSE bug 1015120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9561">SUSE bug 1015120</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156206" comment="ffmpeg2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156207" comment="ffmpeg2-devel-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156208" comment="libavcodec56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156209" comment="libavcodec56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156210" comment="libavdevice56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156211" comment="libavdevice56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156212" comment="libavfilter5-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156213" comment="libavfilter5-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156214" comment="libavformat56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156215" comment="libavformat56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156216" comment="libavresample2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156217" comment="libavresample2-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156218" comment="libavutil54-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156219" comment="libavutil54-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156220" comment="libpostproc53-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156221" comment="libpostproc53-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156222" comment="libswresample1-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156223" comment="libswresample1-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156224" comment="libswscale3-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156225" comment="libswscale3-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169566" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9566</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9566" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9566" source="CVE"/>
    <description>
    base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file.  NOTE: this can be leveraged by remote attackers using CVE-2016-9565.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9566.html">CVE-2016-9566</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9566">SUSE bug 1014637</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147097" comment="icinga-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153105" comment="icinga is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147098" comment="icinga-devel-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153106" comment="icinga-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147099" comment="icinga-doc-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153107" comment="icinga-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147100" comment="icinga-idoutils-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153108" comment="icinga-idoutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147101" comment="icinga-idoutils-mysql-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153109" comment="icinga-idoutils-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147102" comment="icinga-idoutils-oracle-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153110" comment="icinga-idoutils-oracle is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147103" comment="icinga-idoutils-pgsql-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153111" comment="icinga-idoutils-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147104" comment="icinga-plugins-downtimes-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153112" comment="icinga-plugins-downtimes is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147105" comment="icinga-plugins-eventhandlers-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153113" comment="icinga-plugins-eventhandlers is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147106" comment="icinga-www-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153114" comment="icinga-www is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147107" comment="icinga-www-config-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153115" comment="icinga-www-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147108" comment="monitoring-tools-1.14.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151784" comment="monitoring-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9572</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9572" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9572.html">CVE-2016-9572</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9572">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9573</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9573" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9573" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9573.html">CVE-2016-9573</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1014543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9573">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169574" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9574</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9574" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9574" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9574.html">CVE-2016-9574</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9574">SUSE bug 1015499</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154645" comment="java-1_8_0-openjdk-1.8.0.121-10.2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154646" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-10.2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154647" comment="java-1_8_0-openjdk-demo-1.8.0.121-10.2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154648" comment="java-1_8_0-openjdk-devel-1.8.0.121-10.2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154649" comment="java-1_8_0-openjdk-headless-1.8.0.121-10.2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154650" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-10.2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154651" comment="java-1_8_0-openjdk-src-1.8.0.121-10.2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154652" comment="libfreebl3-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154653" comment="libfreebl3-32bit-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154654" comment="libsoftokn3-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154655" comment="libsoftokn3-32bit-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154656" comment="mozilla-nss-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154657" comment="mozilla-nss-32bit-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154658" comment="mozilla-nss-certs-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154659" comment="mozilla-nss-certs-32bit-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154660" comment="mozilla-nss-devel-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154661" comment="mozilla-nss-sysinit-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154662" comment="mozilla-nss-sysinit-32bit-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154663" comment="mozilla-nss-tools-3.28.4-40.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9576</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9576" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9576" source="CVE"/>
    <description>
    The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9576.html">CVE-2016-9576</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019668</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1017710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1019079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1014271</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9576">SUSE bug 1013604</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142601" comment="kernel-debug-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142602" comment="kernel-debug-base-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142603" comment="kernel-debug-devel-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142604" comment="kernel-default-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142605" comment="kernel-default-base-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142606" comment="kernel-default-devel-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142607" comment="kernel-devel-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142608" comment="kernel-docs-4.4.36-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142609" comment="kernel-docs-html-4.4.36-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142610" comment="kernel-docs-pdf-4.4.36-8.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142611" comment="kernel-macros-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142612" comment="kernel-obs-build-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142613" comment="kernel-obs-qa-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142614" comment="kernel-source-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142615" comment="kernel-source-vanilla-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142616" comment="kernel-syms-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142617" comment="kernel-vanilla-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142618" comment="kernel-vanilla-base-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142619" comment="kernel-vanilla-devel-4.4.36-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9577</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9577" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9577" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9577.html">CVE-2016-9577</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9577">SUSE bug 1023078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9577">SUSE bug 1023078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9577">SUSE bug 1023078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9577">SUSE bug 1023078</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148257" comment="libspice-server-devel-0.12.7-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153281" comment="libspice-server-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148258" comment="libspice-server1-0.12.7-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148259" comment="spice-0.12.7-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153282" comment="spice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148260" comment="spice-client-0.12.7-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153283" comment="spice-client is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9578</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9578" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9578.html">CVE-2016-9578</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9578">SUSE bug 1023079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9578">SUSE bug 1023078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9578">SUSE bug 1023079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9578">SUSE bug 1023078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9578">SUSE bug 1023079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9578">SUSE bug 1023079</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148257" comment="libspice-server-devel-0.12.7-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153281" comment="libspice-server-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148258" comment="libspice-server1-0.12.7-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148259" comment="spice-0.12.7-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153282" comment="spice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148260" comment="spice-client-0.12.7-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153283" comment="spice-client is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9579</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9579" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9579" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9579.html">CVE-2016-9579</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9579">SUSE bug 1014986</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150551" comment="ceph-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154227" comment="ceph is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150552" comment="ceph-base-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154228" comment="ceph-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150553" comment="ceph-common-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154229" comment="ceph-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150554" comment="ceph-fuse-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154230" comment="ceph-fuse is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150555" comment="ceph-mds-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154231" comment="ceph-mds is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150556" comment="ceph-mon-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154232" comment="ceph-mon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150557" comment="ceph-osd-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154233" comment="ceph-osd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150558" comment="ceph-radosgw-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154234" comment="ceph-radosgw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150559" comment="ceph-resource-agents-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154235" comment="ceph-resource-agents is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150560" comment="ceph-test-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154236" comment="ceph-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150561" comment="libcephfs-devel-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154237" comment="libcephfs-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150562" comment="libcephfs1-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154238" comment="libcephfs1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150563" comment="librados-devel-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154239" comment="librados-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150564" comment="librados2-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154240" comment="librados2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150565" comment="libradosstriper-devel-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154241" comment="libradosstriper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150566" comment="libradosstriper1-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154242" comment="libradosstriper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150567" comment="librbd-devel-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154243" comment="librbd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150568" comment="librbd1-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154244" comment="librbd1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150569" comment="librgw-devel-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154245" comment="librgw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150570" comment="librgw2-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154246" comment="librgw2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150571" comment="python-ceph-compat-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154247" comment="python-ceph-compat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150572" comment="python-cephfs-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154248" comment="python-cephfs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150573" comment="python-rados-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154249" comment="python-rados is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150574" comment="python-rbd-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154250" comment="python-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150575" comment="rbd-fuse-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154251" comment="rbd-fuse is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150576" comment="rbd-mirror-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154252" comment="rbd-mirror is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150577" comment="rbd-nbd-10.2.6+git.1489493035.3ad7a68-6.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154253" comment="rbd-nbd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169580" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9580</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9580" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9580" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9580.html">CVE-2016-9580</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9580">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9581</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9581" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9581" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9581.html">CVE-2016-9581</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1007739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1007744</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1014975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9581">SUSE bug 1015662</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147198" comment="libopenjp2-7-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147199" comment="libopenjp2-7-32bit-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147200" comment="openjpeg2-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147201" comment="openjpeg2-devel-2.1.0-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9583</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9583" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9583.html">CVE-2016-9583</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9583">SUSE bug 1015400</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154502" comment="jasper-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154503" comment="libjasper-devel-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154504" comment="libjasper1-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154505" comment="libjasper1-32bit-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9584</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9584" source="CVE"/>
    <description>
    libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9584.html">CVE-2016-9584</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9584">SUSE bug 1015964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159577" comment="libical-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159578" comment="libical is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159579" comment="libical-devel-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159580" comment="libical-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159581" comment="libical-devel-static-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159582" comment="libical-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159583" comment="libical-doc-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159584" comment="libical-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159585" comment="libical1-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159586" comment="libical1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159587" comment="libical1-32bit-1.0.1-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159588" comment="libical1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9586</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9586" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9586" source="CVE"/>
    <description>
    curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9586.html">CVE-2016-9586</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1016653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1016653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9586">SUSE bug 1015332</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154735" comment="curl-7.37.0-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154736" comment="libcurl-devel-7.37.0-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154737" comment="libcurl-devel-32bit-7.37.0-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153284" comment="libcurl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154738" comment="libcurl4-7.37.0-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154739" comment="libcurl4-32bit-7.37.0-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9587</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9587" source="CVE"/>
    <description>
    Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9587.html">CVE-2016-9587</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9587">SUSE bug 1019021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9587">SUSE bug 1019021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9587">SUSE bug 1019021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9587">SUSE bug 1019021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9587">SUSE bug 1019021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9587">SUSE bug 1019021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9587">SUSE bug 1019021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9587">SUSE bug 1019021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9587">SUSE bug 1019021</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166856" comment="ansible-2.4.1.0-2.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9591</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9591" source="CVE"/>
    <description>
    JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9591.html">CVE-2016-9591</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9591">SUSE bug 1015993</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146872" comment="jasper-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146873" comment="libjasper-devel-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146874" comment="libjasper1-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146875" comment="libjasper1-32bit-1.900.14-170.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9597</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9597" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9597.html">CVE-2016-9597</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1014873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9597">SUSE bug 1017497</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148333" comment="libxml2-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148334" comment="libxml2-2-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148335" comment="libxml2-2-32bit-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148336" comment="libxml2-devel-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148337" comment="libxml2-devel-32bit-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148338" comment="libxml2-doc-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148339" comment="libxml2-tools-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148340" comment="python-libxml2-2.9.4-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9600" source="CVE"/>
    <description>
    JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9600.html">CVE-2016-9600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9600">SUSE bug 1018088</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154502" comment="jasper-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154503" comment="libjasper-devel-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154504" comment="libjasper1-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154505" comment="libjasper1-32bit-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9601</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9601" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9601" source="CVE"/>
    <description>
    ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_image function which is used to decode halftone segments in a JBIG2 image. A document (PostScript or PDF) with an embedded, specially crafted, jbig2 image could trigger a segmentation fault in ghostscript.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9601.html">CVE-2016-9601</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9601">SUSE bug 1018128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9601">SUSE bug 1018128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9601">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9601">SUSE bug 1018128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9601">SUSE bug 1018128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9601">SUSE bug 1018128</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155158" comment="ghostscript-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155159" comment="ghostscript-devel-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151934" comment="ghostscript-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155160" comment="ghostscript-mini-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151935" comment="ghostscript-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155161" comment="ghostscript-mini-devel-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151936" comment="ghostscript-mini-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155162" comment="ghostscript-x11-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9602</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9602" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9602" source="CVE"/>
    <description>
    Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9602.html">CVE-2016-9602</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9602">SUSE bug 1020427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9602">SUSE bug 1020427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9602">SUSE bug 1020427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9602">SUSE bug 1020427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9602">SUSE bug 1020427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9602">SUSE bug 1020427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9602">SUSE bug 1020427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9602">SUSE bug 1020427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9602">SUSE bug 1020427</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169603" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9603</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9603" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9603" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9603.html">CVE-2016-9603</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9603">SUSE bug 1028656</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163455" comment="xen-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163456" comment="xen-devel-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163457" comment="xen-doc-html-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163458" comment="xen-libs-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163459" comment="xen-libs-32bit-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163460" comment="xen-tools-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163461" comment="xen-tools-domU-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169621" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9621</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9621" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9621" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9429.  Reason: This candidate is a reservation duplicate of CVE-2016-9429.  Notes: All CVE users should reference CVE-2016-9429 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9621.html">CVE-2016-9621</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9621">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9621">SUSE bug 1012020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9621">SUSE bug 1011278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9621">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9621">SUSE bug 1012020</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9622</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9622" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9622" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9622.html">CVE-2016-9622</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9622">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9622">SUSE bug 1012021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9622">SUSE bug 1012021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9622">SUSE bug 1012021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9622">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9622">SUSE bug 1012021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9622">SUSE bug 1012021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9622">SUSE bug 1012021</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169623" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9623</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9623" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9623" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9623.html">CVE-2016-9623</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9623">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9623">SUSE bug 1012022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9623">SUSE bug 1012022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9623">SUSE bug 1012022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9623">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9623">SUSE bug 1012022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9623">SUSE bug 1012022</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9623">SUSE bug 1012022</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9624</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9624" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9624.html">CVE-2016-9624</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9624">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9624">SUSE bug 1012023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9624">SUSE bug 1012023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9624">SUSE bug 1012023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9624">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9624">SUSE bug 1012023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9624">SUSE bug 1012023</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9624">SUSE bug 1012023</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9625</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9625" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9625.html">CVE-2016-9625</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9625">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9625">SUSE bug 1012024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9625">SUSE bug 1012024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9625">SUSE bug 1012024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9625">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9625">SUSE bug 1012024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9625">SUSE bug 1012024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9625">SUSE bug 1012024</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9626</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9626" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9626.html">CVE-2016-9626</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9626">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9626">SUSE bug 1012025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9626">SUSE bug 1012025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9626">SUSE bug 1012025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9626">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9626">SUSE bug 1012025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9626">SUSE bug 1012025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9626">SUSE bug 1012025</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9627</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9627" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9627" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (heap buffer overflow and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9627.html">CVE-2016-9627</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9627">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9627">SUSE bug 1012026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9627">SUSE bug 1012026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9627">SUSE bug 1012026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9627">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9627">SUSE bug 1012026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9627">SUSE bug 1012026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9627">SUSE bug 1012026</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9628</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9628" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9628" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9628.html">CVE-2016-9628</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9628">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9628">SUSE bug 1012027</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9628">SUSE bug 1012027</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9628">SUSE bug 1012027</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9628">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9628">SUSE bug 1012027</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9628">SUSE bug 1012027</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9628">SUSE bug 1012027</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169629" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9629</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9629" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9629" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9629.html">CVE-2016-9629</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9629">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9629">SUSE bug 1012028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9629">SUSE bug 1012028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9629">SUSE bug 1012028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9629">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9629">SUSE bug 1012028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9629">SUSE bug 1012028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9629">SUSE bug 1012028</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169630" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9630</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9630" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9630" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9630.html">CVE-2016-9630</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9630">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9630">SUSE bug 1012029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9630">SUSE bug 1012029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9630">SUSE bug 1012029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9630">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9630">SUSE bug 1012029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9630">SUSE bug 1012029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9630">SUSE bug 1012029</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169631" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9631</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9631" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9631" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9631.html">CVE-2016-9631</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9631">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9631">SUSE bug 1012030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9631">SUSE bug 1012030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9631">SUSE bug 1012030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9631">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9631">SUSE bug 1012030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9631">SUSE bug 1012030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9631">SUSE bug 1012030</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9632</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9632" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9632.html">CVE-2016-9632</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9632">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9632">SUSE bug 1012031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9632">SUSE bug 1012031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9632">SUSE bug 1012031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9632">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9632">SUSE bug 1012031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9632">SUSE bug 1012031</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9632">SUSE bug 1012031</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9633</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9633" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9633" source="CVE"/>
    <description>
    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (infinite loop and resource consumption) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9633.html">CVE-2016-9633</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9633">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9633">SUSE bug 1012032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9633">SUSE bug 1012032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9633">SUSE bug 1012032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9633">SUSE bug 1011293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9633">SUSE bug 1012032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9633">SUSE bug 1012032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9633">SUSE bug 1012032</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136644" comment="w3m-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151419" comment="w3m is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142914" comment="w3m-inline-image-0.5.3.git20161120-160.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153872" comment="w3m-inline-image is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9634</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9634" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9634" source="CVE"/>
    <description>
    Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9634.html">CVE-2016-9634</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9634">SUSE bug 1012104</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150398" comment="gstreamer-0_10-plugin-esd-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153907" comment="gstreamer-0_10-plugin-esd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150399" comment="gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153908" comment="gstreamer-0_10-plugin-esd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150400" comment="gstreamer-0_10-plugins-good-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153909" comment="gstreamer-0_10-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150401" comment="gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153910" comment="gstreamer-0_10-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150402" comment="gstreamer-0_10-plugins-good-doc-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153911" comment="gstreamer-0_10-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150403" comment="gstreamer-0_10-plugins-good-extra-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153912" comment="gstreamer-0_10-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150404" comment="gstreamer-0_10-plugins-good-extra-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153913" comment="gstreamer-0_10-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150405" comment="gstreamer-0_10-plugins-good-lang-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153914" comment="gstreamer-0_10-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146843" comment="gstreamer-plugins-good-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146844" comment="gstreamer-plugins-good-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153916" comment="gstreamer-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146845" comment="gstreamer-plugins-good-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153917" comment="gstreamer-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146846" comment="gstreamer-plugins-good-extra-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153918" comment="gstreamer-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146847" comment="gstreamer-plugins-good-extra-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153919" comment="gstreamer-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146848" comment="gstreamer-plugins-good-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9635</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9635" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9635" source="CVE"/>
    <description>
    Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9635.html">CVE-2016-9635</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9635">SUSE bug 1012104</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150398" comment="gstreamer-0_10-plugin-esd-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153907" comment="gstreamer-0_10-plugin-esd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150399" comment="gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153908" comment="gstreamer-0_10-plugin-esd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150400" comment="gstreamer-0_10-plugins-good-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153909" comment="gstreamer-0_10-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150401" comment="gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153910" comment="gstreamer-0_10-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150402" comment="gstreamer-0_10-plugins-good-doc-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153911" comment="gstreamer-0_10-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150403" comment="gstreamer-0_10-plugins-good-extra-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153912" comment="gstreamer-0_10-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150404" comment="gstreamer-0_10-plugins-good-extra-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153913" comment="gstreamer-0_10-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150405" comment="gstreamer-0_10-plugins-good-lang-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153914" comment="gstreamer-0_10-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146843" comment="gstreamer-plugins-good-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146844" comment="gstreamer-plugins-good-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153916" comment="gstreamer-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146845" comment="gstreamer-plugins-good-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153917" comment="gstreamer-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146846" comment="gstreamer-plugins-good-extra-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153918" comment="gstreamer-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146847" comment="gstreamer-plugins-good-extra-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153919" comment="gstreamer-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146848" comment="gstreamer-plugins-good-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9636</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9636" source="CVE"/>
    <description>
    Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9636.html">CVE-2016-9636</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9636">SUSE bug 1012104</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150398" comment="gstreamer-0_10-plugin-esd-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153907" comment="gstreamer-0_10-plugin-esd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150399" comment="gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153908" comment="gstreamer-0_10-plugin-esd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150400" comment="gstreamer-0_10-plugins-good-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153909" comment="gstreamer-0_10-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150401" comment="gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153910" comment="gstreamer-0_10-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150402" comment="gstreamer-0_10-plugins-good-doc-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153911" comment="gstreamer-0_10-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150403" comment="gstreamer-0_10-plugins-good-extra-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153912" comment="gstreamer-0_10-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150404" comment="gstreamer-0_10-plugins-good-extra-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153913" comment="gstreamer-0_10-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150405" comment="gstreamer-0_10-plugins-good-lang-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153914" comment="gstreamer-0_10-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146843" comment="gstreamer-plugins-good-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146844" comment="gstreamer-plugins-good-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153916" comment="gstreamer-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146845" comment="gstreamer-plugins-good-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153917" comment="gstreamer-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146846" comment="gstreamer-plugins-good-extra-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153918" comment="gstreamer-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146847" comment="gstreamer-plugins-good-extra-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153919" comment="gstreamer-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146848" comment="gstreamer-plugins-good-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169637" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9637</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9637" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9637" source="CVE"/>
    <description>
    The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9637.html">CVE-2016-9637</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9637">SUSE bug 1011652</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142934" comment="xen-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142935" comment="xen-devel-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142936" comment="xen-doc-html-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142937" comment="xen-libs-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142938" comment="xen-libs-32bit-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142939" comment="xen-tools-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142940" comment="xen-tools-domU-4.7.1_02-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169650" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9650</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9650" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9650" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9650.html">CVE-2016-9650</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9650">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9651</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9651" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9651" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9651.html">CVE-2016-9651</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9651">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9652</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9652" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9652.html">CVE-2016-9652</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9652">SUSE bug 1013236</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142894" comment="chromedriver-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009142895" comment="chromium-55.0.2883.75-99.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9773</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9773" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9773" source="CVE"/>
    <description>
    Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9773.html">CVE-2016-9773</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1017421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1011130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9773">SUSE bug 1013376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128810" comment="ImageMagick-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128815" comment="ImageMagick-devel-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146409" comment="ImageMagick-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146410" comment="ImageMagick-doc-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146411" comment="ImageMagick-extra-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128811" comment="libMagick++-6_Q16-3-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146412" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128816" comment="libMagick++-devel-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146413" comment="libMagick++-devel-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128812" comment="libMagickCore-6_Q16-1-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128813" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128814" comment="libMagickWand-6_Q16-1-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146414" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009128817" comment="perl-PerlMagick-6.8.8.1-25.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9776</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9776" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9776.html">CVE-2016-9776</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1024182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1024182</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9776">SUSE bug 1013285</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147323" comment="qemu-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147324" comment="qemu-arm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147325" comment="qemu-block-curl-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147326" comment="qemu-block-dmg-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147327" comment="qemu-block-iscsi-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147328" comment="qemu-block-rbd-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147329" comment="qemu-block-ssh-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147330" comment="qemu-extra-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147331" comment="qemu-guest-agent-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147332" comment="qemu-ipxe-1.0.0-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147333" comment="qemu-kvm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147334" comment="qemu-lang-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147335" comment="qemu-linux-user-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147336" comment="qemu-ppc-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147337" comment="qemu-s390-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147338" comment="qemu-seabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147339" comment="qemu-sgabios-8-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147340" comment="qemu-testsuite-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147341" comment="qemu-tools-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147342" comment="qemu-vgabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147343" comment="qemu-x86-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9793</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9793" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9793" source="CVE"/>
    <description>
    The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9793.html">CVE-2016-9793</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9793">SUSE bug 1013531</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148375" comment="kernel-debug-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148376" comment="kernel-debug-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148377" comment="kernel-debug-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148378" comment="kernel-default-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148379" comment="kernel-default-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148380" comment="kernel-default-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148381" comment="kernel-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148382" comment="kernel-docs-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148383" comment="kernel-docs-html-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148384" comment="kernel-docs-pdf-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148385" comment="kernel-macros-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148386" comment="kernel-obs-build-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148387" comment="kernel-obs-qa-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148388" comment="kernel-source-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148389" comment="kernel-source-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148390" comment="kernel-syms-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148391" comment="kernel-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148392" comment="kernel-vanilla-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148393" comment="kernel-vanilla-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169794" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9794</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9794" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9794" source="CVE"/>
    <description>
    Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted SNDRV_PCM_TRIGGER_START command.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9794.html">CVE-2016-9794</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013604</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9794">SUSE bug 1013543</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136889" comment="kernel-debug-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136890" comment="kernel-debug-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136891" comment="kernel-debug-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136892" comment="kernel-default-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136893" comment="kernel-default-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136894" comment="kernel-default-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136895" comment="kernel-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136896" comment="kernel-docs-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136897" comment="kernel-docs-html-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136898" comment="kernel-docs-pdf-4.4.36-5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136899" comment="kernel-macros-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136900" comment="kernel-obs-build-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136901" comment="kernel-obs-qa-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136902" comment="kernel-source-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136903" comment="kernel-source-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136904" comment="kernel-syms-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136905" comment="kernel-vanilla-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136906" comment="kernel-vanilla-base-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009136907" comment="kernel-vanilla-devel-4.4.36-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9806</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9806" source="CVE"/>
    <description>
    Race condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel before 4.6.3 allows local users to cause a denial of service (double free) or possibly have unspecified other impact via a crafted application that makes sendmsg system calls, leading to a free operation associated with a new dump that started earlier than anticipated.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9806.html">CVE-2016-9806</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1013540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9806">SUSE bug 1017589</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148375" comment="kernel-debug-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148376" comment="kernel-debug-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148377" comment="kernel-debug-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148378" comment="kernel-default-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148379" comment="kernel-default-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148380" comment="kernel-default-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148381" comment="kernel-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148382" comment="kernel-docs-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148383" comment="kernel-docs-html-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148384" comment="kernel-docs-pdf-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148385" comment="kernel-macros-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148386" comment="kernel-obs-build-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148387" comment="kernel-obs-qa-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148388" comment="kernel-source-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148389" comment="kernel-source-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148390" comment="kernel-syms-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148391" comment="kernel-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148392" comment="kernel-vanilla-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148393" comment="kernel-vanilla-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9807</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9807" source="CVE"/>
    <description>
    The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted FLIC file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9807.html">CVE-2016-9807</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9807">SUSE bug 1013655</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150398" comment="gstreamer-0_10-plugin-esd-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153907" comment="gstreamer-0_10-plugin-esd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150399" comment="gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153908" comment="gstreamer-0_10-plugin-esd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150400" comment="gstreamer-0_10-plugins-good-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153909" comment="gstreamer-0_10-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150401" comment="gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153910" comment="gstreamer-0_10-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150402" comment="gstreamer-0_10-plugins-good-doc-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153911" comment="gstreamer-0_10-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150403" comment="gstreamer-0_10-plugins-good-extra-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153912" comment="gstreamer-0_10-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150404" comment="gstreamer-0_10-plugins-good-extra-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153913" comment="gstreamer-0_10-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150405" comment="gstreamer-0_10-plugins-good-lang-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153914" comment="gstreamer-0_10-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146843" comment="gstreamer-plugins-good-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146844" comment="gstreamer-plugins-good-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153916" comment="gstreamer-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146845" comment="gstreamer-plugins-good-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153917" comment="gstreamer-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146846" comment="gstreamer-plugins-good-extra-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153918" comment="gstreamer-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146847" comment="gstreamer-plugins-good-extra-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153919" comment="gstreamer-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146848" comment="gstreamer-plugins-good-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169808" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9808</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9808" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9808" source="CVE"/>
    <description>
    The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9808.html">CVE-2016-9808</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1012104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9808">SUSE bug 1013653</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150398" comment="gstreamer-0_10-plugin-esd-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153907" comment="gstreamer-0_10-plugin-esd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150399" comment="gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153908" comment="gstreamer-0_10-plugin-esd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150400" comment="gstreamer-0_10-plugins-good-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153909" comment="gstreamer-0_10-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150401" comment="gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153910" comment="gstreamer-0_10-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150402" comment="gstreamer-0_10-plugins-good-doc-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153911" comment="gstreamer-0_10-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150403" comment="gstreamer-0_10-plugins-good-extra-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153912" comment="gstreamer-0_10-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150404" comment="gstreamer-0_10-plugins-good-extra-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153913" comment="gstreamer-0_10-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150405" comment="gstreamer-0_10-plugins-good-lang-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153914" comment="gstreamer-0_10-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146843" comment="gstreamer-plugins-good-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146844" comment="gstreamer-plugins-good-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153916" comment="gstreamer-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146845" comment="gstreamer-plugins-good-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153917" comment="gstreamer-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146846" comment="gstreamer-plugins-good-extra-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153918" comment="gstreamer-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146847" comment="gstreamer-plugins-good-extra-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153919" comment="gstreamer-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146848" comment="gstreamer-plugins-good-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9809</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9809" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9809" source="CVE"/>
    <description>
    Off-by-one error in the gst_h264_parse_set_caps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9809.html">CVE-2016-9809</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9809">SUSE bug 1013659</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148117" comment="gstreamer-0_10-plugins-bad-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152622" comment="gstreamer-0_10-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148118" comment="gstreamer-0_10-plugins-bad-32bit-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153873" comment="gstreamer-0_10-plugins-bad-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148119" comment="gstreamer-0_10-plugins-bad-devel-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153874" comment="gstreamer-0_10-plugins-bad-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148120" comment="gstreamer-0_10-plugins-bad-doc-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153875" comment="gstreamer-0_10-plugins-bad-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148121" comment="gstreamer-0_10-plugins-bad-lang-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152623" comment="gstreamer-0_10-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146793" comment="gstreamer-plugins-bad-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153876" comment="gstreamer-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146794" comment="gstreamer-plugins-bad-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153877" comment="gstreamer-plugins-bad-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146795" comment="gstreamer-plugins-bad-devel-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153878" comment="gstreamer-plugins-bad-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146796" comment="gstreamer-plugins-bad-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153879" comment="gstreamer-plugins-bad-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146797" comment="gstreamer-plugins-bad-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153880" comment="gstreamer-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146798" comment="libgstadaptivedemux-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154275" comment="libgstadaptivedemux-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146799" comment="libgstadaptivedemux-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154276" comment="libgstadaptivedemux-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146800" comment="libgstbadaudio-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154277" comment="libgstbadaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146801" comment="libgstbadaudio-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154278" comment="libgstbadaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146802" comment="libgstbadbase-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153881" comment="libgstbadbase-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146803" comment="libgstbadbase-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153882" comment="libgstbadbase-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146804" comment="libgstbadvideo-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153883" comment="libgstbadvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146805" comment="libgstbadvideo-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153884" comment="libgstbadvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148122" comment="libgstbasecamerabinsrc-0_10-23-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152624" comment="libgstbasecamerabinsrc-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148123" comment="libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153885" comment="libgstbasecamerabinsrc-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146806" comment="libgstbasecamerabinsrc-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153886" comment="libgstbasecamerabinsrc-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146807" comment="libgstbasecamerabinsrc-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153887" comment="libgstbasecamerabinsrc-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148124" comment="libgstbasevideo-0_10-23-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152625" comment="libgstbasevideo-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148125" comment="libgstbasevideo-0_10-23-32bit-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153888" comment="libgstbasevideo-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148126" comment="libgstcodecparsers-0_10-23-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152626" comment="libgstcodecparsers-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148127" comment="libgstcodecparsers-0_10-23-32bit-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153889" comment="libgstcodecparsers-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146808" comment="libgstcodecparsers-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153890" comment="libgstcodecparsers-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146809" comment="libgstcodecparsers-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153891" comment="libgstcodecparsers-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146810" comment="libgstgl-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153892" comment="libgstgl-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146811" comment="libgstgl-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153893" comment="libgstgl-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146812" comment="libgstinsertbin-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153894" comment="libgstinsertbin-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146813" comment="libgstinsertbin-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153895" comment="libgstinsertbin-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146814" comment="libgstmpegts-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153896" comment="libgstmpegts-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146815" comment="libgstmpegts-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153897" comment="libgstmpegts-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148128" comment="libgstphotography-0_10-23-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152627" comment="libgstphotography-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148129" comment="libgstphotography-0_10-23-32bit-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153898" comment="libgstphotography-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146816" comment="libgstphotography-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153899" comment="libgstphotography-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146817" comment="libgstphotography-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153900" comment="libgstphotography-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146818" comment="libgstplayer-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154279" comment="libgstplayer-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146819" comment="libgstplayer-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154280" comment="libgstplayer-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148130" comment="libgstsignalprocessor-0_10-23-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152628" comment="libgstsignalprocessor-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148131" comment="libgstsignalprocessor-0_10-23-32bit-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153901" comment="libgstsignalprocessor-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146820" comment="libgsturidownloader-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153902" comment="libgsturidownloader-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146821" comment="libgsturidownloader-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153903" comment="libgsturidownloader-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148132" comment="libgstvdp-0_10-23-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152629" comment="libgstvdp-0_10-23 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148133" comment="libgstvdp-0_10-23-32bit-0.10.23-27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153904" comment="libgstvdp-0_10-23-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146822" comment="libgstvdpau-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154281" comment="libgstvdpau is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146823" comment="libgstvdpau-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154282" comment="libgstvdpau-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146824" comment="libgstwayland-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153905" comment="libgstwayland-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146825" comment="libgstwayland-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153906" comment="libgstwayland-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9810</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9810" source="CVE"/>
    <description>
    The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via an invalid file, which triggers an incorrect unref call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9810.html">CVE-2016-9810</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9810">SUSE bug 1013663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150398" comment="gstreamer-0_10-plugin-esd-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153907" comment="gstreamer-0_10-plugin-esd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150399" comment="gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153908" comment="gstreamer-0_10-plugin-esd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150400" comment="gstreamer-0_10-plugins-good-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153909" comment="gstreamer-0_10-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150401" comment="gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153910" comment="gstreamer-0_10-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150402" comment="gstreamer-0_10-plugins-good-doc-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153911" comment="gstreamer-0_10-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150403" comment="gstreamer-0_10-plugins-good-extra-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153912" comment="gstreamer-0_10-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150404" comment="gstreamer-0_10-plugins-good-extra-32bit-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153913" comment="gstreamer-0_10-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150405" comment="gstreamer-0_10-plugins-good-lang-0.10.31-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153914" comment="gstreamer-0_10-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146843" comment="gstreamer-plugins-good-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146844" comment="gstreamer-plugins-good-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153916" comment="gstreamer-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146845" comment="gstreamer-plugins-good-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153917" comment="gstreamer-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146846" comment="gstreamer-plugins-good-extra-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153918" comment="gstreamer-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146847" comment="gstreamer-plugins-good-extra-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153919" comment="gstreamer-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146848" comment="gstreamer-plugins-good-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169811" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9811</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9811" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9811" source="CVE"/>
    <description>
    The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9811.html">CVE-2016-9811</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9811">SUSE bug 1013669</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147885" comment="gstreamer-plugins-base-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153927" comment="gstreamer-plugins-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147886" comment="gstreamer-plugins-base-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153928" comment="gstreamer-plugins-base-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147887" comment="gstreamer-plugins-base-devel-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153929" comment="gstreamer-plugins-base-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147888" comment="gstreamer-plugins-base-devel-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154283" comment="gstreamer-plugins-base-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147889" comment="gstreamer-plugins-base-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153930" comment="gstreamer-plugins-base-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147890" comment="gstreamer-plugins-base-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153931" comment="gstreamer-plugins-base-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147891" comment="libgstallocators-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153932" comment="libgstallocators-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147892" comment="libgstallocators-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153933" comment="libgstallocators-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147893" comment="libgstapp-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153936" comment="libgstapp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147894" comment="libgstapp-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153937" comment="libgstapp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147895" comment="libgstaudio-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153938" comment="libgstaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147896" comment="libgstaudio-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153939" comment="libgstaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147897" comment="libgstfft-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153940" comment="libgstfft-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147898" comment="libgstfft-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153941" comment="libgstfft-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147899" comment="libgstpbutils-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153944" comment="libgstpbutils-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147900" comment="libgstpbutils-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153945" comment="libgstpbutils-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147901" comment="libgstriff-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153946" comment="libgstriff-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147902" comment="libgstriff-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153947" comment="libgstriff-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147903" comment="libgstrtp-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153948" comment="libgstrtp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147904" comment="libgstrtp-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153949" comment="libgstrtp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147905" comment="libgstrtsp-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153950" comment="libgstrtsp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147906" comment="libgstrtsp-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153951" comment="libgstrtsp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147907" comment="libgstsdp-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153952" comment="libgstsdp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147908" comment="libgstsdp-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153953" comment="libgstsdp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147909" comment="libgsttag-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153954" comment="libgsttag-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147910" comment="libgsttag-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153955" comment="libgsttag-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147911" comment="libgstvideo-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153956" comment="libgstvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147912" comment="libgstvideo-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153957" comment="libgstvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147913" comment="typelib-1_0-GstAllocators-1_0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153958" comment="typelib-1_0-GstAllocators-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147914" comment="typelib-1_0-GstApp-1_0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153960" comment="typelib-1_0-GstApp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147915" comment="typelib-1_0-GstAudio-1_0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153961" comment="typelib-1_0-GstAudio-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147916" comment="typelib-1_0-GstFft-1_0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153962" comment="typelib-1_0-GstFft-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147917" comment="typelib-1_0-GstPbutils-1_0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153964" comment="typelib-1_0-GstPbutils-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147918" comment="typelib-1_0-GstRtp-1_0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153966" comment="typelib-1_0-GstRtp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147919" comment="typelib-1_0-GstRtsp-1_0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153967" comment="typelib-1_0-GstRtsp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147920" comment="typelib-1_0-GstSdp-1_0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153968" comment="typelib-1_0-GstSdp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147921" comment="typelib-1_0-GstTag-1_0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153969" comment="typelib-1_0-GstTag-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147922" comment="typelib-1_0-GstVideo-1_0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153970" comment="typelib-1_0-GstVideo-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169812" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9812</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9812" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9812" source="CVE"/>
    <description>
    The gst_mpegts_section_new function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a too small section.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9812.html">CVE-2016-9812</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9812">SUSE bug 1013678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9812">SUSE bug 1013678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9812">SUSE bug 1013678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9812">SUSE bug 1013678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9812">SUSE bug 1013678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9812">SUSE bug 1013678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9812">SUSE bug 1013678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9812">SUSE bug 1013678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9812">SUSE bug 1013678</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9812">SUSE bug 1013678</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146793" comment="gstreamer-plugins-bad-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153876" comment="gstreamer-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146794" comment="gstreamer-plugins-bad-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153877" comment="gstreamer-plugins-bad-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146795" comment="gstreamer-plugins-bad-devel-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153878" comment="gstreamer-plugins-bad-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146796" comment="gstreamer-plugins-bad-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153879" comment="gstreamer-plugins-bad-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146797" comment="gstreamer-plugins-bad-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153880" comment="gstreamer-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146798" comment="libgstadaptivedemux-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154275" comment="libgstadaptivedemux-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146799" comment="libgstadaptivedemux-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154276" comment="libgstadaptivedemux-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146800" comment="libgstbadaudio-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154277" comment="libgstbadaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146801" comment="libgstbadaudio-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154278" comment="libgstbadaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146802" comment="libgstbadbase-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153881" comment="libgstbadbase-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146803" comment="libgstbadbase-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153882" comment="libgstbadbase-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146804" comment="libgstbadvideo-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153883" comment="libgstbadvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146805" comment="libgstbadvideo-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153884" comment="libgstbadvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146806" comment="libgstbasecamerabinsrc-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153886" comment="libgstbasecamerabinsrc-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146807" comment="libgstbasecamerabinsrc-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153887" comment="libgstbasecamerabinsrc-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146808" comment="libgstcodecparsers-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153890" comment="libgstcodecparsers-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146809" comment="libgstcodecparsers-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153891" comment="libgstcodecparsers-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146810" comment="libgstgl-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153892" comment="libgstgl-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146811" comment="libgstgl-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153893" comment="libgstgl-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146812" comment="libgstinsertbin-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153894" comment="libgstinsertbin-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146813" comment="libgstinsertbin-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153895" comment="libgstinsertbin-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146814" comment="libgstmpegts-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153896" comment="libgstmpegts-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146815" comment="libgstmpegts-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153897" comment="libgstmpegts-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146816" comment="libgstphotography-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153899" comment="libgstphotography-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146817" comment="libgstphotography-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153900" comment="libgstphotography-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146818" comment="libgstplayer-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154279" comment="libgstplayer-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146819" comment="libgstplayer-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154280" comment="libgstplayer-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146820" comment="libgsturidownloader-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153902" comment="libgsturidownloader-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146821" comment="libgsturidownloader-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153903" comment="libgsturidownloader-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146822" comment="libgstvdpau-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154281" comment="libgstvdpau is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146823" comment="libgstvdpau-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154282" comment="libgstvdpau-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146824" comment="libgstwayland-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153905" comment="libgstwayland-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146825" comment="libgstwayland-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153906" comment="libgstwayland-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169813" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9813</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9813" source="CVE"/>
    <description>
    The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9813.html">CVE-2016-9813</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9813">SUSE bug 1013680</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146793" comment="gstreamer-plugins-bad-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153876" comment="gstreamer-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146794" comment="gstreamer-plugins-bad-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153877" comment="gstreamer-plugins-bad-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146795" comment="gstreamer-plugins-bad-devel-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153878" comment="gstreamer-plugins-bad-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146796" comment="gstreamer-plugins-bad-doc-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153879" comment="gstreamer-plugins-bad-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146797" comment="gstreamer-plugins-bad-lang-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153880" comment="gstreamer-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146798" comment="libgstadaptivedemux-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154275" comment="libgstadaptivedemux-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146799" comment="libgstadaptivedemux-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154276" comment="libgstadaptivedemux-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146800" comment="libgstbadaudio-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154277" comment="libgstbadaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146801" comment="libgstbadaudio-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154278" comment="libgstbadaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146802" comment="libgstbadbase-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153881" comment="libgstbadbase-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146803" comment="libgstbadbase-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153882" comment="libgstbadbase-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146804" comment="libgstbadvideo-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153883" comment="libgstbadvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146805" comment="libgstbadvideo-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153884" comment="libgstbadvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146806" comment="libgstbasecamerabinsrc-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153886" comment="libgstbasecamerabinsrc-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146807" comment="libgstbasecamerabinsrc-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153887" comment="libgstbasecamerabinsrc-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146808" comment="libgstcodecparsers-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153890" comment="libgstcodecparsers-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146809" comment="libgstcodecparsers-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153891" comment="libgstcodecparsers-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146810" comment="libgstgl-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153892" comment="libgstgl-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146811" comment="libgstgl-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153893" comment="libgstgl-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146812" comment="libgstinsertbin-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153894" comment="libgstinsertbin-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146813" comment="libgstinsertbin-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153895" comment="libgstinsertbin-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146814" comment="libgstmpegts-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153896" comment="libgstmpegts-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146815" comment="libgstmpegts-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153897" comment="libgstmpegts-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146816" comment="libgstphotography-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153899" comment="libgstphotography-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146817" comment="libgstphotography-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153900" comment="libgstphotography-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146818" comment="libgstplayer-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154279" comment="libgstplayer-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146819" comment="libgstplayer-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154280" comment="libgstplayer-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146820" comment="libgsturidownloader-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153902" comment="libgsturidownloader-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146821" comment="libgsturidownloader-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153903" comment="libgsturidownloader-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146822" comment="libgstvdpau-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154281" comment="libgstvdpau is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146823" comment="libgstvdpau-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154282" comment="libgstvdpau-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146824" comment="libgstwayland-1_0-0-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153905" comment="libgstwayland-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146825" comment="libgstwayland-1_0-0-32bit-1.8.3-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153906" comment="libgstwayland-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9830" source="CVE"/>
    <description>
    The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service (crash) via large dimensions in a jpeg image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9830.html">CVE-2016-9830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9830">SUSE bug 1013640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9830">SUSE bug 1013640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9830">SUSE bug 1013640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9830">SUSE bug 1013640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9830">SUSE bug 1013640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9830">SUSE bug 1013640</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145778" comment="GraphicsMagick-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145779" comment="GraphicsMagick-devel-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145780" comment="libGraphicsMagick++-Q16-11-1.3.21-23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152593" comment="libGraphicsMagick++-Q16-11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145781" comment="libGraphicsMagick++-Q16-12-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145783" comment="libGraphicsMagick++-devel-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145784" comment="libGraphicsMagick-Q16-3-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145785" comment="libGraphicsMagick3-config-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145786" comment="libGraphicsMagickWand-Q16-2-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009145787" comment="perl-GraphicsMagick-1.3.25-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9840</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9840" source="CVE"/>
    <description>
    inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9840.html">CVE-2016-9840</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1023215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1023215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1023215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1023215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1023215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1023215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1038505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9840">SUSE bug 1003579</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146727" comment="libminizip1-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154284" comment="libminizip1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146728" comment="libz1-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153971" comment="libz1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146729" comment="libz1-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153972" comment="libz1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146730" comment="minizip-devel-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154285" comment="minizip-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146731" comment="zlib-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153973" comment="zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146732" comment="zlib-devel-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153974" comment="zlib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146733" comment="zlib-devel-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153975" comment="zlib-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146734" comment="zlib-devel-static-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153976" comment="zlib-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146735" comment="zlib-devel-static-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153977" comment="zlib-devel-static-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9841</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9841" source="CVE"/>
    <description>
    inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9841.html">CVE-2016-9841</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1038505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1064070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1064070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1003579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1064070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9841">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146727" comment="libminizip1-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154284" comment="libminizip1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146728" comment="libz1-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153971" comment="libz1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146729" comment="libz1-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153972" comment="libz1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146730" comment="minizip-devel-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154285" comment="minizip-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146731" comment="zlib-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153973" comment="zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146732" comment="zlib-devel-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153974" comment="zlib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146733" comment="zlib-devel-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153975" comment="zlib-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146734" comment="zlib-devel-static-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153976" comment="zlib-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146735" comment="zlib-devel-static-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153977" comment="zlib-devel-static-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9842</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9842" source="CVE"/>
    <description>
    The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9842.html">CVE-2016-9842</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9842">SUSE bug 1003580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9842">SUSE bug 1003580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9842">SUSE bug 1003580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9842">SUSE bug 1023215</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9842">SUSE bug 1003580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9842">SUSE bug 1038505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9842">SUSE bug 1003580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9842">SUSE bug 1003580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9842">SUSE bug 1003580</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146727" comment="libminizip1-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154284" comment="libminizip1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146728" comment="libz1-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153971" comment="libz1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146729" comment="libz1-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153972" comment="libz1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146730" comment="minizip-devel-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154285" comment="minizip-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146731" comment="zlib-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153973" comment="zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146732" comment="zlib-devel-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153974" comment="zlib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146733" comment="zlib-devel-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153975" comment="zlib-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146734" comment="zlib-devel-static-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153976" comment="zlib-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146735" comment="zlib-devel-static-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153977" comment="zlib-devel-static-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9843</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9843" source="CVE"/>
    <description>
    The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9843.html">CVE-2016-9843</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1003580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1003580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1003580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1038505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1003580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1003580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9843">SUSE bug 1013882</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146727" comment="libminizip1-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154284" comment="libminizip1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146728" comment="libz1-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153971" comment="libz1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146729" comment="libz1-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153972" comment="libz1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146730" comment="minizip-devel-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154285" comment="minizip-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146731" comment="zlib-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153973" comment="zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146732" comment="zlib-devel-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153974" comment="zlib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146733" comment="zlib-devel-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153975" comment="zlib-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146734" comment="zlib-devel-static-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153976" comment="zlib-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146735" comment="zlib-devel-static-32bit-1.2.8-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153977" comment="zlib-devel-static-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9845</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9845" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9845.html">CVE-2016-9845</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9845">SUSE bug 1013767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9845">SUSE bug 1013767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9845">SUSE bug 1013767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9845">SUSE bug 1013767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9845">SUSE bug 1013767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9845">SUSE bug 1013767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9845">SUSE bug 1013767</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9845">SUSE bug 1013767</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147323" comment="qemu-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147324" comment="qemu-arm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147325" comment="qemu-block-curl-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147326" comment="qemu-block-dmg-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147327" comment="qemu-block-iscsi-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147328" comment="qemu-block-rbd-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147329" comment="qemu-block-ssh-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147330" comment="qemu-extra-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147331" comment="qemu-guest-agent-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147332" comment="qemu-ipxe-1.0.0-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147333" comment="qemu-kvm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147334" comment="qemu-lang-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147335" comment="qemu-linux-user-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147336" comment="qemu-ppc-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147337" comment="qemu-s390-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147338" comment="qemu-seabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147339" comment="qemu-sgabios-8-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147340" comment="qemu-testsuite-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147341" comment="qemu-tools-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147342" comment="qemu-vgabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147343" comment="qemu-x86-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9846</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9846" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while updating the cursor data in update_cursor_data_virgl. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9846.html">CVE-2016-9846</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9846">SUSE bug 1013764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9846">SUSE bug 1013764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9846">SUSE bug 1013764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9846">SUSE bug 1013764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9846">SUSE bug 1013764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9846">SUSE bug 1013764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9846">SUSE bug 1013764</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147323" comment="qemu-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147324" comment="qemu-arm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147325" comment="qemu-block-curl-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147326" comment="qemu-block-dmg-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147327" comment="qemu-block-iscsi-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147328" comment="qemu-block-rbd-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147329" comment="qemu-block-ssh-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147330" comment="qemu-extra-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147331" comment="qemu-guest-agent-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147332" comment="qemu-ipxe-1.0.0-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147333" comment="qemu-kvm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147334" comment="qemu-lang-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147335" comment="qemu-linux-user-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147336" comment="qemu-ppc-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147337" comment="qemu-s390-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147338" comment="qemu-seabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147339" comment="qemu-sgabios-8-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147340" comment="qemu-testsuite-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147341" comment="qemu-tools-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147342" comment="qemu-vgabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147343" comment="qemu-x86-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169877" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9877</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9877" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9877" source="CVE"/>
    <description>
    An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate are not affected.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9877.html">CVE-2016-9877</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9877">SUSE bug 1017642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9877">SUSE bug 1017642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9877">SUSE bug 1017642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9877">SUSE bug 1017642</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147880" comment="erlang-rabbitmq-client-3.5.8-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154286" comment="erlang-rabbitmq-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147881" comment="rabbitmq-server-3.5.8-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154287" comment="rabbitmq-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147882" comment="rabbitmq-server-plugins-3.5.8-3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154288" comment="rabbitmq-server-plugins is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9893</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9893" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9893" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9893.html">CVE-2016-9893</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9893">SUSE bug 1015541</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146167" comment="MozillaThunderbird-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146168" comment="MozillaThunderbird-buildsymbols-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146169" comment="MozillaThunderbird-devel-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146170" comment="MozillaThunderbird-translations-common-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146171" comment="MozillaThunderbird-translations-other-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9894</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9894" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9894" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9894.html">CVE-2016-9894</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9894">SUSE bug 1015542</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9895</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9895" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9895" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9895.html">CVE-2016-9895</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9895">SUSE bug 1015529</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146167" comment="MozillaThunderbird-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146168" comment="MozillaThunderbird-buildsymbols-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146169" comment="MozillaThunderbird-devel-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146170" comment="MozillaThunderbird-translations-common-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146171" comment="MozillaThunderbird-translations-other-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9896</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9896" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9896" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9896.html">CVE-2016-9896</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9896">SUSE bug 1015542</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9897</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9897" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9897" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9897.html">CVE-2016-9897</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9897">SUSE bug 1015531</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146167" comment="MozillaThunderbird-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146168" comment="MozillaThunderbird-buildsymbols-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146169" comment="MozillaThunderbird-devel-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146170" comment="MozillaThunderbird-translations-common-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146171" comment="MozillaThunderbird-translations-other-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9898</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9898" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9898" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9898.html">CVE-2016-9898</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9898">SUSE bug 1015533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146167" comment="MozillaThunderbird-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146168" comment="MozillaThunderbird-buildsymbols-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146169" comment="MozillaThunderbird-devel-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146170" comment="MozillaThunderbird-translations-common-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146171" comment="MozillaThunderbird-translations-other-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9899</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9899" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9899" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9899.html">CVE-2016-9899</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9899">SUSE bug 1015528</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146167" comment="MozillaThunderbird-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146168" comment="MozillaThunderbird-buildsymbols-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146169" comment="MozillaThunderbird-devel-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146170" comment="MozillaThunderbird-translations-common-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146171" comment="MozillaThunderbird-translations-other-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9900</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9900" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9900" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9900.html">CVE-2016-9900</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9900">SUSE bug 1015534</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146167" comment="MozillaThunderbird-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146168" comment="MozillaThunderbird-buildsymbols-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146169" comment="MozillaThunderbird-devel-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146170" comment="MozillaThunderbird-translations-common-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146171" comment="MozillaThunderbird-translations-other-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9901</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9901" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9901.html">CVE-2016-9901</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9901">SUSE bug 1015536</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9902</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9902" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9902" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9902.html">CVE-2016-9902</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9902">SUSE bug 1015537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169903" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9903</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9903" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9903" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9903.html">CVE-2016-9903</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9903">SUSE bug 1015542</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9904</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9904" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9904" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9904.html">CVE-2016-9904</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9904">SUSE bug 1015535</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143102" comment="MozillaFirefox-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143103" comment="MozillaFirefox-branding-upstream-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143104" comment="MozillaFirefox-buildsymbols-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143105" comment="MozillaFirefox-devel-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143106" comment="MozillaFirefox-translations-common-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009143107" comment="MozillaFirefox-translations-other-50.1.0-45.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146167" comment="MozillaThunderbird-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146168" comment="MozillaThunderbird-buildsymbols-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146169" comment="MozillaThunderbird-devel-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146170" comment="MozillaThunderbird-translations-common-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146171" comment="MozillaThunderbird-translations-other-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169905" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9905</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9905" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9905" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9905.html">CVE-2016-9905</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015529</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015537</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015542</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9905">SUSE bug 1015542</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146167" comment="MozillaThunderbird-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146168" comment="MozillaThunderbird-buildsymbols-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146169" comment="MozillaThunderbird-devel-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146170" comment="MozillaThunderbird-translations-common-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146171" comment="MozillaThunderbird-translations-other-45.6.0-31.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169907" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9907</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9907" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9907" source="CVE"/>
    <description>
    Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9907.html">CVE-2016-9907</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014490</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9907">SUSE bug 1014109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147323" comment="qemu-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147324" comment="qemu-arm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147325" comment="qemu-block-curl-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147326" comment="qemu-block-dmg-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147327" comment="qemu-block-iscsi-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147328" comment="qemu-block-rbd-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147329" comment="qemu-block-ssh-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147330" comment="qemu-extra-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147331" comment="qemu-guest-agent-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147332" comment="qemu-ipxe-1.0.0-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147333" comment="qemu-kvm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147334" comment="qemu-lang-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147335" comment="qemu-linux-user-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147336" comment="qemu-ppc-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147337" comment="qemu-s390-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147338" comment="qemu-seabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147339" comment="qemu-sgabios-8-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147340" comment="qemu-testsuite-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147341" comment="qemu-tools-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147342" comment="qemu-vgabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147343" comment="qemu-x86-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169908" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9908</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9908" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9908" source="CVE"/>
    <description>
    Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET' command. A guest user/process could use this flaw to leak contents of the host memory bytes.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9908.html">CVE-2016-9908</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9908">SUSE bug 1014514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9908">SUSE bug 1014514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9908">SUSE bug 1014514</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147323" comment="qemu-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147324" comment="qemu-arm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147325" comment="qemu-block-curl-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147326" comment="qemu-block-dmg-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147327" comment="qemu-block-iscsi-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147328" comment="qemu-block-rbd-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147329" comment="qemu-block-ssh-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147330" comment="qemu-extra-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147331" comment="qemu-guest-agent-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147332" comment="qemu-ipxe-1.0.0-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147333" comment="qemu-kvm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147334" comment="qemu-lang-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147335" comment="qemu-linux-user-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147336" comment="qemu-ppc-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147337" comment="qemu-s390-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147338" comment="qemu-seabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147339" comment="qemu-sgabios-8-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147340" comment="qemu-testsuite-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147341" comment="qemu-tools-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147342" comment="qemu-vgabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147343" comment="qemu-x86-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9911</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9911" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9911" source="CVE"/>
    <description>
    Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehci_init_transfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9911.html">CVE-2016-9911</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9911">SUSE bug 1014111</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147323" comment="qemu-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147324" comment="qemu-arm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147325" comment="qemu-block-curl-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147326" comment="qemu-block-dmg-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147327" comment="qemu-block-iscsi-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147328" comment="qemu-block-rbd-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147329" comment="qemu-block-ssh-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147330" comment="qemu-extra-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147331" comment="qemu-guest-agent-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147332" comment="qemu-ipxe-1.0.0-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147333" comment="qemu-kvm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147334" comment="qemu-lang-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147335" comment="qemu-linux-user-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147336" comment="qemu-ppc-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147337" comment="qemu-s390-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147338" comment="qemu-seabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147339" comment="qemu-sgabios-8-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147340" comment="qemu-testsuite-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147341" comment="qemu-tools-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147342" comment="qemu-vgabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147343" comment="qemu-x86-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9912</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9912" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9912" source="CVE"/>
    <description>
    Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while destroying gpu resource object in 'virtio_gpu_resource_destroy'. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9912.html">CVE-2016-9912</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9912">SUSE bug 1014112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9912">SUSE bug 1014112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9912">SUSE bug 1014112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9912">SUSE bug 1014112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9912">SUSE bug 1014112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9912">SUSE bug 1014112</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147323" comment="qemu-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147324" comment="qemu-arm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147325" comment="qemu-block-curl-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147326" comment="qemu-block-dmg-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147327" comment="qemu-block-iscsi-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147328" comment="qemu-block-rbd-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147329" comment="qemu-block-ssh-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147330" comment="qemu-extra-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147331" comment="qemu-guest-agent-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147332" comment="qemu-ipxe-1.0.0-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147333" comment="qemu-kvm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147334" comment="qemu-lang-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147335" comment="qemu-linux-user-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147336" comment="qemu-ppc-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147337" comment="qemu-s390-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147338" comment="qemu-seabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147339" comment="qemu-sgabios-8-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147340" comment="qemu-testsuite-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147341" comment="qemu-tools-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147342" comment="qemu-vgabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147343" comment="qemu-x86-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9913</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9913" source="CVE"/>
    <description>
    Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) via vectors involving the order of resource cleanup.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9913.html">CVE-2016-9913</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014110</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9913">SUSE bug 1014311</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147323" comment="qemu-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147324" comment="qemu-arm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147325" comment="qemu-block-curl-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147326" comment="qemu-block-dmg-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147327" comment="qemu-block-iscsi-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147328" comment="qemu-block-rbd-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147329" comment="qemu-block-ssh-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147330" comment="qemu-extra-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147331" comment="qemu-guest-agent-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147332" comment="qemu-ipxe-1.0.0-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147333" comment="qemu-kvm-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147334" comment="qemu-lang-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147335" comment="qemu-linux-user-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147336" comment="qemu-ppc-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147337" comment="qemu-s390-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147338" comment="qemu-seabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147339" comment="qemu-sgabios-8-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147340" comment="qemu-testsuite-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147341" comment="qemu-tools-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147342" comment="qemu-vgabios-1.9.1-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147343" comment="qemu-x86-2.6.2-26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169919" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9919</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9919" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9919" source="CVE"/>
    <description>
    The icmp6_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data structure, which allows remote attackers to cause a denial of service (panic) via a fragmented IPv6 packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9919.html">CVE-2016-9919</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1014701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1014743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1014743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1014701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1014701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1014701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1014743</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1014701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1014701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1014701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9919">SUSE bug 1014701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148375" comment="kernel-debug-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148376" comment="kernel-debug-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148377" comment="kernel-debug-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148378" comment="kernel-default-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148379" comment="kernel-default-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148380" comment="kernel-default-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148381" comment="kernel-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148382" comment="kernel-docs-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148383" comment="kernel-docs-html-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148384" comment="kernel-docs-pdf-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148385" comment="kernel-macros-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148386" comment="kernel-obs-build-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148387" comment="kernel-obs-qa-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148388" comment="kernel-source-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148389" comment="kernel-source-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148390" comment="kernel-syms-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148391" comment="kernel-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148392" comment="kernel-vanilla-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148393" comment="kernel-vanilla-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169921" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9921</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9921" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9921" source="CVE"/>
    <description>
    Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9921.html">CVE-2016-9921</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9921">SUSE bug 1015169</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149477" comment="xen-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149478" comment="xen-devel-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149479" comment="xen-doc-html-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149480" comment="xen-libs-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149481" comment="xen-libs-32bit-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149482" comment="xen-tools-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149483" comment="xen-tools-domU-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9922</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9922" source="CVE"/>
    <description>
    The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9922.html">CVE-2016-9922</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1014702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9922">SUSE bug 1015169</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149477" comment="xen-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149478" comment="xen-devel-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149479" comment="xen-doc-html-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149480" comment="xen-libs-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149481" comment="xen-libs-32bit-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149482" comment="xen-tools-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149483" comment="xen-tools-domU-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169928" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9928</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9928" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9928" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9928.html">CVE-2016-9928</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9928">SUSE bug 1014976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9928">SUSE bug 1014976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9928">SUSE bug 1014976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9928">SUSE bug 1014976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9928">SUSE bug 1014976</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147477" comment="python3-sleekxmpp-1.3.1-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154142" comment="python3-sleekxmpp is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9932</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9932" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9932" source="CVE"/>
    <description>
    CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9932.html">CVE-2016-9932</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1016340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9932">SUSE bug 1012651</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146239" comment="xen-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146240" comment="xen-devel-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146241" comment="xen-doc-html-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146242" comment="xen-libs-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146243" comment="xen-libs-32bit-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146244" comment="xen-tools-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146245" comment="xen-tools-domU-4.7.1_04-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9933</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9933" source="CVE"/>
    <description>
    Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9933.html">CVE-2016-9933</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9933">SUSE bug 1015187</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149177" comment="apache2-mod_php5-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146736" comment="apache2-mod_php7-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135470" comment="gd-2.1.0-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135471" comment="gd-32bit-2.1.0-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009135472" comment="gd-devel-2.1.0-13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153569" comment="gd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149178" comment="php5-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149179" comment="php5-bcmath-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149180" comment="php5-bz2-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149181" comment="php5-calendar-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149182" comment="php5-ctype-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149183" comment="php5-curl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149184" comment="php5-dba-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149185" comment="php5-devel-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149186" comment="php5-dom-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149187" comment="php5-enchant-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149188" comment="php5-exif-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149189" comment="php5-fastcgi-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149190" comment="php5-fileinfo-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149191" comment="php5-firebird-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149192" comment="php5-fpm-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149193" comment="php5-ftp-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149194" comment="php5-gd-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149195" comment="php5-gettext-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149196" comment="php5-gmp-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149197" comment="php5-iconv-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149198" comment="php5-imap-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149199" comment="php5-intl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149200" comment="php5-json-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149201" comment="php5-ldap-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149202" comment="php5-mbstring-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149203" comment="php5-mcrypt-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149204" comment="php5-mssql-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149205" comment="php5-mysql-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149206" comment="php5-odbc-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149207" comment="php5-opcache-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149208" comment="php5-openssl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149209" comment="php5-pcntl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149210" comment="php5-pdo-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149211" comment="php5-pear-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149212" comment="php5-pgsql-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149213" comment="php5-phar-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149214" comment="php5-posix-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149215" comment="php5-pspell-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149216" comment="php5-readline-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149217" comment="php5-shmop-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149218" comment="php5-snmp-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149219" comment="php5-soap-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149220" comment="php5-sockets-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149221" comment="php5-sqlite-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149222" comment="php5-suhosin-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149223" comment="php5-sysvmsg-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149224" comment="php5-sysvsem-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149225" comment="php5-sysvshm-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149226" comment="php5-tidy-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149227" comment="php5-tokenizer-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149228" comment="php5-wddx-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149229" comment="php5-xmlreader-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149230" comment="php5-xmlrpc-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149231" comment="php5-xmlwriter-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149232" comment="php5-xsl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149233" comment="php5-zip-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149234" comment="php5-zlib-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146737" comment="php7-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146738" comment="php7-bcmath-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146739" comment="php7-bz2-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146740" comment="php7-calendar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146741" comment="php7-ctype-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146742" comment="php7-curl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146743" comment="php7-dba-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146744" comment="php7-devel-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146745" comment="php7-dom-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146746" comment="php7-enchant-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146747" comment="php7-exif-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146748" comment="php7-fastcgi-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146749" comment="php7-fileinfo-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146750" comment="php7-firebird-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146751" comment="php7-fpm-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146752" comment="php7-ftp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146753" comment="php7-gd-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146754" comment="php7-gettext-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146755" comment="php7-gmp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146756" comment="php7-iconv-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146757" comment="php7-imap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146758" comment="php7-intl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146759" comment="php7-json-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146760" comment="php7-ldap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146761" comment="php7-mbstring-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146762" comment="php7-mcrypt-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146763" comment="php7-mysql-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146764" comment="php7-odbc-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146765" comment="php7-opcache-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146766" comment="php7-openssl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146767" comment="php7-pcntl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146768" comment="php7-pdo-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146769" comment="php7-pear-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146770" comment="php7-pear-Archive_Tar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146771" comment="php7-pgsql-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146772" comment="php7-phar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146773" comment="php7-posix-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146774" comment="php7-pspell-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146775" comment="php7-readline-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146776" comment="php7-shmop-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146777" comment="php7-snmp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146778" comment="php7-soap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146779" comment="php7-sockets-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146780" comment="php7-sqlite-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146781" comment="php7-sysvmsg-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146782" comment="php7-sysvsem-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146783" comment="php7-sysvshm-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146784" comment="php7-tidy-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146785" comment="php7-tokenizer-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146786" comment="php7-wddx-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146787" comment="php7-xmlreader-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146788" comment="php7-xmlrpc-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146789" comment="php7-xmlwriter-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146790" comment="php7-xsl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146791" comment="php7-zip-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146792" comment="php7-zlib-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9934</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9934" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9934" source="CVE"/>
    <description>
    ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9934.html">CVE-2016-9934</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9934">SUSE bug 1015188</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149177" comment="apache2-mod_php5-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146736" comment="apache2-mod_php7-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149178" comment="php5-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149179" comment="php5-bcmath-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149180" comment="php5-bz2-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149181" comment="php5-calendar-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149182" comment="php5-ctype-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149183" comment="php5-curl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149184" comment="php5-dba-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149185" comment="php5-devel-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149186" comment="php5-dom-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149187" comment="php5-enchant-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149188" comment="php5-exif-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149189" comment="php5-fastcgi-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149190" comment="php5-fileinfo-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149191" comment="php5-firebird-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149192" comment="php5-fpm-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149193" comment="php5-ftp-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149194" comment="php5-gd-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149195" comment="php5-gettext-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149196" comment="php5-gmp-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149197" comment="php5-iconv-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149198" comment="php5-imap-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149199" comment="php5-intl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149200" comment="php5-json-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149201" comment="php5-ldap-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149202" comment="php5-mbstring-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149203" comment="php5-mcrypt-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149204" comment="php5-mssql-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149205" comment="php5-mysql-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149206" comment="php5-odbc-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149207" comment="php5-opcache-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149208" comment="php5-openssl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149209" comment="php5-pcntl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149210" comment="php5-pdo-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149211" comment="php5-pear-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149212" comment="php5-pgsql-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149213" comment="php5-phar-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149214" comment="php5-posix-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149215" comment="php5-pspell-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149216" comment="php5-readline-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149217" comment="php5-shmop-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149218" comment="php5-snmp-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149219" comment="php5-soap-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149220" comment="php5-sockets-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149221" comment="php5-sqlite-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149222" comment="php5-suhosin-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149223" comment="php5-sysvmsg-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149224" comment="php5-sysvsem-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149225" comment="php5-sysvshm-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149226" comment="php5-tidy-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149227" comment="php5-tokenizer-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149228" comment="php5-wddx-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149229" comment="php5-xmlreader-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149230" comment="php5-xmlrpc-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149231" comment="php5-xmlwriter-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149232" comment="php5-xsl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149233" comment="php5-zip-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149234" comment="php5-zlib-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146737" comment="php7-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146738" comment="php7-bcmath-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146739" comment="php7-bz2-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146740" comment="php7-calendar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146741" comment="php7-ctype-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146742" comment="php7-curl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146743" comment="php7-dba-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146744" comment="php7-devel-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146745" comment="php7-dom-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146746" comment="php7-enchant-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146747" comment="php7-exif-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146748" comment="php7-fastcgi-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146749" comment="php7-fileinfo-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146750" comment="php7-firebird-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146751" comment="php7-fpm-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146752" comment="php7-ftp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146753" comment="php7-gd-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146754" comment="php7-gettext-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146755" comment="php7-gmp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146756" comment="php7-iconv-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146757" comment="php7-imap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146758" comment="php7-intl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146759" comment="php7-json-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146760" comment="php7-ldap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146761" comment="php7-mbstring-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146762" comment="php7-mcrypt-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146763" comment="php7-mysql-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146764" comment="php7-odbc-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146765" comment="php7-opcache-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146766" comment="php7-openssl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146767" comment="php7-pcntl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146768" comment="php7-pdo-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146769" comment="php7-pear-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146770" comment="php7-pear-Archive_Tar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146771" comment="php7-pgsql-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146772" comment="php7-phar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146773" comment="php7-posix-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146774" comment="php7-pspell-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146775" comment="php7-readline-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146776" comment="php7-shmop-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146777" comment="php7-snmp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146778" comment="php7-soap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146779" comment="php7-sockets-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146780" comment="php7-sqlite-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146781" comment="php7-sysvmsg-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146782" comment="php7-sysvsem-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146783" comment="php7-sysvshm-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146784" comment="php7-tidy-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146785" comment="php7-tokenizer-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146786" comment="php7-wddx-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146787" comment="php7-xmlreader-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146788" comment="php7-xmlrpc-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146789" comment="php7-xmlwriter-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146790" comment="php7-xsl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146791" comment="php7-zip-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146792" comment="php7-zlib-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9935</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9935" source="CVE"/>
    <description>
    The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9935.html">CVE-2016-9935</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1048097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9935">SUSE bug 1015189</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149177" comment="apache2-mod_php5-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146736" comment="apache2-mod_php7-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149178" comment="php5-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149179" comment="php5-bcmath-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149180" comment="php5-bz2-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149181" comment="php5-calendar-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149182" comment="php5-ctype-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149183" comment="php5-curl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149184" comment="php5-dba-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149185" comment="php5-devel-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149186" comment="php5-dom-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149187" comment="php5-enchant-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149188" comment="php5-exif-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149189" comment="php5-fastcgi-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149190" comment="php5-fileinfo-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149191" comment="php5-firebird-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149192" comment="php5-fpm-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149193" comment="php5-ftp-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149194" comment="php5-gd-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149195" comment="php5-gettext-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149196" comment="php5-gmp-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149197" comment="php5-iconv-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149198" comment="php5-imap-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149199" comment="php5-intl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149200" comment="php5-json-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149201" comment="php5-ldap-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149202" comment="php5-mbstring-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149203" comment="php5-mcrypt-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149204" comment="php5-mssql-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149205" comment="php5-mysql-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149206" comment="php5-odbc-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149207" comment="php5-opcache-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149208" comment="php5-openssl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149209" comment="php5-pcntl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149210" comment="php5-pdo-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149211" comment="php5-pear-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149212" comment="php5-pgsql-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149213" comment="php5-phar-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149214" comment="php5-posix-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149215" comment="php5-pspell-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149216" comment="php5-readline-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149217" comment="php5-shmop-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149218" comment="php5-snmp-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149219" comment="php5-soap-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149220" comment="php5-sockets-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149221" comment="php5-sqlite-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149222" comment="php5-suhosin-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149223" comment="php5-sysvmsg-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149224" comment="php5-sysvsem-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149225" comment="php5-sysvshm-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149226" comment="php5-tidy-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149227" comment="php5-tokenizer-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149228" comment="php5-wddx-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149229" comment="php5-xmlreader-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149230" comment="php5-xmlrpc-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149231" comment="php5-xmlwriter-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149232" comment="php5-xsl-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149233" comment="php5-zip-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149234" comment="php5-zlib-5.5.14-75.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146737" comment="php7-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146738" comment="php7-bcmath-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146739" comment="php7-bz2-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146740" comment="php7-calendar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146741" comment="php7-ctype-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146742" comment="php7-curl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146743" comment="php7-dba-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146744" comment="php7-devel-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146745" comment="php7-dom-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146746" comment="php7-enchant-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146747" comment="php7-exif-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146748" comment="php7-fastcgi-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146749" comment="php7-fileinfo-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146750" comment="php7-firebird-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146751" comment="php7-fpm-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146752" comment="php7-ftp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146753" comment="php7-gd-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146754" comment="php7-gettext-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146755" comment="php7-gmp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146756" comment="php7-iconv-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146757" comment="php7-imap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146758" comment="php7-intl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146759" comment="php7-json-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146760" comment="php7-ldap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146761" comment="php7-mbstring-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146762" comment="php7-mcrypt-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146763" comment="php7-mysql-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146764" comment="php7-odbc-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146765" comment="php7-opcache-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146766" comment="php7-openssl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146767" comment="php7-pcntl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146768" comment="php7-pdo-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146769" comment="php7-pear-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146770" comment="php7-pear-Archive_Tar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146771" comment="php7-pgsql-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146772" comment="php7-phar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146773" comment="php7-posix-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146774" comment="php7-pspell-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146775" comment="php7-readline-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146776" comment="php7-shmop-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146777" comment="php7-snmp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146778" comment="php7-soap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146779" comment="php7-sockets-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146780" comment="php7-sqlite-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146781" comment="php7-sysvmsg-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146782" comment="php7-sysvsem-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146783" comment="php7-sysvshm-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146784" comment="php7-tidy-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146785" comment="php7-tokenizer-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146786" comment="php7-wddx-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146787" comment="php7-xmlreader-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146788" comment="php7-xmlrpc-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146789" comment="php7-xmlwriter-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146790" comment="php7-xsl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146791" comment="php7-zip-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146792" comment="php7-zlib-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9936</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9936" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9936" source="CVE"/>
    <description>
    The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted serialized data.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6834.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9936.html">CVE-2016-9936</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9936">SUSE bug 1015191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9936">SUSE bug 1015191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9936">SUSE bug 1015191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9936">SUSE bug 1015191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9936">SUSE bug 1015191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9936">SUSE bug 1015191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9936">SUSE bug 1015191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9936">SUSE bug 1015191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9936">SUSE bug 1015191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9936">SUSE bug 1015191</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146736" comment="apache2-mod_php7-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146737" comment="php7-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146738" comment="php7-bcmath-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146739" comment="php7-bz2-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146740" comment="php7-calendar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146741" comment="php7-ctype-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146742" comment="php7-curl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146743" comment="php7-dba-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146744" comment="php7-devel-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146745" comment="php7-dom-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146746" comment="php7-enchant-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146747" comment="php7-exif-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146748" comment="php7-fastcgi-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146749" comment="php7-fileinfo-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146750" comment="php7-firebird-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146751" comment="php7-fpm-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146752" comment="php7-ftp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146753" comment="php7-gd-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146754" comment="php7-gettext-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146755" comment="php7-gmp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146756" comment="php7-iconv-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146757" comment="php7-imap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146758" comment="php7-intl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146759" comment="php7-json-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146760" comment="php7-ldap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146761" comment="php7-mbstring-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146762" comment="php7-mcrypt-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146763" comment="php7-mysql-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146764" comment="php7-odbc-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146765" comment="php7-opcache-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146766" comment="php7-openssl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146767" comment="php7-pcntl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146768" comment="php7-pdo-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146769" comment="php7-pear-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146770" comment="php7-pear-Archive_Tar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146771" comment="php7-pgsql-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146772" comment="php7-phar-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146773" comment="php7-posix-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146774" comment="php7-pspell-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146775" comment="php7-readline-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146776" comment="php7-shmop-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146777" comment="php7-snmp-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146778" comment="php7-soap-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146779" comment="php7-sockets-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146780" comment="php7-sqlite-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146781" comment="php7-sysvmsg-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146782" comment="php7-sysvsem-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146783" comment="php7-sysvshm-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146784" comment="php7-tidy-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146785" comment="php7-tokenizer-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146786" comment="php7-wddx-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146787" comment="php7-xmlreader-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146788" comment="php7-xmlrpc-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146789" comment="php7-xmlwriter-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146790" comment="php7-xsl-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146791" comment="php7-zip-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146792" comment="php7-zlib-7.0.7-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9957</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9957" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9957" source="CVE"/>
    <description>
    Stack-based buffer overflow in game-music-emu before 0.6.1.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9957.html">CVE-2016-9957</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9957">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9957">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9957">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9957">SUSE bug 1015941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146405" comment="libgme-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153978" comment="libgme is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146406" comment="libgme-devel-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153979" comment="libgme-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146407" comment="libgme0-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153980" comment="libgme0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146408" comment="libgme0-32bit-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153981" comment="libgme0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9958</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9958" source="CVE"/>
    <description>
    game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9958.html">CVE-2016-9958</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9958">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9958">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9958">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9958">SUSE bug 1015941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146405" comment="libgme-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153978" comment="libgme is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146406" comment="libgme-devel-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153979" comment="libgme-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146407" comment="libgme0-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153980" comment="libgme0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146408" comment="libgme0-32bit-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153981" comment="libgme0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9959</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9959" source="CVE"/>
    <description>
    game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9959.html">CVE-2016-9959</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9959">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9959">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9959">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9959">SUSE bug 1015941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146405" comment="libgme-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153978" comment="libgme is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146406" comment="libgme-devel-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153979" comment="libgme-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146407" comment="libgme0-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153980" comment="libgme0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146408" comment="libgme0-32bit-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153981" comment="libgme0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9960</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9960" source="CVE"/>
    <description>
    game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9960.html">CVE-2016-9960</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9960">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9960">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9960">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9960">SUSE bug 1015941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146405" comment="libgme-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153978" comment="libgme is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146406" comment="libgme-devel-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153979" comment="libgme-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146407" comment="libgme0-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153980" comment="libgme0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146408" comment="libgme0-32bit-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153981" comment="libgme0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9961</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9961" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9961" source="CVE"/>
    <description>
    game-music-emu before 0.6.1 mishandles unspecified integer values.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9961.html">CVE-2016-9961</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9961">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9961">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9961">SUSE bug 1015941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9961">SUSE bug 1015941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146405" comment="libgme-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153978" comment="libgme is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146406" comment="libgme-devel-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153979" comment="libgme-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146407" comment="libgme0-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153980" comment="libgme0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146408" comment="libgme0-32bit-0.6.0-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153981" comment="libgme0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169962" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9962</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9962" source="CVE"/>
    <description>
    RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container.  This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9962.html">CVE-2016-9962</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9962">SUSE bug 1012568</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147981" comment="containerd-0.2.5+gitr569_2a5e70c-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153864" comment="containerd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147982" comment="containerd-ctr-0.2.5+gitr569_2a5e70c-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153865" comment="containerd-ctr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147983" comment="containerd-test-0.2.5+gitr569_2a5e70c-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153866" comment="containerd-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147984" comment="docker-1.12.6-25.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152505" comment="docker is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147985" comment="docker-bash-completion-1.12.6-25.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152506" comment="docker-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147986" comment="docker-test-1.12.6-25.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152507" comment="docker-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147987" comment="docker-zsh-completion-1.12.6-25.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152508" comment="docker-zsh-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147988" comment="runc-0.1.1+gitr2819_50a19c6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153867" comment="runc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147989" comment="runc-test-0.1.1+gitr2819_50a19c6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153868" comment="runc-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20169963" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2016-9963</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2016-9963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9963" source="CVE"/>
    <description>
    Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2016-9963.html">CVE-2016-9963</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9963">SUSE bug 1015930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9963">SUSE bug 1015930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9963">SUSE bug 1015930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9963">SUSE bug 1015930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9963">SUSE bug 1015930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9963">SUSE bug 1015930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9963">SUSE bug 1015930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9963">SUSE bug 1015930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2016-9963">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162475" comment="exim-4.86.2-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153580" comment="exim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162476" comment="eximon-4.86.2-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153581" comment="eximon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162477" comment="eximstats-html-4.86.2-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153582" comment="eximstats-html is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0375</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-0375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0375" source="CVE"/>
    <description>
    The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-0375.html">CVE-2017-0375</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0375">SUSE bug 1043455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0375">SUSE bug 1043455</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156819" comment="tor-0.2.9.11-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153574" comment="tor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0376</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-0376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0376" source="CVE"/>
    <description>
    The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-0376.html">CVE-2017-0376</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0376">SUSE bug 1043456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0376">SUSE bug 1043456</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156819" comment="tor-0.2.9.11-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153574" comment="tor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0380</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-0380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0380" source="CVE"/>
    <description>
    The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-0380.html">CVE-2017-0380</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0380">SUSE bug 1059194</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0380">SUSE bug 1059194</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0380">SUSE bug 1059194</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164764" comment="tor-0.2.9.12-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153574" comment="tor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0381</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-0381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0381" source="CVE"/>
    <description>
    An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31607432.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-0381.html">CVE-2017-0381</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0381">SUSE bug 1020102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0381">SUSE bug 1020102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0381">SUSE bug 1020102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0381">SUSE bug 1020102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0381">SUSE bug 1020102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0381">SUSE bug 1020102</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148614" comment="libopus-devel-1.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153982" comment="libopus-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148615" comment="libopus-devel-static-1.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153983" comment="libopus-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148616" comment="libopus0-1.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153984" comment="libopus0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148617" comment="libopus0-32bit-1.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153985" comment="libopus0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148618" comment="opus-1.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153986" comment="opus is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20170663" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-0663</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-0663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0663" source="CVE"/>
    <description>
    A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-0663.html">CVE-2017-0663</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1049467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-0663">SUSE bug 1044337</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157788" comment="libxml2-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157789" comment="libxml2-2-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157790" comment="libxml2-2-32bit-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157791" comment="libxml2-devel-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157792" comment="libxml2-devel-32bit-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157793" comment="libxml2-doc-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157794" comment="libxml2-tools-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157795" comment="python-libxml2-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000050</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000050" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000050" source="CVE"/>
    <description>
    JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000050.html">CVE-2017-1000050</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000050">SUSE bug 1047958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000050">SUSE bug 1047958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000050">SUSE bug 1047958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000050">SUSE bug 1047958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000050">SUSE bug 1047958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000050">SUSE bug 1047958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000050">SUSE bug 1047958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000050">SUSE bug 1047958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000050">SUSE bug 1047958</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159464" comment="jasper-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159465" comment="libjasper-devel-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159466" comment="libjasper1-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159467" comment="libjasper1-32bit-1.900.14-175.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000083</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000083" source="CVE"/>
    <description>
    backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000083.html">CVE-2017-1000083</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000083">SUSE bug 1046856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168859" comment="evince-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151448" comment="evince is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168860" comment="evince-browser-plugin-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154091" comment="evince-browser-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168861" comment="evince-devel-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159434" comment="evince-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168862" comment="evince-lang-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151449" comment="evince-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168863" comment="evince-plugin-comicsdocument-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154092" comment="evince-plugin-comicsdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168864" comment="evince-plugin-djvudocument-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154093" comment="evince-plugin-djvudocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168865" comment="evince-plugin-dvidocument-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154094" comment="evince-plugin-dvidocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168866" comment="evince-plugin-pdfdocument-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154095" comment="evince-plugin-pdfdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168867" comment="evince-plugin-psdocument-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154096" comment="evince-plugin-psdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168868" comment="evince-plugin-tiffdocument-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154097" comment="evince-plugin-tiffdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168869" comment="evince-plugin-xpsdocument-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154098" comment="evince-plugin-xpsdocument is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168870" comment="libevdocument3-4-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151450" comment="libevdocument3-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168871" comment="libevview3-3-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151451" comment="libevview3-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168872" comment="nautilus-evince-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151452" comment="nautilus-evince is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168873" comment="typelib-1_0-EvinceDocument-3_0-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151453" comment="typelib-1_0-EvinceDocument-3_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168874" comment="typelib-1_0-EvinceView-3_0-3.20.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151454" comment="typelib-1_0-EvinceView-3_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000100</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100" source="CVE"/>
    <description>
    When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl's redirect protocols with --proto-redir and libcurl's with CURLOPT_REDIR_PROTOCOLS.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000100.html">CVE-2017-1000100</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000100">SUSE bug 1051644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162164" comment="curl-7.37.0-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162165" comment="libcurl-devel-7.37.0-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162166" comment="libcurl-devel-32bit-7.37.0-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153284" comment="libcurl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162167" comment="libcurl4-7.37.0-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162168" comment="libcurl4-32bit-7.37.0-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000101</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000101" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101" source="CVE"/>
    <description>
    curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000101.html">CVE-2017-1000101</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000101">SUSE bug 1051643</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162164" comment="curl-7.37.0-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162165" comment="libcurl-devel-7.37.0-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162166" comment="libcurl-devel-32bit-7.37.0-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153284" comment="libcurl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162167" comment="libcurl4-7.37.0-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162168" comment="libcurl4-32bit-7.37.0-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000111</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000111" source="CVE"/>
    <description>
    Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655. In both cases, a socket option that changes socket state may race with safety checks in packet_set_ring. Previously with PACKET_VERSION. This time with PACKET_RESERVE. The solution is similar: lock the socket for the update. This issue may be exploitable, we did not investigate further. As this issue affects PF_PACKET sockets, it requires CAP_NET_RAW in the process namespace. But note that with user namespaces enabled, any process can create a namespace in which it has CAP_NET_RAW.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000111.html">CVE-2017-1000111</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052367</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000111">SUSE bug 1052367</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161924" comment="kernel-debug-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161925" comment="kernel-debug-base-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161926" comment="kernel-debug-devel-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161927" comment="kernel-default-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161928" comment="kernel-default-base-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161929" comment="kernel-default-devel-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161930" comment="kernel-devel-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161931" comment="kernel-docs-4.4.79-18.26.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161932" comment="kernel-docs-html-4.4.79-18.26.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161933" comment="kernel-docs-pdf-4.4.79-18.26.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161934" comment="kernel-macros-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161935" comment="kernel-obs-build-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161936" comment="kernel-obs-qa-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161937" comment="kernel-source-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161938" comment="kernel-source-vanilla-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161939" comment="kernel-syms-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161940" comment="kernel-vanilla-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161941" comment="kernel-vanilla-base-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161942" comment="kernel-vanilla-devel-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000112</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000112" source="CVE"/>
    <description>
    Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_data() to append. However in between two send() calls, the append path can be switched from UFO to non-UFO one, which leads to a memory corruption. In case UFO packet lengths exceeds MTU, copy = maxfraglen - skb-&gt;len becomes negative on the non-UFO path and the branch to allocate new skb is taken. This triggers fragmentation and computation of fraggap = skb_prev-&gt;len - maxfraglen. Fraggap can exceed MTU, causing copy = datalen - transhdrlen - fraggap to become negative. Subsequently skb_copy_and_csum_bits() writes out-of-bounds. A similar issue is present in IPv6 code. The bug was introduced in e89e9cf539a2 ("[IPv4/IPv6]: UFO Scatter-gather approach") on Oct 18 2005.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000112.html">CVE-2017-1000112</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052368</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000112">SUSE bug 1052311</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161924" comment="kernel-debug-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161925" comment="kernel-debug-base-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161926" comment="kernel-debug-devel-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161927" comment="kernel-default-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161928" comment="kernel-default-base-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161929" comment="kernel-default-devel-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161930" comment="kernel-devel-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161931" comment="kernel-docs-4.4.79-18.26.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161932" comment="kernel-docs-html-4.4.79-18.26.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161933" comment="kernel-docs-pdf-4.4.79-18.26.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161934" comment="kernel-macros-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161935" comment="kernel-obs-build-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161936" comment="kernel-obs-qa-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161937" comment="kernel-source-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161938" comment="kernel-source-vanilla-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161939" comment="kernel-syms-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161940" comment="kernel-vanilla-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161941" comment="kernel-vanilla-base-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161942" comment="kernel-vanilla-devel-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000115</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000115" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000115" source="CVE"/>
    <description>
    Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the repository
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000115.html">CVE-2017-1000115</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000115">SUSE bug 1053344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000115">SUSE bug 1053344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000115">SUSE bug 1053344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000115">SUSE bug 1053344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000115">SUSE bug 1053344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000115">SUSE bug 1053344</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000115">SUSE bug 1053344</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162031" comment="mercurial-3.8.3-2.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153633" comment="mercurial is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162032" comment="mercurial-lang-3.8.3-2.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153634" comment="mercurial-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000116</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000116" source="CVE"/>
    <description>
    Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000116.html">CVE-2017-1000116</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1066430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1066430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000116">SUSE bug 1071709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162031" comment="mercurial-3.8.3-2.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153633" comment="mercurial is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162032" comment="mercurial-lang-3.8.3-2.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153634" comment="mercurial-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000117</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000117" source="CVE"/>
    <description>
    A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000117.html">CVE-2017-1000117</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1053600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1053919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1058214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1066430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1066430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000117">SUSE bug 1071709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162944" comment="git-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151600" comment="git is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162945" comment="git-arch-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153608" comment="git-arch is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162946" comment="git-core-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151601" comment="git-core is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162947" comment="git-credential-gnome-keyring-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153609" comment="git-credential-gnome-keyring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162948" comment="git-cvs-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151602" comment="git-cvs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162949" comment="git-daemon-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151603" comment="git-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162950" comment="git-doc-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153610" comment="git-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162951" comment="git-email-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151604" comment="git-email is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162952" comment="git-gui-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151605" comment="git-gui is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162953" comment="git-svn-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151606" comment="git-svn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162954" comment="git-web-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151607" comment="git-web is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162955" comment="gitk-2.12.3-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151608" comment="gitk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000211" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000211</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000211" source="CVE"/>
    <description>
    Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000211.html">CVE-2017-1000211</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000211">SUSE bug 1068885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000211">SUSE bug 1068885</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167629" comment="lynx-2.8.7-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151020" comment="lynx is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000229" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000229</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000229" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000229" source="CVE"/>
    <description>
    Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000229.html">CVE-2017-1000229</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000229">SUSE bug 1068720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000229">SUSE bug 1068720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000229">SUSE bug 1068720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000229">SUSE bug 1068720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000229">SUSE bug 1068720</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167630" comment="optipng-0.7.5-9.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153607" comment="optipng is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000250" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000250</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000250" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000250" source="CVE"/>
    <description>
    All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000250.html">CVE-2017-1000250</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000250">SUSE bug 1057342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000250">SUSE bug 1057342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000250">SUSE bug 1057342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000250">SUSE bug 1057342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000250">SUSE bug 1057342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000250">SUSE bug 1057342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000250">SUSE bug 1057342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000250">SUSE bug 1057342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000250">SUSE bug 1057342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000250">SUSE bug 1057342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000250">SUSE bug 1057342</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165943" comment="bluez-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165944" comment="bluez is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165945" comment="bluez-cups-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165946" comment="bluez-cups is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165947" comment="bluez-devel-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165948" comment="bluez-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165949" comment="bluez-devel-32bit-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165950" comment="bluez-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165951" comment="bluez-test-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165952" comment="bluez-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165953" comment="libbluetooth3-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165954" comment="libbluetooth3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165955" comment="libbluetooth3-32bit-5.41-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165956" comment="libbluetooth3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000251" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000251</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000251" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000251" source="CVE"/>
    <description>
    The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000251.html">CVE-2017-1000251</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000251">SUSE bug 1057389</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163938" comment="kernel-debug-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163939" comment="kernel-debug-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163940" comment="kernel-debug-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163941" comment="kernel-default-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163942" comment="kernel-default-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163943" comment="kernel-default-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163944" comment="kernel-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163945" comment="kernel-docs-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163946" comment="kernel-docs-html-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163947" comment="kernel-docs-pdf-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163948" comment="kernel-macros-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163949" comment="kernel-obs-build-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163950" comment="kernel-obs-qa-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163951" comment="kernel-source-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163952" comment="kernel-source-vanilla-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163953" comment="kernel-syms-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163954" comment="kernel-vanilla-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163955" comment="kernel-vanilla-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163956" comment="kernel-vanilla-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000252</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000252" source="CVE"/>
    <description>
    The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via an out-of bounds guest_irq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000252.html">CVE-2017-1000252</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000252">SUSE bug 1058038</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165715" comment="kernel-debug-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165716" comment="kernel-debug-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165717" comment="kernel-debug-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165718" comment="kernel-default-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165719" comment="kernel-default-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165720" comment="kernel-default-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165721" comment="kernel-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165722" comment="kernel-docs-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165723" comment="kernel-docs-html-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165724" comment="kernel-docs-pdf-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165725" comment="kernel-macros-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165726" comment="kernel-obs-build-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165727" comment="kernel-obs-qa-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165728" comment="kernel-source-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165729" comment="kernel-source-vanilla-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165730" comment="kernel-syms-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165731" comment="kernel-vanilla-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165732" comment="kernel-vanilla-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165733" comment="kernel-vanilla-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000254" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000254</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000254" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000254" source="CVE"/>
    <description>
    libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000254.html">CVE-2017-1000254</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000254">SUSE bug 1061876</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166194" comment="curl-7.37.0-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166195" comment="libcurl-devel-7.37.0-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166196" comment="libcurl-devel-32bit-7.37.0-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153284" comment="libcurl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166197" comment="libcurl4-7.37.0-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166198" comment="libcurl4-32bit-7.37.0-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000257</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000257" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000257" source="CVE"/>
    <description>
    An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000257.html">CVE-2017-1000257</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000257">SUSE bug 1063824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000257">SUSE bug 1063824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000257">SUSE bug 1063824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000257">SUSE bug 1063824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000257">SUSE bug 1063824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000257">SUSE bug 1063824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000257">SUSE bug 1063824</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166194" comment="curl-7.37.0-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166195" comment="libcurl-devel-7.37.0-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166196" comment="libcurl-devel-32bit-7.37.0-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153284" comment="libcurl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166197" comment="libcurl4-7.37.0-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166198" comment="libcurl4-32bit-7.37.0-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000364</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000364" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000364" source="CVE"/>
    <description>
    An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000364.html">CVE-2017-1000364</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1044985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1044985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1044985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1044985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1044985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1042200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1044985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1035920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1044985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1075506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1075506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1075506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1075506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1077345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1075506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1075506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1075506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1077345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1075506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1075506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1075506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1075506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000364">SUSE bug 1039348</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157538" comment="kernel-debug-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157539" comment="kernel-debug-base-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157540" comment="kernel-debug-devel-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157541" comment="kernel-default-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157542" comment="kernel-default-base-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157543" comment="kernel-default-devel-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157544" comment="kernel-devel-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157545" comment="kernel-docs-4.4.73-18.17.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157546" comment="kernel-docs-html-4.4.73-18.17.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157547" comment="kernel-docs-pdf-4.4.73-18.17.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157548" comment="kernel-macros-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157549" comment="kernel-obs-build-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157550" comment="kernel-obs-qa-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157551" comment="kernel-source-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157552" comment="kernel-source-vanilla-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157553" comment="kernel-syms-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157554" comment="kernel-vanilla-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157555" comment="kernel-vanilla-base-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157556" comment="kernel-vanilla-devel-4.4.73-18.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000365</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000365" source="CVE"/>
    <description>
    The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation. This affects Linux Kernel versions 4.11.5 and earlier. It appears that this feature was introduced in the Linux Kernel version 2.6.23.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000365.html">CVE-2017-1000365</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039349</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1046527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1046527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1046527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1054557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1054557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1046527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1054557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1054557</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1037551</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039346</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1039354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1077345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000365">SUSE bug 1077345</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158398" comment="kernel-debug-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158399" comment="kernel-debug-base-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158400" comment="kernel-debug-devel-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158401" comment="kernel-default-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158402" comment="kernel-default-base-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158403" comment="kernel-default-devel-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158404" comment="kernel-devel-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158405" comment="kernel-docs-4.4.74-18.20.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158406" comment="kernel-docs-html-4.4.74-18.20.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158407" comment="kernel-docs-pdf-4.4.74-18.20.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158408" comment="kernel-macros-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158409" comment="kernel-obs-build-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158410" comment="kernel-obs-qa-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158411" comment="kernel-source-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158412" comment="kernel-source-vanilla-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158413" comment="kernel-syms-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158414" comment="kernel-vanilla-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158415" comment="kernel-vanilla-base-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158416" comment="kernel-vanilla-devel-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000366" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000366</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000366" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000366" source="CVE"/>
    <description>
    glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000366.html">CVE-2017-1000366</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1037551</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 0</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 0</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000366">SUSE bug 1039357</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157198" comment="glibc-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157199" comment="glibc-32bit-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151369" comment="glibc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157200" comment="glibc-devel-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157201" comment="glibc-devel-32bit-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152566" comment="glibc-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157202" comment="glibc-devel-static-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152567" comment="glibc-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157203" comment="glibc-devel-static-32bit-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152568" comment="glibc-devel-static-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157204" comment="glibc-extra-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157205" comment="glibc-html-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152569" comment="glibc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157206" comment="glibc-i18ndata-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152570" comment="glibc-i18ndata is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157207" comment="glibc-info-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157208" comment="glibc-locale-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157209" comment="glibc-locale-32bit-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151374" comment="glibc-locale-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157210" comment="glibc-obsolete-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152571" comment="glibc-obsolete is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157211" comment="glibc-profile-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152572" comment="glibc-profile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157212" comment="glibc-profile-32bit-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152573" comment="glibc-profile-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157213" comment="glibc-testsuite-2.22-4.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152574" comment="glibc-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157214" comment="glibc-utils-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152575" comment="glibc-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157215" comment="glibc-utils-32bit-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152576" comment="glibc-utils-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157216" comment="nscd-2.22-4.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000367" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000367</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000367" source="CVE"/>
    <description>
    Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000367.html">CVE-2017-1000367</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1007501</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1077345</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000367">SUSE bug 1077345</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156328" comment="sudo-1.8.10p3-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156329" comment="sudo-devel-1.8.10p3-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152559" comment="sudo-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156330" comment="sudo-test-1.8.10p3-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152560" comment="sudo-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000368" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000368</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000368" source="CVE"/>
    <description>
    Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure and command execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000368.html">CVE-2017-1000368</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1039361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1042146</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1045986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000368">SUSE bug 1042146</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157569" comment="sudo-1.8.10p3-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151407" comment="sudo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157570" comment="sudo-devel-1.8.10p3-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152559" comment="sudo-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157571" comment="sudo-test-1.8.10p3-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152560" comment="sudo-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000369</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000369" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000369" source="CVE"/>
    <description>
    Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch (commit 65e061b76867a9ea7aeeb535341b790b90ae6c21), but it is not known if a new point release is available that addresses this issue at this time.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000369.html">CVE-2017-1000369</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000369">SUSE bug 1044692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000369">SUSE bug 1044692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000369">SUSE bug 1044692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000369">SUSE bug 1037551</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000369">SUSE bug 1044692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000369">SUSE bug 1044692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000369">SUSE bug 1044692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000369">SUSE bug 1044692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000369">SUSE bug 1044692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000369">SUSE bug 1044692</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162475" comment="exim-4.86.2-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153580" comment="exim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162476" comment="eximon-4.86.2-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153581" comment="eximon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162477" comment="eximstats-html-4.86.2-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153582" comment="eximstats-html is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000380</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000380" source="CVE"/>
    <description>
    sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000380.html">CVE-2017-1000380</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000380">SUSE bug 1044125</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157229" comment="kernel-debug-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157230" comment="kernel-debug-base-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157231" comment="kernel-debug-devel-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157232" comment="kernel-default-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157233" comment="kernel-default-base-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157234" comment="kernel-default-devel-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157235" comment="kernel-devel-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157236" comment="kernel-docs-4.4.72-18.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157237" comment="kernel-docs-html-4.4.72-18.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157238" comment="kernel-docs-pdf-4.4.72-18.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157239" comment="kernel-macros-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157240" comment="kernel-obs-build-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157241" comment="kernel-obs-qa-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157242" comment="kernel-source-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157243" comment="kernel-source-vanilla-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157244" comment="kernel-syms-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157245" comment="kernel-vanilla-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157246" comment="kernel-vanilla-base-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157247" comment="kernel-vanilla-devel-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000381</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000381" source="CVE"/>
    <description>
    The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000381.html">CVE-2017-1000381</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000381">SUSE bug 1044946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000381">SUSE bug 1044946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000381">SUSE bug 1044946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000381">SUSE bug 1044946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000381">SUSE bug 1044946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000381">SUSE bug 1044946</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158794" comment="libcares-devel-1.9.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153705" comment="libcares-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158795" comment="libcares2-1.9.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153706" comment="libcares2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158796" comment="libcares2-32bit-1.9.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153707" comment="libcares2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161915" comment="nodejs-common-1.0-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162033" comment="nodejs-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162034" comment="nodejs4-4.8.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154256" comment="nodejs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162035" comment="nodejs4-devel-4.8.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154257" comment="nodejs4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162036" comment="nodejs4-docs-4.8.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154258" comment="nodejs4-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162037" comment="npm4-4.8.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154259" comment="npm4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000385</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000385" source="CVE"/>
    <description>
    The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key (this is a variation of the Bleichenbacher attack).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000385.html">CVE-2017-1000385</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000385">SUSE bug 1070960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168069" comment="erlang-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168070" comment="erlang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168071" comment="erlang-debugger-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168072" comment="erlang-debugger is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168073" comment="erlang-debugger-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168074" comment="erlang-debugger-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168075" comment="erlang-dialyzer-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168076" comment="erlang-dialyzer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168077" comment="erlang-dialyzer-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168078" comment="erlang-dialyzer-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168079" comment="erlang-diameter-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168080" comment="erlang-diameter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168081" comment="erlang-diameter-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168082" comment="erlang-diameter-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168083" comment="erlang-doc-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168084" comment="erlang-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168085" comment="erlang-epmd-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168086" comment="erlang-epmd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168087" comment="erlang-et-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168088" comment="erlang-et is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168089" comment="erlang-et-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168090" comment="erlang-et-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168091" comment="erlang-gs-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168092" comment="erlang-gs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168093" comment="erlang-gs-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168094" comment="erlang-gs-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168095" comment="erlang-jinterface-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168096" comment="erlang-jinterface is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168097" comment="erlang-jinterface-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168098" comment="erlang-jinterface-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168099" comment="erlang-observer-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168100" comment="erlang-observer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168101" comment="erlang-observer-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168102" comment="erlang-observer-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168103" comment="erlang-reltool-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168104" comment="erlang-reltool is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168105" comment="erlang-reltool-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168106" comment="erlang-reltool-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168107" comment="erlang-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168108" comment="erlang-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168109" comment="erlang-wx-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168110" comment="erlang-wx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168111" comment="erlang-wx-src-18.3.4.7-2.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168112" comment="erlang-wx-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000405</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000405" source="CVE"/>
    <description>
    The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original "Dirty cow" because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000405.html">CVE-2017-1000405</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1070307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1070307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1070307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1070307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1070307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1070307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1070307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1070307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1070307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1069496</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1070307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000405">SUSE bug 1070307</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000408</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000408" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000408" source="CVE"/>
    <description>
    A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000408.html">CVE-2017-1000408</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000408">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000408">SUSE bug 1039357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000408">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000408">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000408">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000408">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000408">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000408">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000408">SUSE bug 1071319</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169693" comment="glibc-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169694" comment="glibc-devel-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169695" comment="glibc-devel-static-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152567" comment="glibc-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169696" comment="glibc-extra-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169697" comment="glibc-html-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152569" comment="glibc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169698" comment="glibc-i18ndata-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152570" comment="glibc-i18ndata is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169699" comment="glibc-info-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169700" comment="glibc-locale-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169701" comment="glibc-obsolete-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152571" comment="glibc-obsolete is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169702" comment="glibc-profile-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152572" comment="glibc-profile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169703" comment="glibc-testsuite-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152574" comment="glibc-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169704" comment="glibc-utils-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152575" comment="glibc-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169705" comment="glibc-utils-32bit-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152576" comment="glibc-utils-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169706" comment="nscd-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000409</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000409" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000409" source="CVE"/>
    <description>
    A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000409.html">CVE-2017-1000409</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000409">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000409">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000409">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000409">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000409">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000409">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000409">SUSE bug 1071319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000409">SUSE bug 1071319</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169693" comment="glibc-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169694" comment="glibc-devel-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169695" comment="glibc-devel-static-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152567" comment="glibc-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169696" comment="glibc-extra-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169697" comment="glibc-html-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152569" comment="glibc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169698" comment="glibc-i18ndata-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152570" comment="glibc-i18ndata is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169699" comment="glibc-info-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169700" comment="glibc-locale-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169701" comment="glibc-obsolete-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152571" comment="glibc-obsolete is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169702" comment="glibc-profile-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152572" comment="glibc-profile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169703" comment="glibc-testsuite-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152574" comment="glibc-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169704" comment="glibc-utils-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152575" comment="glibc-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169705" comment="glibc-utils-32bit-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152576" comment="glibc-utils-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169706" comment="nscd-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000410</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000410" source="CVE"/>
    <description>
    The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their uninitialized state. By manipulating the code flows that precede the handling of these configuration messages, an attacker can also gain some control over which data will be held in the uninitialized stack variables. This can allow him to bypass KASLR, and stack canaries protection - as both pointers and stack canaries may be leaked in this manner. Combining this vulnerability (for example) with the previously disclosed RCE vulnerability in L2CAP configuration parsing (CVE-2017-1000251) may allow an attacker to exploit the RCE against kernels which were built with the above mitigations. These are the specifics of this vulnerability: In the function l2cap_parse_conf_rsp and in the function l2cap_parse_conf_req the following variable is declared without initialization: struct l2cap_conf_efs efs; In addition, when parsing input configuration parameters in both of these functions, the switch case for handling EFS elements may skip the memcpy call that will write to the efs variable: ... case L2CAP_CONF_EFS: if (olen == sizeof(efs)) memcpy(&amp;efs, (void *)val, olen); ... The olen in the above if is attacker controlled, and regardless of that if, in both of these functions the efs variable would eventually be added to the outgoing configuration request that is being built: l2cap_add_conf_opt(&amp;ptr, L2CAP_CONF_EFS, sizeof(efs), (unsigned long) &amp;efs); So by sending a configuration request, or response, that contains an L2CAP_CONF_EFS element, but with an element length that is not sizeof(efs) - the memcpy to the uninitialized efs variable can be avoided, and the uninitialized variable would be returned to the attacker (16 bytes).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000410.html">CVE-2017-1000410</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000410">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000410">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000410">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000410">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000410">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000410">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000410">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000410">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000410">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000410">SUSE bug 1070535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000410">SUSE bug 1070535</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000420</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000420" source="CVE"/>
    <description>
    Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000420.html">CVE-2017-1000420</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000420">SUSE bug 1074428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000420">SUSE bug 1074428</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169707" comment="syncthing-0.14.42-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169708" comment="syncthing is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000445</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000445" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000445" source="CVE"/>
    <description>
    ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000445.html">CVE-2017-1000445</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000445">SUSE bug 1074425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000445">SUSE bug 1074425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000445">SUSE bug 1074425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000445">SUSE bug 1074425</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169709" comment="ImageMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169710" comment="ImageMagick-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169711" comment="ImageMagick-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169712" comment="ImageMagick-doc-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169713" comment="ImageMagick-extra-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169714" comment="libMagick++-6_Q16-3-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169715" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169716" comment="libMagick++-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169717" comment="libMagick++-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169718" comment="libMagickCore-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169719" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169720" comment="libMagickWand-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169721" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169722" comment="perl-PerlMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20171000476" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-1000476</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-1000476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000476" source="CVE"/>
    <description>
    ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-1000476.html">CVE-2017-1000476</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000476">SUSE bug 1074610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000476">SUSE bug 1074610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000476">SUSE bug 1074610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000476">SUSE bug 1074610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000476">SUSE bug 1074610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-1000476">SUSE bug 1074610</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169709" comment="ImageMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169710" comment="ImageMagick-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169711" comment="ImageMagick-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169712" comment="ImageMagick-doc-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169713" comment="ImageMagick-extra-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169714" comment="libMagick++-6_Q16-3-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169715" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169716" comment="libMagick++-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169717" comment="libMagick++-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169718" comment="libMagickCore-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169719" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169720" comment="libMagickWand-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169721" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169722" comment="perl-PerlMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10053</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10053" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10053.html">CVE-2017-10053</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10053">SUSE bug 1049305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10053">SUSE bug 1049305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10053">SUSE bug 1049305</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10067</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10067" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10067" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10067.html">CVE-2017-10067</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10067">SUSE bug 1049306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10067">SUSE bug 1049306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10067">SUSE bug 1049306</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10074</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10074" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10074.html">CVE-2017-10074</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10074">SUSE bug 1049307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10074">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10074">SUSE bug 1049307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10074">SUSE bug 1049307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10074">SUSE bug 1049307</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10078</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10078" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10078.html">CVE-2017-10078</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10078">SUSE bug 1049308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10078">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10078">SUSE bug 1049308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10078">SUSE bug 1049333</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10081</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10081" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10081.html">CVE-2017-10081</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10081">SUSE bug 1049309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10081">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10081">SUSE bug 1049309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10081">SUSE bug 1049309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10086</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10086" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10086.html">CVE-2017-10086</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10086">SUSE bug 1049310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10086">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10086">SUSE bug 1049310</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10086">SUSE bug 1049310</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10087</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10087" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10087.html">CVE-2017-10087</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10087">SUSE bug 1049311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10087">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10087">SUSE bug 1049311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10087">SUSE bug 1049311</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10089</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10089" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10089.html">CVE-2017-10089</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10089">SUSE bug 1049312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10089">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10089">SUSE bug 1049312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10089">SUSE bug 1049312</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10090</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10090" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10090" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10090.html">CVE-2017-10090</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10090">SUSE bug 1049313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10090">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10090">SUSE bug 1049313</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10090">SUSE bug 1049313</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10096</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10096" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10096.html">CVE-2017-10096</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10096">SUSE bug 1049314</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10096">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10096">SUSE bug 1049314</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10096">SUSE bug 1049314</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10096">SUSE bug 1049314</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10101</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10101" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10101" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10101.html">CVE-2017-10101</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10101">SUSE bug 1049315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10101">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10101">SUSE bug 1049315</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10101">SUSE bug 1049315</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10102</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10102" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10102" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10102.html">CVE-2017-10102</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10102">SUSE bug 1049316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10102">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10102">SUSE bug 1049316</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10102">SUSE bug 1049316</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10105</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10105" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10105.html">CVE-2017-10105</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10105">SUSE bug 1049317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10105">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10105">SUSE bug 1049317</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10105">SUSE bug 1049317</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10107</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10107" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10107.html">CVE-2017-10107</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10107">SUSE bug 1049318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10107">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10107">SUSE bug 1049318</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10107">SUSE bug 1049318</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10108</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10108" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10108.html">CVE-2017-10108</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10108">SUSE bug 1049319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10108">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10108">SUSE bug 1049319</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10108">SUSE bug 1049319</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10109</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10109" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10109.html">CVE-2017-10109</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10109">SUSE bug 1049320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10109">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10109">SUSE bug 1049320</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10109">SUSE bug 1049320</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10110</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10110" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10110.html">CVE-2017-10110</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10110">SUSE bug 1049321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10110">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10110">SUSE bug 1049321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10110">SUSE bug 1049321</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10111</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10111" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10111.html">CVE-2017-10111</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10111">SUSE bug 1049322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10111">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10111">SUSE bug 1049322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10111">SUSE bug 1049322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10111">SUSE bug 1049333</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10114</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10114" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10114.html">CVE-2017-10114</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10114">SUSE bug 1049323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10114">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10114">SUSE bug 1049323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10114">SUSE bug 1049323</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10115</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10115" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10115" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10115.html">CVE-2017-10115</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10115">SUSE bug 1049324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10115">SUSE bug 1049333</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10116</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10116" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10116.html">CVE-2017-10116</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10116">SUSE bug 1049325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10116">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10116">SUSE bug 1049325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10116">SUSE bug 1049325</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10118</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10118" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10118" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10118.html">CVE-2017-10118</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10118">SUSE bug 1049326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10118">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10118">SUSE bug 1049326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10118">SUSE bug 1049326</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10125</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10125" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to deployment of Java where the Java Auto Update is enabled. CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10125.html">CVE-2017-10125</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10125">SUSE bug 1049327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10125">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10125">SUSE bug 1049327</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10125">SUSE bug 1049327</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10135</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10135" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10135" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10135.html">CVE-2017-10135</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10135">SUSE bug 1049328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10135">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10135">SUSE bug 1049328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10135">SUSE bug 1049328</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710155" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10155</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10155" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10155.html">CVE-2017-10155</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10155">SUSE bug 1064096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10155">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10155">SUSE bug 1064096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10155">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10155">SUSE bug 1064096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10155">SUSE bug 1064096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10155">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10176</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10176" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10176.html">CVE-2017-10176</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10176">SUSE bug 1049329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10176">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10176">SUSE bug 1049329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10176">SUSE bug 1049329</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10193</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10193" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10193.html">CVE-2017-10193</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10193">SUSE bug 1049330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10193">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10193">SUSE bug 1049330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10193">SUSE bug 1049330</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710198" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10198</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10198" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10198.html">CVE-2017-10198</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10198">SUSE bug 1049331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10198">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10198">SUSE bug 1049331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10198">SUSE bug 1049331</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10227</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10227" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10227.html">CVE-2017-10227</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10227">SUSE bug 1064100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10227">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10227">SUSE bug 1064100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10227">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10227">SUSE bug 1064100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10227">SUSE bug 1064100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10227">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10243</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10243" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10243.html">CVE-2017-10243</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10243">SUSE bug 1049332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10243">SUSE bug 1049333</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10243">SUSE bug 1049332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10243">SUSE bug 1049332</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162196" comment="java-1_8_0-openjdk-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162197" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162198" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162199" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162200" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162201" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162202" comment="java-1_8_0-openjdk-src-1.8.0.144-10.13.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10268</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10268" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10268.html">CVE-2017-10268</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10268">SUSE bug 1064101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10268">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10268">SUSE bug 1064101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10268">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10268">SUSE bug 1064101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10268">SUSE bug 1064101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10268">SUSE bug 1064101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10268">SUSE bug 1076505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10268">SUSE bug 1076506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10268">SUSE bug 1064101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10268">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10274</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10274" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10274.html">CVE-2017-10274</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10274">SUSE bug 1064071</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10274">SUSE bug 1064071</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10274">SUSE bug 1064071</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710276" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10276</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10276" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10276" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10276.html">CVE-2017-10276</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10276">SUSE bug 1064102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10276">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10276">SUSE bug 1064102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10276">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10276">SUSE bug 1064102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10276">SUSE bug 1064102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10276">SUSE bug 1064102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10276">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710279" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10279</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10279" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10279" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10279.html">CVE-2017-10279</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10279">SUSE bug 1064104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10279">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10279">SUSE bug 1064104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10279">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10279">SUSE bug 1064104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10279">SUSE bug 1064104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10279">SUSE bug 1064104</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10279">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710281" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10281</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10281" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10281" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10281.html">CVE-2017-10281</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10281">SUSE bug 1064072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10281">SUSE bug 1064072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10281">SUSE bug 1064072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10281">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710283" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10283</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10283" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10283" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10283.html">CVE-2017-10283</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10283">SUSE bug 1064105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10283">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10283">SUSE bug 1064105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10283">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10283">SUSE bug 1064105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10283">SUSE bug 1064105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10283">SUSE bug 1064105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10283">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710285" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10285</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10285" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10285" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10285.html">CVE-2017-10285</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10285">SUSE bug 1064073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10285">SUSE bug 1064073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10285">SUSE bug 1064073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10285">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710286" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10286</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10286" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10286.html">CVE-2017-10286</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10286">SUSE bug 1064107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10286">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10286">SUSE bug 1064107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10286">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10286">SUSE bug 1064107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10286">SUSE bug 1064107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10286">SUSE bug 1076506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10286">SUSE bug 1064107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10286">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10294</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10294" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10294.html">CVE-2017-10294</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10294">SUSE bug 1064108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10294">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10294">SUSE bug 1064108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10294">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10294">SUSE bug 1064108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10294">SUSE bug 1064108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10294">SUSE bug 1064108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10294">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10295</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10295" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10295" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.0 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10295.html">CVE-2017-10295</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10295">SUSE bug 1064075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10295">SUSE bug 1064075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10295">SUSE bug 1064075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10295">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10314</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10314" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10314.html">CVE-2017-10314</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10314">SUSE bug 1064112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10314">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10314">SUSE bug 1064112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10314">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10314">SUSE bug 1064112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10314">SUSE bug 1064112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10314">SUSE bug 1064112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10314">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10345</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10345" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10345.html">CVE-2017-10345</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10345">SUSE bug 1064077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10345">SUSE bug 1064077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10345">SUSE bug 1064077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10345">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10346</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10346" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10346.html">CVE-2017-10346</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10346">SUSE bug 1064078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10346">SUSE bug 1064078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10346">SUSE bug 1064078</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10346">SUSE bug 1070162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10346">SUSE bug 1064078</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10347</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10347" source="CVE"/>
    <description>
    Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10347.html">CVE-2017-10347</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10347">SUSE bug 1064079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10347">SUSE bug 1064079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10347">SUSE bug 1064079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10347">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10348</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10348" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10348.html">CVE-2017-10348</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10348">SUSE bug 1064080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10348">SUSE bug 1064080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10348">SUSE bug 1064080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10348">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10349</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10349" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10349" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10349.html">CVE-2017-10349</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10349">SUSE bug 1064081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10349">SUSE bug 1064081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10349">SUSE bug 1064081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10349">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10350</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10350" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10350" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10350.html">CVE-2017-10350</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10350">SUSE bug 1064082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10350">SUSE bug 1064082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10350">SUSE bug 1064082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10350">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10355</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10355" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10355.html">CVE-2017-10355</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10355">SUSE bug 1064083</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10355">SUSE bug 1064083</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10355">SUSE bug 1064083</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10355">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10356</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10356" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10356.html">CVE-2017-10356</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10356">SUSE bug 1064084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10356">SUSE bug 1064084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10356">SUSE bug 1064084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10356">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710357" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10357</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10357" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10357.html">CVE-2017-10357</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10357">SUSE bug 1064085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10357">SUSE bug 1064085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10357">SUSE bug 1064085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10357">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10378</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10378" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10378.html">CVE-2017-10378</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10378">SUSE bug 1064115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10378">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10378">SUSE bug 1064115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10378">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10378">SUSE bug 1064115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10378">SUSE bug 1064115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10378">SUSE bug 1064115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10378">SUSE bug 1076505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10378">SUSE bug 1076506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10378">SUSE bug 1064115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10378">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10379</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10379" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10379.html">CVE-2017-10379</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10379">SUSE bug 1064116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10379">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10379">SUSE bug 1064116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10379">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10379">SUSE bug 1064116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10379">SUSE bug 1064116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10379">SUSE bug 1076506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10379">SUSE bug 1064116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10379">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10384</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10384" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10384.html">CVE-2017-10384</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10384">SUSE bug 1064117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10384">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10384">SUSE bug 1064117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10384">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10384">SUSE bug 1064117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10384">SUSE bug 1064117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10384">SUSE bug 1076506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10384">SUSE bug 1064117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10384">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10388</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10388" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10388.html">CVE-2017-10388</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10388">SUSE bug 1064086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10388">SUSE bug 1064086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10388">SUSE bug 1064086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10388">SUSE bug 1070162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169411" comment="java-1_7_0-openjdk-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169412" comment="java-1_7_0-openjdk-accessibility-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169413" comment="java-1_7_0-openjdk-bootstrap-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169414" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169415" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169416" comment="java-1_7_0-openjdk-demo-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169417" comment="java-1_7_0-openjdk-devel-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169418" comment="java-1_7_0-openjdk-headless-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169419" comment="java-1_7_0-openjdk-javadoc-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169420" comment="java-1_7_0-openjdk-src-1.7.0.161-42.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166908" comment="java-1_8_0-openjdk-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166909" comment="java-1_8_0-openjdk-accessibility-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166910" comment="java-1_8_0-openjdk-demo-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166911" comment="java-1_8_0-openjdk-devel-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166912" comment="java-1_8_0-openjdk-headless-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166913" comment="java-1_8_0-openjdk-javadoc-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166914" comment="java-1_8_0-openjdk-src-1.8.0.151-10.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10392</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10392" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10392.html">CVE-2017-10392</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10392">SUSE bug 1064200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10392">SUSE bug 1064200</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166858" comment="python-virtualbox-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166859" comment="virtualbox-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166860" comment="virtualbox-devel-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166861" comment="virtualbox-guest-desktop-icons-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166862" comment="virtualbox-guest-kmp-default-5.1.30_k4.4.92_18.36-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166863" comment="virtualbox-guest-source-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166865" comment="virtualbox-guest-tools-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166866" comment="virtualbox-guest-x11-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166867" comment="virtualbox-host-kmp-default-5.1.30_k4.4.92_18.36-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166868" comment="virtualbox-host-source-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166869" comment="virtualbox-qt-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166870" comment="virtualbox-vnc-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166872" comment="virtualbox-websrv-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10407</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10407" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10407" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10407.html">CVE-2017-10407</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10407">SUSE bug 1064200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10407">SUSE bug 1064200</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166858" comment="python-virtualbox-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166859" comment="virtualbox-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166860" comment="virtualbox-devel-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166861" comment="virtualbox-guest-desktop-icons-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166862" comment="virtualbox-guest-kmp-default-5.1.30_k4.4.92_18.36-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166863" comment="virtualbox-guest-source-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166865" comment="virtualbox-guest-tools-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166866" comment="virtualbox-guest-x11-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166867" comment="virtualbox-host-kmp-default-5.1.30_k4.4.92_18.36-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166868" comment="virtualbox-host-source-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166869" comment="virtualbox-qt-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166870" comment="virtualbox-vnc-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166872" comment="virtualbox-websrv-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10408</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10408" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10408" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10408.html">CVE-2017-10408</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10408">SUSE bug 1064200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10408">SUSE bug 1064200</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166858" comment="python-virtualbox-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166859" comment="virtualbox-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166860" comment="virtualbox-devel-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166861" comment="virtualbox-guest-desktop-icons-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166862" comment="virtualbox-guest-kmp-default-5.1.30_k4.4.92_18.36-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166863" comment="virtualbox-guest-source-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166865" comment="virtualbox-guest-tools-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166866" comment="virtualbox-guest-x11-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166867" comment="virtualbox-host-kmp-default-5.1.30_k4.4.92_18.36-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166868" comment="virtualbox-host-source-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166869" comment="virtualbox-qt-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166870" comment="virtualbox-vnc-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166872" comment="virtualbox-websrv-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10428</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10428" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10428" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10428.html">CVE-2017-10428</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10428">SUSE bug 1064200</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10428">SUSE bug 1064200</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166858" comment="python-virtualbox-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166859" comment="virtualbox-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166860" comment="virtualbox-devel-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166861" comment="virtualbox-guest-desktop-icons-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166862" comment="virtualbox-guest-kmp-default-5.1.30_k4.4.92_18.36-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166863" comment="virtualbox-guest-source-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166865" comment="virtualbox-guest-tools-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166866" comment="virtualbox-guest-x11-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166867" comment="virtualbox-host-kmp-default-5.1.30_k4.4.92_18.36-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166868" comment="virtualbox-host-source-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166869" comment="virtualbox-qt-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166870" comment="virtualbox-vnc-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166872" comment="virtualbox-websrv-5.1.30-19.46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10664</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10664" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10664" source="CVE"/>
    <description>
    qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10664.html">CVE-2017-10664</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10664">SUSE bug 1046636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10664">SUSE bug 1046637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10664">SUSE bug 1046636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10664">SUSE bug 1046636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10664">SUSE bug 1046636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10664">SUSE bug 1046637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10664">SUSE bug 1046636</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10664">SUSE bug 1046637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10664">SUSE bug 1046636</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163455" comment="xen-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163456" comment="xen-devel-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163457" comment="xen-doc-html-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163458" comment="xen-libs-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163459" comment="xen-libs-32bit-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163460" comment="xen-tools-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163461" comment="xen-tools-domU-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10672</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10672" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10672" source="CVE"/>
    <description>
    Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10672.html">CVE-2017-10672</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1046848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10672">SUSE bug 1069732</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169914" comment="perl-XML-LibXML-2.0019-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152786" comment="perl-XML-LibXML is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710684" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10684</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10684" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10684" source="CVE"/>
    <description>
    In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10684.html">CVE-2017-10684</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10684">SUSE bug 1046858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10684">SUSE bug 1046858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10684">SUSE bug 1046858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10684">SUSE bug 1046858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10684">SUSE bug 1046858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10684">SUSE bug 1046858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10684">SUSE bug 1046858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10684">SUSE bug 1046858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10684">SUSE bug 1046858</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10684">SUSE bug 1046858</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161867" comment="libncurses5-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158856" comment="libncurses5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161868" comment="libncurses5-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158857" comment="libncurses5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161869" comment="libncurses6-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161870" comment="libncurses6-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158859" comment="libncurses6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161871" comment="ncurses-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158860" comment="ncurses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161872" comment="ncurses-devel-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158861" comment="ncurses-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161873" comment="ncurses-devel-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158862" comment="ncurses-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161874" comment="ncurses-utils-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161875" comment="tack-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158864" comment="tack is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161876" comment="terminfo-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161877" comment="terminfo-base-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10685</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10685" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10685" source="CVE"/>
    <description>
    In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10685.html">CVE-2017-10685</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10685">SUSE bug 1046853</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161867" comment="libncurses5-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158856" comment="libncurses5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161868" comment="libncurses5-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158857" comment="libncurses5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161869" comment="libncurses6-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161870" comment="libncurses6-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158859" comment="libncurses6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161871" comment="ncurses-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158860" comment="ncurses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161872" comment="ncurses-devel-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158861" comment="ncurses-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161873" comment="ncurses-devel-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158862" comment="ncurses-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161874" comment="ncurses-utils-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161875" comment="tack-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158864" comment="tack is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161876" comment="terminfo-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161877" comment="terminfo-base-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10686</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10686" source="CVE"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10686.html">CVE-2017-10686</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10686">SUSE bug 1047936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10686">SUSE bug 1047936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10686">SUSE bug 1047936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10686">SUSE bug 1047936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10686">SUSE bug 1047936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10686">SUSE bug 1047936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10686">SUSE bug 1047936</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161693" comment="nasm-2.10.09-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161694" comment="nasm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161695" comment="nasm-doc-2.10.09-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161696" comment="nasm-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10791</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10791" source="CVE"/>
    <description>
    There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10791.html">CVE-2017-10791</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10791">SUSE bug 1046998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10791">SUSE bug 1046998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10791">SUSE bug 1046998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10791">SUSE bug 1046998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10791">SUSE bug 1046998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10791">SUSE bug 1046998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10791">SUSE bug 1046998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10791">SUSE bug 1046998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163117" comment="pspp-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161698" comment="pspp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163118" comment="pspp-devel-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161700" comment="pspp-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10792</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10792" source="CVE"/>
    <description>
    There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10792.html">CVE-2017-10792</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10792">SUSE bug 1046997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10792">SUSE bug 1046997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10792">SUSE bug 1046997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10792">SUSE bug 1046997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10792">SUSE bug 1046997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10792">SUSE bug 1046997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10792">SUSE bug 1046997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10792">SUSE bug 1046997</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163117" comment="pspp-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161698" comment="pspp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163118" comment="pspp-devel-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161700" comment="pspp-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10799</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10799" source="CVE"/>
    <description>
    When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c, a denial of service (OOM) can occur in ReadDPXImage().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10799.html">CVE-2017-10799</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10799">SUSE bug 1047054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10799">SUSE bug 1047054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10799">SUSE bug 1047054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10799">SUSE bug 1047054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10799">SUSE bug 1047054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10799">SUSE bug 1047054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10799">SUSE bug 1047054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10799">SUSE bug 1047054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10799">SUSE bug 1047054</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168263" comment="GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168264" comment="GraphicsMagick-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168265" comment="libGraphicsMagick++-Q16-12-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168266" comment="libGraphicsMagick++-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168267" comment="libGraphicsMagick-Q16-3-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168268" comment="libGraphicsMagick3-config-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168269" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168270" comment="perl-GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10800</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10800" source="CVE"/>
    <description>
    When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service (OOM) in ReadMATImage() if the size specified for a MAT Object is larger than the actual amount of data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10800.html">CVE-2017-10800</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10800">SUSE bug 1047044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10806</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10806" source="CVE"/>
    <description>
    Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10806.html">CVE-2017-10806</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10806">SUSE bug 1047674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10806">SUSE bug 1047675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10806">SUSE bug 1047675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10806">SUSE bug 1047675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10806">SUSE bug 1047674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10806">SUSE bug 1047675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10806">SUSE bug 1047674</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10810</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10810" source="CVE"/>
    <description>
    Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows attackers to cause a denial of service (memory consumption) by triggering object-initialization failures.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10810.html">CVE-2017-10810</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10810">SUSE bug 1047277</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161638" comment="kernel-debug-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161639" comment="kernel-debug-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161640" comment="kernel-debug-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161641" comment="kernel-default-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161642" comment="kernel-default-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161643" comment="kernel-default-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161644" comment="kernel-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161645" comment="kernel-docs-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161646" comment="kernel-docs-html-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161647" comment="kernel-docs-pdf-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161648" comment="kernel-macros-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161649" comment="kernel-obs-build-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161650" comment="kernel-obs-qa-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161651" comment="kernel-source-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161652" comment="kernel-source-vanilla-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161653" comment="kernel-syms-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161654" comment="kernel-vanilla-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161655" comment="kernel-vanilla-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161656" comment="kernel-vanilla-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10911</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10911" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10911" source="CVE"/>
    <description>
    The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10911.html">CVE-2017-10911</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1042863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1043330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1042863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1042863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1043330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1043330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1043330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1042863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1042863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1042863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1057378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1057378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1057378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1057378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1042863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1057378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1057378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1057378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1057378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1042863</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10911">SUSE bug 1057378</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710912" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10912</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10912" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10912" source="CVE"/>
    <description>
    Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10912.html">CVE-2017-10912</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10912">SUSE bug 1042882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10912">SUSE bug 1042882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10912">SUSE bug 1042882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10912">SUSE bug 1042882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10912">SUSE bug 1042882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10912">SUSE bug 1042882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10912">SUSE bug 1042882</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158417" comment="xen-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158418" comment="xen-devel-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158419" comment="xen-doc-html-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158420" comment="xen-libs-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158421" comment="xen-libs-32bit-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158422" comment="xen-tools-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158423" comment="xen-tools-domU-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710913" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10913</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10913" source="CVE"/>
    <description>
    The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10913.html">CVE-2017-10913</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10913">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10913">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10913">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10913">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10913">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10913">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10913">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10913">SUSE bug 1042893</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158417" comment="xen-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158418" comment="xen-devel-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158419" comment="xen-doc-html-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158420" comment="xen-libs-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158421" comment="xen-libs-32bit-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158422" comment="xen-tools-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158423" comment="xen-tools-domU-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710914" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10914</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10914" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10914" source="CVE"/>
    <description>
    The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10914.html">CVE-2017-10914</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10914">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10914">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10914">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10914">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10914">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10914">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10914">SUSE bug 1042893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10914">SUSE bug 1042893</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158417" comment="xen-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158418" comment="xen-devel-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158419" comment="xen-doc-html-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158420" comment="xen-libs-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158421" comment="xen-libs-32bit-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158422" comment="xen-tools-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158423" comment="xen-tools-domU-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710915" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10915</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10915" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10915" source="CVE"/>
    <description>
    The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10915.html">CVE-2017-10915</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10915">SUSE bug 1042915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10915">SUSE bug 1042915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10915">SUSE bug 1042915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10915">SUSE bug 1042915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10915">SUSE bug 1042915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10915">SUSE bug 1042915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10915">SUSE bug 1042915</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158417" comment="xen-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158418" comment="xen-devel-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158419" comment="xen-doc-html-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158420" comment="xen-libs-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158421" comment="xen-libs-32bit-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158422" comment="xen-tools-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158423" comment="xen-tools-domU-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710917" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10917</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10917" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10917" source="CVE"/>
    <description>
    Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10917.html">CVE-2017-10917</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10917">SUSE bug 1042924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10917">SUSE bug 1042924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10917">SUSE bug 1042924</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10917">SUSE bug 1042924</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158417" comment="xen-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158418" comment="xen-devel-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158419" comment="xen-doc-html-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158420" comment="xen-libs-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158421" comment="xen-libs-32bit-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158422" comment="xen-tools-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158423" comment="xen-tools-domU-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710918" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10918</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10918" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10918" source="CVE"/>
    <description>
    Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10918.html">CVE-2017-10918</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10918">SUSE bug 1042931</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158417" comment="xen-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158418" comment="xen-devel-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158419" comment="xen-doc-html-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158420" comment="xen-libs-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158421" comment="xen-libs-32bit-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158422" comment="xen-tools-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158423" comment="xen-tools-domU-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710920" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10920</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10920" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10920" source="CVE"/>
    <description>
    The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 1.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10920.html">CVE-2017-10920</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10920">SUSE bug 1042938</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158417" comment="xen-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158418" comment="xen-devel-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158419" comment="xen-doc-html-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158420" comment="xen-libs-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158421" comment="xen-libs-32bit-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158422" comment="xen-tools-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158423" comment="xen-tools-domU-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710921" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10921</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10921" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10921" source="CVE"/>
    <description>
    The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10921.html">CVE-2017-10921</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10921">SUSE bug 1042938</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158417" comment="xen-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158418" comment="xen-devel-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158419" comment="xen-doc-html-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158420" comment="xen-libs-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158421" comment="xen-libs-32bit-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158422" comment="xen-tools-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158423" comment="xen-tools-domU-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710922" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10922</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10922" source="CVE"/>
    <description>
    The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service (loss of grant trackability), aka XSA-224 bug 3.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10922.html">CVE-2017-10922</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10922">SUSE bug 1042938</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158417" comment="xen-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158418" comment="xen-devel-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158419" comment="xen-doc-html-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158420" comment="xen-libs-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158421" comment="xen-libs-32bit-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158422" comment="xen-tools-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158423" comment="xen-tools-domU-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10965</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10965" source="CVE"/>
    <description>
    An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10965.html">CVE-2017-10965</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10965">SUSE bug 1047709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10965">SUSE bug 1047709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158396" comment="irssi-1.0.4-14.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158397" comment="irssi-devel-1.0.4-14.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10966</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10966" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10966" source="CVE"/>
    <description>
    An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10966.html">CVE-2017-10966</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10966">SUSE bug 1047709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158396" comment="irssi-1.0.4-14.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158397" comment="irssi-devel-1.0.4-14.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10970</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10970" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10970" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the die_html_input_error function in lib/html_validate.php.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10970.html">CVE-2017-10970</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10970">SUSE bug 1047512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10970">SUSE bug 1047512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10970">SUSE bug 1047512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10970">SUSE bug 1047512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10970">SUSE bug 1047512</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10970">SUSE bug 1047512</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161570" comment="cacti-1.1.16-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161571" comment="cacti-doc-1.1.16-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161572" comment="cacti-spine-1.1.16-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710971" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10971</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10971" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10971" source="CVE"/>
    <description>
    In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10971.html">CVE-2017-10971</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1047730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10971">SUSE bug 1035283</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158874" comment="xorg-x11-server-7.6_1.18.3-12.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158875" comment="xorg-x11-server-extra-7.6_1.18.3-12.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158876" comment="xorg-x11-server-sdk-7.6_1.18.3-12.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158877" comment="xorg-x11-server-source-7.6_1.18.3-12.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710972" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10972</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10972" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10972" source="CVE"/>
    <description>
    Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10972.html">CVE-2017-10972</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1047730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10972">SUSE bug 1035283</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158874" comment="xorg-x11-server-7.6_1.18.3-12.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158875" comment="xorg-x11-server-extra-7.6_1.18.3-12.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158876" comment="xorg-x11-server-sdk-7.6_1.18.3-12.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158877" comment="xorg-x11-server-source-7.6_1.18.3-12.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10978</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10978" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10978" source="CVE"/>
    <description>
    An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10978.html">CVE-2017-10978</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10978">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10978">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10978">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10978">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10978">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10978">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10978">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10978">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10978">SUSE bug 1049086</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166050" comment="freeradius-server-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157108" comment="freeradius-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166051" comment="freeradius-server-devel-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157109" comment="freeradius-server-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166052" comment="freeradius-server-doc-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157110" comment="freeradius-server-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166053" comment="freeradius-server-krb5-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157111" comment="freeradius-server-krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166054" comment="freeradius-server-ldap-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157112" comment="freeradius-server-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166055" comment="freeradius-server-libs-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157113" comment="freeradius-server-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166056" comment="freeradius-server-mysql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157114" comment="freeradius-server-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166057" comment="freeradius-server-perl-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157115" comment="freeradius-server-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166058" comment="freeradius-server-postgresql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157116" comment="freeradius-server-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166059" comment="freeradius-server-python-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157117" comment="freeradius-server-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166060" comment="freeradius-server-sqlite-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157118" comment="freeradius-server-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166061" comment="freeradius-server-utils-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157119" comment="freeradius-server-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10983</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10983" source="CVE"/>
    <description>
    An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10983.html">CVE-2017-10983</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10983">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10983">SUSE bug 1049086</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166050" comment="freeradius-server-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157108" comment="freeradius-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166051" comment="freeradius-server-devel-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157109" comment="freeradius-server-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166052" comment="freeradius-server-doc-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157110" comment="freeradius-server-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166053" comment="freeradius-server-krb5-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157111" comment="freeradius-server-krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166054" comment="freeradius-server-ldap-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157112" comment="freeradius-server-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166055" comment="freeradius-server-libs-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157113" comment="freeradius-server-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166056" comment="freeradius-server-mysql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157114" comment="freeradius-server-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166057" comment="freeradius-server-perl-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157115" comment="freeradius-server-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166058" comment="freeradius-server-postgresql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157116" comment="freeradius-server-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166059" comment="freeradius-server-python-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157117" comment="freeradius-server-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166060" comment="freeradius-server-sqlite-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157118" comment="freeradius-server-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166061" comment="freeradius-server-utils-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157119" comment="freeradius-server-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710984" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10984</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10984" source="CVE"/>
    <description>
    An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10984.html">CVE-2017-10984</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10984">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10984">SUSE bug 1049086</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166050" comment="freeradius-server-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157108" comment="freeradius-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166051" comment="freeradius-server-devel-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157109" comment="freeradius-server-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166052" comment="freeradius-server-doc-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157110" comment="freeradius-server-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166053" comment="freeradius-server-krb5-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157111" comment="freeradius-server-krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166054" comment="freeradius-server-ldap-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157112" comment="freeradius-server-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166055" comment="freeradius-server-libs-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157113" comment="freeradius-server-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166056" comment="freeradius-server-mysql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157114" comment="freeradius-server-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166057" comment="freeradius-server-perl-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157115" comment="freeradius-server-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166058" comment="freeradius-server-postgresql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157116" comment="freeradius-server-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166059" comment="freeradius-server-python-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157117" comment="freeradius-server-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166060" comment="freeradius-server-sqlite-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157118" comment="freeradius-server-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166061" comment="freeradius-server-utils-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157119" comment="freeradius-server-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10985</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10985" source="CVE"/>
    <description>
    An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10985.html">CVE-2017-10985</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10985">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10985">SUSE bug 1049086</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166050" comment="freeradius-server-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157108" comment="freeradius-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166051" comment="freeradius-server-devel-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157109" comment="freeradius-server-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166052" comment="freeradius-server-doc-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157110" comment="freeradius-server-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166053" comment="freeradius-server-krb5-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157111" comment="freeradius-server-krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166054" comment="freeradius-server-ldap-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157112" comment="freeradius-server-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166055" comment="freeradius-server-libs-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157113" comment="freeradius-server-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166056" comment="freeradius-server-mysql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157114" comment="freeradius-server-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166057" comment="freeradius-server-perl-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157115" comment="freeradius-server-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166058" comment="freeradius-server-postgresql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157116" comment="freeradius-server-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166059" comment="freeradius-server-python-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157117" comment="freeradius-server-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166060" comment="freeradius-server-sqlite-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157118" comment="freeradius-server-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166061" comment="freeradius-server-utils-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157119" comment="freeradius-server-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10986</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10986" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10986" source="CVE"/>
    <description>
    An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10986.html">CVE-2017-10986</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10986">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10986">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10986">SUSE bug 1049086</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166050" comment="freeradius-server-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157108" comment="freeradius-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166051" comment="freeradius-server-devel-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157109" comment="freeradius-server-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166052" comment="freeradius-server-doc-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157110" comment="freeradius-server-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166053" comment="freeradius-server-krb5-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157111" comment="freeradius-server-krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166054" comment="freeradius-server-ldap-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157112" comment="freeradius-server-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166055" comment="freeradius-server-libs-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157113" comment="freeradius-server-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166056" comment="freeradius-server-mysql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157114" comment="freeradius-server-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166057" comment="freeradius-server-perl-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157115" comment="freeradius-server-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166058" comment="freeradius-server-postgresql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157116" comment="freeradius-server-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166059" comment="freeradius-server-python-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157117" comment="freeradius-server-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166060" comment="freeradius-server-sqlite-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157118" comment="freeradius-server-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166061" comment="freeradius-server-utils-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157119" comment="freeradius-server-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201710987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-10987</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-10987" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10987" source="CVE"/>
    <description>
    An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-10987.html">CVE-2017-10987</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10987">SUSE bug 1049086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-10987">SUSE bug 1049086</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166050" comment="freeradius-server-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157108" comment="freeradius-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166051" comment="freeradius-server-devel-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157109" comment="freeradius-server-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166052" comment="freeradius-server-doc-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157110" comment="freeradius-server-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166053" comment="freeradius-server-krb5-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157111" comment="freeradius-server-krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166054" comment="freeradius-server-ldap-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157112" comment="freeradius-server-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166055" comment="freeradius-server-libs-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157113" comment="freeradius-server-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166056" comment="freeradius-server-mysql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157114" comment="freeradius-server-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166057" comment="freeradius-server-perl-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157115" comment="freeradius-server-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166058" comment="freeradius-server-postgresql-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157116" comment="freeradius-server-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166059" comment="freeradius-server-python-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157117" comment="freeradius-server-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166060" comment="freeradius-server-sqlite-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157118" comment="freeradius-server-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166061" comment="freeradius-server-utils-3.0.12-2.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157119" comment="freeradius-server-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11103</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11103" source="CVE"/>
    <description>
    Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11103.html">CVE-2017-11103</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11103">SUSE bug 1048278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11103">SUSE bug 1048278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11103">SUSE bug 1048278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11103">SUSE bug 1048278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11103">SUSE bug 1048278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11103">SUSE bug 1048278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11103">SUSE bug 1048278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11103">SUSE bug 1048278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11103">SUSE bug 1048278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11103">SUSE bug 1048278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11103">SUSE bug 1048278</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162038" comment="libheimdal-7.4.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162039" comment="libheimdal is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162040" comment="libheimdal-devel-7.4.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162041" comment="libheimdal-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11108</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11108" source="CVE"/>
    <description>
    tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11108.html">CVE-2017-11108</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11108">SUSE bug 1047873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11108">SUSE bug 1047873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11108">SUSE bug 1047873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11108">SUSE bug 1047873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11108">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11108">SUSE bug 1047873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11108">SUSE bug 1047873</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11110</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11110" source="CVE"/>
    <description>
    The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11110.html">CVE-2017-11110</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11110">SUSE bug 1047877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11110">SUSE bug 1047877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11110">SUSE bug 1047877</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158920" comment="catdoc-0.95-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158921" comment="catdoc is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11111</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11111" source="CVE"/>
    <description>
    In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11111.html">CVE-2017-11111</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11111">SUSE bug 1047925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11111">SUSE bug 1047925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11111">SUSE bug 1047925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11111">SUSE bug 1047925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11111">SUSE bug 1047925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11111">SUSE bug 1047925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11111">SUSE bug 1073798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11111">SUSE bug 1073798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11111">SUSE bug 1073798</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161693" comment="nasm-2.10.09-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161694" comment="nasm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161695" comment="nasm-doc-2.10.09-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161696" comment="nasm-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11112</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11112" source="CVE"/>
    <description>
    In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11112.html">CVE-2017-11112</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11112">SUSE bug 1047964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11112">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11112">SUSE bug 1047964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11112">SUSE bug 1047964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11112">SUSE bug 1047964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11112">SUSE bug 1047964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11112">SUSE bug 1047964</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11112">SUSE bug 1047964</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161867" comment="libncurses5-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158856" comment="libncurses5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161868" comment="libncurses5-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158857" comment="libncurses5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161869" comment="libncurses6-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161870" comment="libncurses6-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158859" comment="libncurses6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161871" comment="ncurses-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158860" comment="ncurses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161872" comment="ncurses-devel-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158861" comment="ncurses-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161873" comment="ncurses-devel-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158862" comment="ncurses-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161874" comment="ncurses-utils-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161875" comment="tack-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158864" comment="tack is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161876" comment="terminfo-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161877" comment="terminfo-base-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11113</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11113" source="CVE"/>
    <description>
    In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11113.html">CVE-2017-11113</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11113">SUSE bug 1047965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11113">SUSE bug 1046853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11113">SUSE bug 1047965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11113">SUSE bug 1047965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11113">SUSE bug 1047965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11113">SUSE bug 1047965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11113">SUSE bug 1047965</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11113">SUSE bug 1047965</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161867" comment="libncurses5-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158856" comment="libncurses5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161868" comment="libncurses5-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158857" comment="libncurses5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161869" comment="libncurses6-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161870" comment="libncurses6-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158859" comment="libncurses6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161871" comment="ncurses-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158860" comment="ncurses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161872" comment="ncurses-devel-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158861" comment="ncurses-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161873" comment="ncurses-devel-32bit-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158862" comment="ncurses-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161874" comment="ncurses-utils-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161875" comment="tack-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158864" comment="tack is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161876" comment="terminfo-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161877" comment="terminfo-base-5.9-55.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11141</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11141" source="CVE"/>
    <description>
    The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect ordering of a SetImageExtent call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11141.html">CVE-2017-11141</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11141">SUSE bug 1047898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11141">SUSE bug 1047898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11141">SUSE bug 1047898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11141">SUSE bug 1047898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11141">SUSE bug 1047898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11141">SUSE bug 1047898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11141">SUSE bug 1047898</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11141">SUSE bug 1047898</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11142" source="CVE"/>
    <description>
    In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial of service attack by injecting long form variables, related to main/php_variables.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11142.html">CVE-2017-11142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11142">SUSE bug 1048100</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163059" comment="apache2-mod_php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163060" comment="php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163061" comment="php7-bcmath-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163062" comment="php7-bz2-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163063" comment="php7-calendar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163064" comment="php7-ctype-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163065" comment="php7-curl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163066" comment="php7-dba-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163067" comment="php7-devel-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163068" comment="php7-dom-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163069" comment="php7-enchant-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163070" comment="php7-exif-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163071" comment="php7-fastcgi-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163072" comment="php7-fileinfo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163073" comment="php7-firebird-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163074" comment="php7-fpm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163075" comment="php7-ftp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163076" comment="php7-gd-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163077" comment="php7-gettext-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163078" comment="php7-gmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163079" comment="php7-iconv-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163080" comment="php7-imap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163081" comment="php7-intl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163082" comment="php7-json-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163083" comment="php7-ldap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163084" comment="php7-mbstring-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163085" comment="php7-mcrypt-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163086" comment="php7-mysql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163087" comment="php7-odbc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163088" comment="php7-opcache-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163089" comment="php7-openssl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163090" comment="php7-pcntl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163091" comment="php7-pdo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163092" comment="php7-pear-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163093" comment="php7-pear-Archive_Tar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163094" comment="php7-pgsql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163095" comment="php7-phar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163096" comment="php7-posix-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163097" comment="php7-pspell-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163098" comment="php7-readline-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163099" comment="php7-shmop-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163100" comment="php7-snmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163101" comment="php7-soap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163102" comment="php7-sockets-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163103" comment="php7-sqlite-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163104" comment="php7-sysvmsg-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163105" comment="php7-sysvsem-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163106" comment="php7-sysvshm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163107" comment="php7-tidy-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163108" comment="php7-tokenizer-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163109" comment="php7-wddx-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163110" comment="php7-xmlreader-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163111" comment="php7-xmlrpc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163112" comment="php7-xmlwriter-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163113" comment="php7-xsl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163114" comment="php7-zip-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163115" comment="php7-zlib-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11143" source="CVE"/>
    <description>
    In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for deserialization to crash the PHP interpreter, related to an invalid free for an empty boolean element in ext/wddx/wddx.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11143.html">CVE-2017-11143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11143">SUSE bug 1048097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11143">SUSE bug 1048097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11143">SUSE bug 1048097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11143">SUSE bug 1048097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11143">SUSE bug 1048097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11143">SUSE bug 1048097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11143">SUSE bug 1048097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11143">SUSE bug 1048097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11143">SUSE bug 1048097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11143">SUSE bug 1048097</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163225" comment="apache2-mod_php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163226" comment="php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163227" comment="php5-bcmath-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163228" comment="php5-bz2-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163229" comment="php5-calendar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163230" comment="php5-ctype-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163231" comment="php5-curl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163232" comment="php5-dba-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163233" comment="php5-devel-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163234" comment="php5-dom-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163235" comment="php5-enchant-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163236" comment="php5-exif-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163237" comment="php5-fastcgi-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163238" comment="php5-fileinfo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163239" comment="php5-firebird-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163240" comment="php5-fpm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163241" comment="php5-ftp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163242" comment="php5-gd-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163243" comment="php5-gettext-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163244" comment="php5-gmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163245" comment="php5-iconv-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163246" comment="php5-imap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163247" comment="php5-intl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163248" comment="php5-json-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163249" comment="php5-ldap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163250" comment="php5-mbstring-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163251" comment="php5-mcrypt-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163252" comment="php5-mssql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163253" comment="php5-mysql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163254" comment="php5-odbc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163255" comment="php5-opcache-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163256" comment="php5-openssl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163257" comment="php5-pcntl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163258" comment="php5-pdo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163259" comment="php5-pear-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163260" comment="php5-pgsql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163261" comment="php5-phar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163262" comment="php5-posix-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163263" comment="php5-pspell-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163264" comment="php5-readline-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163265" comment="php5-shmop-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163266" comment="php5-snmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163267" comment="php5-soap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163268" comment="php5-sockets-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163269" comment="php5-sqlite-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163270" comment="php5-suhosin-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163271" comment="php5-sysvmsg-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163272" comment="php5-sysvsem-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163273" comment="php5-sysvshm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163274" comment="php5-tidy-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163275" comment="php5-tokenizer-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163276" comment="php5-wddx-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163277" comment="php5-xmlreader-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163278" comment="php5-xmlrpc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163279" comment="php5-xmlwriter-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163280" comment="php5-xsl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163281" comment="php5-zip-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163282" comment="php5-zlib-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11144</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11144" source="CVE"/>
    <description>
    In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11144.html">CVE-2017-11144</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11144">SUSE bug 1048096</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163225" comment="apache2-mod_php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163059" comment="apache2-mod_php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163226" comment="php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163227" comment="php5-bcmath-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163228" comment="php5-bz2-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163229" comment="php5-calendar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163230" comment="php5-ctype-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163231" comment="php5-curl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163232" comment="php5-dba-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163233" comment="php5-devel-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163234" comment="php5-dom-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163235" comment="php5-enchant-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163236" comment="php5-exif-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163237" comment="php5-fastcgi-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163238" comment="php5-fileinfo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163239" comment="php5-firebird-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163240" comment="php5-fpm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163241" comment="php5-ftp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163242" comment="php5-gd-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163243" comment="php5-gettext-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163244" comment="php5-gmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163245" comment="php5-iconv-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163246" comment="php5-imap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163247" comment="php5-intl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163248" comment="php5-json-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163249" comment="php5-ldap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163250" comment="php5-mbstring-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163251" comment="php5-mcrypt-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163252" comment="php5-mssql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163253" comment="php5-mysql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163254" comment="php5-odbc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163255" comment="php5-opcache-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163256" comment="php5-openssl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163257" comment="php5-pcntl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163258" comment="php5-pdo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163259" comment="php5-pear-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163260" comment="php5-pgsql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163261" comment="php5-phar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163262" comment="php5-posix-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163263" comment="php5-pspell-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163264" comment="php5-readline-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163265" comment="php5-shmop-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163266" comment="php5-snmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163267" comment="php5-soap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163268" comment="php5-sockets-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163269" comment="php5-sqlite-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163270" comment="php5-suhosin-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163271" comment="php5-sysvmsg-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163272" comment="php5-sysvsem-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163273" comment="php5-sysvshm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163274" comment="php5-tidy-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163275" comment="php5-tokenizer-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163276" comment="php5-wddx-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163277" comment="php5-xmlreader-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163278" comment="php5-xmlrpc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163279" comment="php5-xmlwriter-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163280" comment="php5-xsl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163281" comment="php5-zip-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163282" comment="php5-zlib-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163060" comment="php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163061" comment="php7-bcmath-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163062" comment="php7-bz2-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163063" comment="php7-calendar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163064" comment="php7-ctype-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163065" comment="php7-curl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163066" comment="php7-dba-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163067" comment="php7-devel-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163068" comment="php7-dom-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163069" comment="php7-enchant-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163070" comment="php7-exif-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163071" comment="php7-fastcgi-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163072" comment="php7-fileinfo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163073" comment="php7-firebird-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163074" comment="php7-fpm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163075" comment="php7-ftp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163076" comment="php7-gd-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163077" comment="php7-gettext-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163078" comment="php7-gmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163079" comment="php7-iconv-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163080" comment="php7-imap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163081" comment="php7-intl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163082" comment="php7-json-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163083" comment="php7-ldap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163084" comment="php7-mbstring-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163085" comment="php7-mcrypt-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163086" comment="php7-mysql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163087" comment="php7-odbc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163088" comment="php7-opcache-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163089" comment="php7-openssl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163090" comment="php7-pcntl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163091" comment="php7-pdo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163092" comment="php7-pear-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163093" comment="php7-pear-Archive_Tar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163094" comment="php7-pgsql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163095" comment="php7-phar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163096" comment="php7-posix-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163097" comment="php7-pspell-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163098" comment="php7-readline-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163099" comment="php7-shmop-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163100" comment="php7-snmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163101" comment="php7-soap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163102" comment="php7-sockets-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163103" comment="php7-sqlite-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163104" comment="php7-sysvmsg-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163105" comment="php7-sysvsem-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163106" comment="php7-sysvshm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163107" comment="php7-tidy-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163108" comment="php7-tokenizer-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163109" comment="php7-wddx-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163110" comment="php7-xmlreader-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163111" comment="php7-xmlrpc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163112" comment="php7-xmlwriter-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163113" comment="php7-xsl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163114" comment="php7-zip-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163115" comment="php7-zlib-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711145" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11145</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11145" source="CVE"/>
    <description>
    In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: the correct fix is in the e8b7698f5ee757ce2c8bd10a192a491a498f891c commit, not the bd77ac90d3bdf31ce2a5251ad92e9e75 gist.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11145.html">CVE-2017-11145</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1067441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1067441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1067441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11145">SUSE bug 1067441</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163225" comment="apache2-mod_php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163059" comment="apache2-mod_php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163226" comment="php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163227" comment="php5-bcmath-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163228" comment="php5-bz2-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163229" comment="php5-calendar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163230" comment="php5-ctype-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163231" comment="php5-curl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163232" comment="php5-dba-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163233" comment="php5-devel-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163234" comment="php5-dom-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163235" comment="php5-enchant-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163236" comment="php5-exif-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163237" comment="php5-fastcgi-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163238" comment="php5-fileinfo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163239" comment="php5-firebird-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163240" comment="php5-fpm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163241" comment="php5-ftp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163242" comment="php5-gd-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163243" comment="php5-gettext-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163244" comment="php5-gmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163245" comment="php5-iconv-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163246" comment="php5-imap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163247" comment="php5-intl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163248" comment="php5-json-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163249" comment="php5-ldap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163250" comment="php5-mbstring-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163251" comment="php5-mcrypt-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163252" comment="php5-mssql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163253" comment="php5-mysql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163254" comment="php5-odbc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163255" comment="php5-opcache-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163256" comment="php5-openssl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163257" comment="php5-pcntl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163258" comment="php5-pdo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163259" comment="php5-pear-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163260" comment="php5-pgsql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163261" comment="php5-phar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163262" comment="php5-posix-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163263" comment="php5-pspell-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163264" comment="php5-readline-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163265" comment="php5-shmop-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163266" comment="php5-snmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163267" comment="php5-soap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163268" comment="php5-sockets-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163269" comment="php5-sqlite-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163270" comment="php5-suhosin-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163271" comment="php5-sysvmsg-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163272" comment="php5-sysvsem-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163273" comment="php5-sysvshm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163274" comment="php5-tidy-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163275" comment="php5-tokenizer-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163276" comment="php5-wddx-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163277" comment="php5-xmlreader-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163278" comment="php5-xmlrpc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163279" comment="php5-xmlwriter-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163280" comment="php5-xsl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163281" comment="php5-zip-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163282" comment="php5-zlib-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163060" comment="php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163061" comment="php7-bcmath-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163062" comment="php7-bz2-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163063" comment="php7-calendar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163064" comment="php7-ctype-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163065" comment="php7-curl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163066" comment="php7-dba-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163067" comment="php7-devel-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163068" comment="php7-dom-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163069" comment="php7-enchant-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163070" comment="php7-exif-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163071" comment="php7-fastcgi-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163072" comment="php7-fileinfo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163073" comment="php7-firebird-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163074" comment="php7-fpm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163075" comment="php7-ftp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163076" comment="php7-gd-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163077" comment="php7-gettext-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163078" comment="php7-gmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163079" comment="php7-iconv-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163080" comment="php7-imap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163081" comment="php7-intl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163082" comment="php7-json-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163083" comment="php7-ldap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163084" comment="php7-mbstring-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163085" comment="php7-mcrypt-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163086" comment="php7-mysql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163087" comment="php7-odbc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163088" comment="php7-opcache-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163089" comment="php7-openssl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163090" comment="php7-pcntl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163091" comment="php7-pdo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163092" comment="php7-pear-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163093" comment="php7-pear-Archive_Tar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163094" comment="php7-pgsql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163095" comment="php7-phar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163096" comment="php7-posix-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163097" comment="php7-pspell-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163098" comment="php7-readline-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163099" comment="php7-shmop-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163100" comment="php7-snmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163101" comment="php7-soap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163102" comment="php7-sockets-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163103" comment="php7-sqlite-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163104" comment="php7-sysvmsg-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163105" comment="php7-sysvsem-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163106" comment="php7-sysvshm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163107" comment="php7-tidy-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163108" comment="php7-tokenizer-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163109" comment="php7-wddx-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163110" comment="php7-xmlreader-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163111" comment="php7-xmlrpc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163112" comment="php7-xmlwriter-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163113" comment="php7-xsl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163114" comment="php7-zip-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163115" comment="php7-zlib-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11146</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11146" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not an independently fixable security issue relative to CVE-2017-11145.  Notes: none.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11146.html">CVE-2017-11146</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11146">SUSE bug 1048112</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163225" comment="apache2-mod_php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163059" comment="apache2-mod_php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163226" comment="php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163227" comment="php5-bcmath-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163228" comment="php5-bz2-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163229" comment="php5-calendar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163230" comment="php5-ctype-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163231" comment="php5-curl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163232" comment="php5-dba-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163233" comment="php5-devel-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163234" comment="php5-dom-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163235" comment="php5-enchant-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163236" comment="php5-exif-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163237" comment="php5-fastcgi-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163238" comment="php5-fileinfo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163239" comment="php5-firebird-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163240" comment="php5-fpm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163241" comment="php5-ftp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163242" comment="php5-gd-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163243" comment="php5-gettext-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163244" comment="php5-gmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163245" comment="php5-iconv-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163246" comment="php5-imap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163247" comment="php5-intl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163248" comment="php5-json-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163249" comment="php5-ldap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163250" comment="php5-mbstring-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163251" comment="php5-mcrypt-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163252" comment="php5-mssql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163253" comment="php5-mysql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163254" comment="php5-odbc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163255" comment="php5-opcache-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163256" comment="php5-openssl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163257" comment="php5-pcntl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163258" comment="php5-pdo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163259" comment="php5-pear-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163260" comment="php5-pgsql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163261" comment="php5-phar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163262" comment="php5-posix-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163263" comment="php5-pspell-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163264" comment="php5-readline-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163265" comment="php5-shmop-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163266" comment="php5-snmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163267" comment="php5-soap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163268" comment="php5-sockets-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163269" comment="php5-sqlite-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163270" comment="php5-suhosin-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163271" comment="php5-sysvmsg-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163272" comment="php5-sysvsem-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163273" comment="php5-sysvshm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163274" comment="php5-tidy-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163275" comment="php5-tokenizer-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163276" comment="php5-wddx-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163277" comment="php5-xmlreader-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163278" comment="php5-xmlrpc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163279" comment="php5-xmlwriter-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163280" comment="php5-xsl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163281" comment="php5-zip-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163282" comment="php5-zlib-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163060" comment="php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163061" comment="php7-bcmath-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163062" comment="php7-bz2-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163063" comment="php7-calendar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163064" comment="php7-ctype-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163065" comment="php7-curl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163066" comment="php7-dba-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163067" comment="php7-devel-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163068" comment="php7-dom-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163069" comment="php7-enchant-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163070" comment="php7-exif-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163071" comment="php7-fastcgi-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163072" comment="php7-fileinfo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163073" comment="php7-firebird-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163074" comment="php7-fpm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163075" comment="php7-ftp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163076" comment="php7-gd-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163077" comment="php7-gettext-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163078" comment="php7-gmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163079" comment="php7-iconv-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163080" comment="php7-imap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163081" comment="php7-intl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163082" comment="php7-json-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163083" comment="php7-ldap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163084" comment="php7-mbstring-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163085" comment="php7-mcrypt-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163086" comment="php7-mysql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163087" comment="php7-odbc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163088" comment="php7-opcache-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163089" comment="php7-openssl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163090" comment="php7-pcntl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163091" comment="php7-pdo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163092" comment="php7-pear-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163093" comment="php7-pear-Archive_Tar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163094" comment="php7-pgsql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163095" comment="php7-phar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163096" comment="php7-posix-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163097" comment="php7-pspell-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163098" comment="php7-readline-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163099" comment="php7-shmop-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163100" comment="php7-snmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163101" comment="php7-soap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163102" comment="php7-sockets-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163103" comment="php7-sqlite-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163104" comment="php7-sysvmsg-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163105" comment="php7-sysvsem-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163106" comment="php7-sysvshm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163107" comment="php7-tidy-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163108" comment="php7-tokenizer-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163109" comment="php7-wddx-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163110" comment="php7-xmlreader-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163111" comment="php7-xmlrpc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163112" comment="php7-xmlwriter-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163113" comment="php7-xsl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163114" comment="php7-zip-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163115" comment="php7-zlib-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11147</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11147" source="CVE"/>
    <description>
    In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11147.html">CVE-2017-11147</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11147">SUSE bug 1048094</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163225" comment="apache2-mod_php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163059" comment="apache2-mod_php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163226" comment="php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163227" comment="php5-bcmath-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163228" comment="php5-bz2-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163229" comment="php5-calendar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163230" comment="php5-ctype-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163231" comment="php5-curl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163232" comment="php5-dba-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163233" comment="php5-devel-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163234" comment="php5-dom-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163235" comment="php5-enchant-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163236" comment="php5-exif-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163237" comment="php5-fastcgi-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163238" comment="php5-fileinfo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163239" comment="php5-firebird-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163240" comment="php5-fpm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163241" comment="php5-ftp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163242" comment="php5-gd-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163243" comment="php5-gettext-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163244" comment="php5-gmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163245" comment="php5-iconv-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163246" comment="php5-imap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163247" comment="php5-intl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163248" comment="php5-json-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163249" comment="php5-ldap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163250" comment="php5-mbstring-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163251" comment="php5-mcrypt-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163252" comment="php5-mssql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163253" comment="php5-mysql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163254" comment="php5-odbc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163255" comment="php5-opcache-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163256" comment="php5-openssl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163257" comment="php5-pcntl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163258" comment="php5-pdo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163259" comment="php5-pear-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163260" comment="php5-pgsql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163261" comment="php5-phar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163262" comment="php5-posix-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163263" comment="php5-pspell-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163264" comment="php5-readline-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163265" comment="php5-shmop-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163266" comment="php5-snmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163267" comment="php5-soap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163268" comment="php5-sockets-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163269" comment="php5-sqlite-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163270" comment="php5-suhosin-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163271" comment="php5-sysvmsg-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163272" comment="php5-sysvsem-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163273" comment="php5-sysvshm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163274" comment="php5-tidy-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163275" comment="php5-tokenizer-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163276" comment="php5-wddx-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163277" comment="php5-xmlreader-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163278" comment="php5-xmlrpc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163279" comment="php5-xmlwriter-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163280" comment="php5-xsl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163281" comment="php5-zip-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163282" comment="php5-zlib-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163060" comment="php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163061" comment="php7-bcmath-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163062" comment="php7-bz2-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163063" comment="php7-calendar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163064" comment="php7-ctype-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163065" comment="php7-curl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163066" comment="php7-dba-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163067" comment="php7-devel-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163068" comment="php7-dom-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163069" comment="php7-enchant-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163070" comment="php7-exif-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163071" comment="php7-fastcgi-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163072" comment="php7-fileinfo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163073" comment="php7-firebird-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163074" comment="php7-fpm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163075" comment="php7-ftp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163076" comment="php7-gd-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163077" comment="php7-gettext-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163078" comment="php7-gmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163079" comment="php7-iconv-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163080" comment="php7-imap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163081" comment="php7-intl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163082" comment="php7-json-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163083" comment="php7-ldap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163084" comment="php7-mbstring-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163085" comment="php7-mcrypt-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163086" comment="php7-mysql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163087" comment="php7-odbc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163088" comment="php7-opcache-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163089" comment="php7-openssl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163090" comment="php7-pcntl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163091" comment="php7-pdo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163092" comment="php7-pear-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163093" comment="php7-pear-Archive_Tar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163094" comment="php7-pgsql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163095" comment="php7-phar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163096" comment="php7-posix-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163097" comment="php7-pspell-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163098" comment="php7-readline-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163099" comment="php7-shmop-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163100" comment="php7-snmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163101" comment="php7-soap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163102" comment="php7-sockets-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163103" comment="php7-sqlite-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163104" comment="php7-sysvmsg-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163105" comment="php7-sysvsem-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163106" comment="php7-sysvshm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163107" comment="php7-tidy-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163108" comment="php7-tokenizer-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163109" comment="php7-wddx-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163110" comment="php7-xmlreader-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163111" comment="php7-xmlrpc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163112" comment="php7-xmlwriter-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163113" comment="php7-xsl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163114" comment="php7-zip-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163115" comment="php7-zlib-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11163</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11163" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti 1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via specially crafted HTTP Referer headers, related to the $cancel_url variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11163.html">CVE-2017-11163</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11163">SUSE bug 1048102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11163">SUSE bug 1051633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11163">SUSE bug 1048102</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11163">SUSE bug 1048102</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161570" comment="cacti-1.1.16-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161571" comment="cacti-doc-1.1.16-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161572" comment="cacti-spine-1.1.16-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11188</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11188" source="CVE"/>
    <description>
    The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11188.html">CVE-2017-11188</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11188">SUSE bug 1048457</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711334" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11334</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11334" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11334" source="CVE"/>
    <description>
    The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11334.html">CVE-2017-11334</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11334">SUSE bug 1048902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11334">SUSE bug 1048920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11334">SUSE bug 1048902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11334">SUSE bug 1048902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11334">SUSE bug 1048902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11334">SUSE bug 1048920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11334">SUSE bug 1048902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11334">SUSE bug 1048902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11334">SUSE bug 1048920</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11334">SUSE bug 1048902</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11399</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11399" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11399" source="CVE"/>
    <description>
    Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11399.html">CVE-2017-11399</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11399">SUSE bug 1049095</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11399">SUSE bug 1049095</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11403</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11403" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11403" source="CVE"/>
    <description>
    The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11403.html">CVE-2017-11403</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1053809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1049072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1053919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11403">SUSE bug 1084062</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159494" comment="GraphicsMagick-1.3.25-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159495" comment="GraphicsMagick-devel-1.3.25-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162370" comment="ImageMagick-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162371" comment="ImageMagick-devel-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162372" comment="ImageMagick-devel-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162373" comment="ImageMagick-doc-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162374" comment="ImageMagick-extra-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159496" comment="libGraphicsMagick++-Q16-12-1.3.25-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159497" comment="libGraphicsMagick++-devel-1.3.25-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159498" comment="libGraphicsMagick-Q16-3-1.3.25-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159499" comment="libGraphicsMagick3-config-1.3.25-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159500" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162375" comment="libMagick++-6_Q16-3-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162376" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162377" comment="libMagick++-devel-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162378" comment="libMagick++-devel-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162379" comment="libMagickCore-6_Q16-1-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162380" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162381" comment="libMagickWand-6_Q16-1-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162382" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159501" comment="perl-GraphicsMagick-1.3.25-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162383" comment="perl-PerlMagick-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11406</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11406" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11406.html">CVE-2017-11406</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11406">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11406">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11406">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11406">SUSE bug 1049255</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159468" comment="wireshark-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159469" comment="wireshark-devel-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159470" comment="wireshark-ui-gtk-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159471" comment="wireshark-ui-qt-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11407</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11407" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11407" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11407.html">CVE-2017-11407</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11407">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11407">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11407">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11407">SUSE bug 1049255</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159468" comment="wireshark-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159469" comment="wireshark-devel-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159470" comment="wireshark-ui-gtk-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159471" comment="wireshark-ui-qt-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11408</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11408" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11408" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11408.html">CVE-2017-11408</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11408">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11408">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11408">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11408">SUSE bug 1049255</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159468" comment="wireshark-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159469" comment="wireshark-devel-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159470" comment="wireshark-ui-gtk-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159471" comment="wireshark-ui-qt-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11410</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11410" source="CVE"/>
    <description>
    In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-7702.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11410.html">CVE-2017-11410</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11410">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11410">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11410">SUSE bug 1049255</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159468" comment="wireshark-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159469" comment="wireshark-devel-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159470" comment="wireshark-ui-gtk-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159471" comment="wireshark-ui-qt-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11411</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11411" source="CVE"/>
    <description>
    In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9350.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11411.html">CVE-2017-11411</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11411">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11411">SUSE bug 1049621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11411">SUSE bug 1049621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11411">SUSE bug 1049621</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159468" comment="wireshark-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159469" comment="wireshark-devel-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159470" comment="wireshark-ui-gtk-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159471" comment="wireshark-ui-qt-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11434</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11434" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11434" source="CVE"/>
    <description>
    The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11434.html">CVE-2017-11434</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11434">SUSE bug 1049381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11434">SUSE bug 1049381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11434">SUSE bug 1049578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11434">SUSE bug 1049381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11434">SUSE bug 1049381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11434">SUSE bug 1049578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11434">SUSE bug 1049381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11434">SUSE bug 1049381</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11434">SUSE bug 1049578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11434">SUSE bug 1049381</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163455" comment="xen-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163456" comment="xen-devel-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163457" comment="xen-doc-html-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163458" comment="xen-libs-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163459" comment="xen-libs-32bit-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163460" comment="xen-tools-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163461" comment="xen-tools-domU-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11446</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11446" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11446" source="CVE"/>
    <description>
    The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11446.html">CVE-2017-11446</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11446">SUSE bug 1049379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11446">SUSE bug 1049379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11446">SUSE bug 1049379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11446">SUSE bug 1049379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11446">SUSE bug 1049379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11446">SUSE bug 1049379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11446">SUSE bug 1049379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11446">SUSE bug 1049379</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166921" comment="ImageMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166922" comment="ImageMagick-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166915" comment="ImageMagick-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166923" comment="ImageMagick-doc-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166924" comment="ImageMagick-extra-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166925" comment="libMagick++-6_Q16-3-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166916" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166917" comment="libMagick++-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166918" comment="libMagick++-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166926" comment="libMagickCore-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166919" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166927" comment="libMagickWand-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166920" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166928" comment="perl-PerlMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11449</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11449" source="CVE"/>
    <description>
    coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11449.html">CVE-2017-11449</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11449">SUSE bug 1049373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11449">SUSE bug 1049373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11449">SUSE bug 1049373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11449">SUSE bug 1049373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11449">SUSE bug 1049373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11449">SUSE bug 1049373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11449">SUSE bug 1049373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11449">SUSE bug 1049373</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11449">SUSE bug 1049373</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169709" comment="ImageMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169710" comment="ImageMagick-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169711" comment="ImageMagick-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169712" comment="ImageMagick-doc-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169713" comment="ImageMagick-extra-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169714" comment="libMagick++-6_Q16-3-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169715" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169716" comment="libMagick++-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169717" comment="libMagick++-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169718" comment="libMagickCore-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169719" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169720" comment="libMagickWand-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169721" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169722" comment="perl-PerlMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11462</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11462" source="CVE"/>
    <description>
    Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11462.html">CVE-2017-11462</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11462">SUSE bug 1056995</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165392" comment="krb5-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165393" comment="krb5-32bit-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165394" comment="krb5-client-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165395" comment="krb5-devel-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165396" comment="krb5-devel-32bit-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152677" comment="krb5-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165397" comment="krb5-doc-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152678" comment="krb5-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165398" comment="krb5-mini-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152679" comment="krb5-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165399" comment="krb5-mini-devel-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152680" comment="krb5-mini-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165400" comment="krb5-plugin-kdb-ldap-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152681" comment="krb5-plugin-kdb-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165401" comment="krb5-plugin-preauth-otp-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152682" comment="krb5-plugin-preauth-otp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165402" comment="krb5-plugin-preauth-pkinit-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152683" comment="krb5-plugin-preauth-pkinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165403" comment="krb5-server-1.12.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152684" comment="krb5-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11464</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11464" source="CVE"/>
    <description>
    A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11464.html">CVE-2017-11464</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11464">SUSE bug 1049607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11464">SUSE bug 1049607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11464">SUSE bug 1049607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11464">SUSE bug 1049607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11464">SUSE bug 1049607</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161878" comment="gdk-pixbuf-loader-rsvg-2.40.18-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151634" comment="gdk-pixbuf-loader-rsvg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161879" comment="gdk-pixbuf-loader-rsvg-32bit-2.40.18-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153668" comment="gdk-pixbuf-loader-rsvg-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161880" comment="librsvg-2.40.18-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153669" comment="librsvg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161881" comment="librsvg-2-2-2.40.18-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151635" comment="librsvg-2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161882" comment="librsvg-2-2-32bit-2.40.18-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153670" comment="librsvg-2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161883" comment="librsvg-devel-2.40.18-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151636" comment="librsvg-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161884" comment="rsvg-thumbnailer-2.40.18-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161885" comment="rsvg-thumbnailer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161886" comment="rsvg-view-2.40.18-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153671" comment="rsvg-view is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161887" comment="typelib-1_0-Rsvg-2_0-2.40.18-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151637" comment="typelib-1_0-Rsvg-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11472</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11472" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11472" source="CVE"/>
    <description>
    The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11472.html">CVE-2017-11472</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11472">SUSE bug 1049580</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163938" comment="kernel-debug-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163939" comment="kernel-debug-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163940" comment="kernel-debug-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163941" comment="kernel-default-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163942" comment="kernel-default-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163943" comment="kernel-default-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163944" comment="kernel-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163945" comment="kernel-docs-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163946" comment="kernel-docs-html-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163947" comment="kernel-docs-pdf-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163948" comment="kernel-macros-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163949" comment="kernel-obs-build-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163950" comment="kernel-obs-qa-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163951" comment="kernel-source-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163952" comment="kernel-source-vanilla-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163953" comment="kernel-syms-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163954" comment="kernel-vanilla-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163955" comment="kernel-vanilla-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163956" comment="kernel-vanilla-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11473</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11473" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11473" source="CVE"/>
    <description>
    Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 4.12.2 allows local users to gain privileges via a crafted ACPI table.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11473.html">CVE-2017-11473</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1061680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1061680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1061680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1061680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1061680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1061680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1061680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1061680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1061680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1061680</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1049603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11473">SUSE bug 1061680</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161638" comment="kernel-debug-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161639" comment="kernel-debug-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161640" comment="kernel-debug-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161641" comment="kernel-default-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161642" comment="kernel-default-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161643" comment="kernel-default-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161644" comment="kernel-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161645" comment="kernel-docs-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161646" comment="kernel-docs-html-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161647" comment="kernel-docs-pdf-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161648" comment="kernel-macros-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161649" comment="kernel-obs-build-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161650" comment="kernel-obs-qa-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161651" comment="kernel-source-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161652" comment="kernel-source-vanilla-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161653" comment="kernel-syms-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161654" comment="kernel-vanilla-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161655" comment="kernel-vanilla-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161656" comment="kernel-vanilla-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11478</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11478" source="CVE"/>
    <description>
    The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11478.html">CVE-2017-11478</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11478">SUSE bug 1049796</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711499" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11499</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11499" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11499" source="CVE"/>
    <description>
    Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11499.html">CVE-2017-11499</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11499">SUSE bug 1048299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11499">SUSE bug 1048299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11499">SUSE bug 1051117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11499">SUSE bug 1048299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11499">SUSE bug 1048299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11499">SUSE bug 1051117</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11499">SUSE bug 1048299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11499">SUSE bug 1048299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11499">SUSE bug 1048299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11499">SUSE bug 1048299</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161915" comment="nodejs-common-1.0-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162033" comment="nodejs-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162034" comment="nodejs4-4.8.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154256" comment="nodejs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162035" comment="nodejs4-devel-4.8.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154257" comment="nodejs4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162036" comment="nodejs4-docs-4.8.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154258" comment="nodejs4-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162037" comment="npm4-4.8.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154259" comment="npm4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711523" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11523</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11523" source="CVE"/>
    <description>
    The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11523.html">CVE-2017-11523</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11523">SUSE bug 1050083</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11523">SUSE bug 1050083</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11523">SUSE bug 1050083</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11523">SUSE bug 1050083</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11523">SUSE bug 1050083</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11523">SUSE bug 1050083</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11523">SUSE bug 1050083</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11523">SUSE bug 1050083</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711527" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11527</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11527" source="CVE"/>
    <description>
    The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11527.html">CVE-2017-11527</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11527">SUSE bug 1050116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11527">SUSE bug 1050116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11527">SUSE bug 1050116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11527">SUSE bug 1050116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11527">SUSE bug 1050116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11527">SUSE bug 1050116</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11529</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11529" source="CVE"/>
    <description>
    The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11529.html">CVE-2017-11529</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11529">SUSE bug 1050120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11529">SUSE bug 1050120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11529">SUSE bug 1050120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11529">SUSE bug 1050120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11529">SUSE bug 1050120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11529">SUSE bug 1050120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11529">SUSE bug 1050120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11529">SUSE bug 1050120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11529">SUSE bug 1050120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11529">SUSE bug 1050120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11529">SUSE bug 1050120</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11532</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11532" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11532" source="CVE"/>
    <description>
    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11532.html">CVE-2017-11532</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050623</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11532">SUSE bug 1050129</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711534" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11534</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11534" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11534" source="CVE"/>
    <description>
    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite_font_map() function in coders/wmf.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11534.html">CVE-2017-11534</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11534">SUSE bug 1050135</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166921" comment="ImageMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166922" comment="ImageMagick-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166915" comment="ImageMagick-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166923" comment="ImageMagick-doc-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166924" comment="ImageMagick-extra-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166925" comment="libMagick++-6_Q16-3-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166916" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166917" comment="libMagick++-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166918" comment="libMagick++-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166926" comment="libMagickCore-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166919" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166927" comment="libMagickWand-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166920" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166928" comment="perl-PerlMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711535" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11535</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11535" source="CVE"/>
    <description>
    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11535.html">CVE-2017-11535</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11535">SUSE bug 1050139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11535">SUSE bug 1050139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11535">SUSE bug 1050139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11535">SUSE bug 1050139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11535">SUSE bug 1050139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11535">SUSE bug 1050139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11535">SUSE bug 1050139</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11541</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11541" source="CVE"/>
    <description>
    tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11541.html">CVE-2017-11541</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1050219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1050219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1050219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1050219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1050219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11541">SUSE bug 1050219</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11542</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11542" source="CVE"/>
    <description>
    tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11542.html">CVE-2017-11542</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11542">SUSE bug 1050222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11542">SUSE bug 1050219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11542">SUSE bug 1050222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11542">SUSE bug 1050222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11542">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11542">SUSE bug 1050222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11542">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11542">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11542">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11542">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11542">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711543" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11543</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11543" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11543" source="CVE"/>
    <description>
    tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11543.html">CVE-2017-11543</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11543">SUSE bug 1050225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11543">SUSE bug 1050219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11543">SUSE bug 1050225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11543">SUSE bug 1050225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11543">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11543">SUSE bug 1050225</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11543">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11543">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11543">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11543">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11543">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711554" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11554</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11554" source="CVE"/>
    <description>
    There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5. A crafted input will lead to a remote denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11554.html">CVE-2017-11554</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11554">SUSE bug 1050148</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166589" comment="libsass-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166590" comment="libsass is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166591" comment="libsass-3_3_2-0-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166592" comment="libsass-3_3_2-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166593" comment="libsass-devel-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166594" comment="libsass-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711555" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11555</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11555" source="CVE"/>
    <description>
    There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11555.html">CVE-2017-11555</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11555">SUSE bug 1050149</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166589" comment="libsass-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166590" comment="libsass is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166591" comment="libsass-3_3_2-0-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166592" comment="libsass-3_3_2-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166593" comment="libsass-devel-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166594" comment="libsass-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711556" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11556</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11556" source="CVE"/>
    <description>
    There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11556.html">CVE-2017-11556</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11556">SUSE bug 1050150</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166589" comment="libsass-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166590" comment="libsass is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166591" comment="libsass-3_3_2-0-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166592" comment="libsass-3_3_2-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166593" comment="libsass-devel-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166594" comment="libsass-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11591</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11591" source="CVE"/>
    <description>
    There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11591.html">CVE-2017-11591</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11591">SUSE bug 1050257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11591">SUSE bug 1050257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11591">SUSE bug 1050257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11591">SUSE bug 1050257</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11591">SUSE bug 1050257</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165957" comment="exiv2-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165958" comment="exiv2-lang-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165959" comment="libexiv2-14-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152551" comment="libexiv2-14 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165960" comment="libexiv2-14-32bit-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165961" comment="libexiv2-14-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165962" comment="libexiv2-devel-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11600" source="CVE"/>
    <description>
    net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11600.html">CVE-2017-11600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11600">SUSE bug 1050231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11600">SUSE bug 1050231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11600">SUSE bug 1050231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11600">SUSE bug 1050231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11600">SUSE bug 1050231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11600">SUSE bug 1050231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11600">SUSE bug 1050231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11600">SUSE bug 1050231</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711605" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11605</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11605" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11605" source="CVE"/>
    <description>
    There is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11605.html">CVE-2017-11605</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11605">SUSE bug 1050151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11605">SUSE bug 1050151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11605">SUSE bug 1050151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11605">SUSE bug 1050151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11605">SUSE bug 1050151</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166589" comment="libsass-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166590" comment="libsass is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166591" comment="libsass-3_3_2-0-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166592" comment="libsass-3_3_2-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166593" comment="libsass-devel-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166594" comment="libsass-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11608</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11608" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11608" source="CVE"/>
    <description>
    There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11608.html">CVE-2017-11608</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11608">SUSE bug 1050380</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166589" comment="libsass-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166590" comment="libsass is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166591" comment="libsass-3_3_2-0-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166592" comment="libsass-3_3_2-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166593" comment="libsass-devel-3.3.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166594" comment="libsass-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11628</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11628" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11628" source="CVE"/>
    <description>
    In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zend_ini_parser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that accept untrusted input (instead of the system's php.ini file) for the parse_ini_string or parse_ini_file function, e.g., a web application for syntax validation of php.ini directives.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11628.html">CVE-2017-11628</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11628">SUSE bug 1050726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11628">SUSE bug 1050726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11628">SUSE bug 1050726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11628">SUSE bug 1050726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11628">SUSE bug 1050726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11628">SUSE bug 1050726</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11628">SUSE bug 1050726</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163225" comment="apache2-mod_php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163059" comment="apache2-mod_php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163226" comment="php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163227" comment="php5-bcmath-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163228" comment="php5-bz2-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163229" comment="php5-calendar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163230" comment="php5-ctype-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163231" comment="php5-curl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163232" comment="php5-dba-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163233" comment="php5-devel-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163234" comment="php5-dom-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163235" comment="php5-enchant-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163236" comment="php5-exif-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163237" comment="php5-fastcgi-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163238" comment="php5-fileinfo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163239" comment="php5-firebird-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163240" comment="php5-fpm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163241" comment="php5-ftp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163242" comment="php5-gd-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163243" comment="php5-gettext-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163244" comment="php5-gmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163245" comment="php5-iconv-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163246" comment="php5-imap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163247" comment="php5-intl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163248" comment="php5-json-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163249" comment="php5-ldap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163250" comment="php5-mbstring-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163251" comment="php5-mcrypt-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163252" comment="php5-mssql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163253" comment="php5-mysql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163254" comment="php5-odbc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163255" comment="php5-opcache-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163256" comment="php5-openssl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163257" comment="php5-pcntl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163258" comment="php5-pdo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163259" comment="php5-pear-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163260" comment="php5-pgsql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163261" comment="php5-phar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163262" comment="php5-posix-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163263" comment="php5-pspell-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163264" comment="php5-readline-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163265" comment="php5-shmop-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163266" comment="php5-snmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163267" comment="php5-soap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163268" comment="php5-sockets-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163269" comment="php5-sqlite-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163270" comment="php5-suhosin-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163271" comment="php5-sysvmsg-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163272" comment="php5-sysvsem-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163273" comment="php5-sysvshm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163274" comment="php5-tidy-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163275" comment="php5-tokenizer-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163276" comment="php5-wddx-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163277" comment="php5-xmlreader-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163278" comment="php5-xmlrpc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163279" comment="php5-xmlwriter-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163280" comment="php5-xsl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163281" comment="php5-zip-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163282" comment="php5-zlib-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163060" comment="php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163061" comment="php7-bcmath-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163062" comment="php7-bz2-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163063" comment="php7-calendar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163064" comment="php7-ctype-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163065" comment="php7-curl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163066" comment="php7-dba-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163067" comment="php7-devel-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163068" comment="php7-dom-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163069" comment="php7-enchant-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163070" comment="php7-exif-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163071" comment="php7-fastcgi-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163072" comment="php7-fileinfo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163073" comment="php7-firebird-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163074" comment="php7-fpm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163075" comment="php7-ftp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163076" comment="php7-gd-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163077" comment="php7-gettext-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163078" comment="php7-gmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163079" comment="php7-iconv-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163080" comment="php7-imap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163081" comment="php7-intl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163082" comment="php7-json-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163083" comment="php7-ldap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163084" comment="php7-mbstring-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163085" comment="php7-mcrypt-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163086" comment="php7-mysql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163087" comment="php7-odbc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163088" comment="php7-opcache-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163089" comment="php7-openssl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163090" comment="php7-pcntl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163091" comment="php7-pdo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163092" comment="php7-pear-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163093" comment="php7-pear-Archive_Tar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163094" comment="php7-pgsql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163095" comment="php7-phar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163096" comment="php7-posix-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163097" comment="php7-pspell-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163098" comment="php7-readline-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163099" comment="php7-shmop-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163100" comment="php7-snmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163101" comment="php7-soap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163102" comment="php7-sockets-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163103" comment="php7-sqlite-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163104" comment="php7-sysvmsg-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163105" comment="php7-sysvsem-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163106" comment="php7-sysvshm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163107" comment="php7-tidy-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163108" comment="php7-tokenizer-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163109" comment="php7-wddx-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163110" comment="php7-xmlreader-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163111" comment="php7-xmlrpc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163112" comment="php7-xmlwriter-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163113" comment="php7-xsl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163114" comment="php7-zip-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163115" comment="php7-zlib-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11636</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11636" source="CVE"/>
    <description>
    GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frames that have non-identical widths.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11636.html">CVE-2017-11636</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11636">SUSE bug 1050674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11636">SUSE bug 1050674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11636">SUSE bug 1050674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11636">SUSE bug 1050674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11636">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162325" comment="GraphicsMagick-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162326" comment="GraphicsMagick-devel-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162327" comment="libGraphicsMagick++-Q16-12-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162328" comment="libGraphicsMagick++-devel-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162329" comment="libGraphicsMagick-Q16-3-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162330" comment="libGraphicsMagick3-config-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162331" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162332" comment="perl-GraphicsMagick-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11640</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11640" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11640" source="CVE"/>
    <description>
    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11640.html">CVE-2017-11640</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11640">SUSE bug 1050632</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167878" comment="GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167879" comment="GraphicsMagick-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167880" comment="libGraphicsMagick++-Q16-12-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167881" comment="libGraphicsMagick++-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167882" comment="libGraphicsMagick-Q16-3-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167883" comment="libGraphicsMagick3-config-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167884" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167885" comment="perl-GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711643" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11643</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11643" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11643" source="CVE"/>
    <description>
    GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical widths.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11643.html">CVE-2017-11643</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11643">SUSE bug 1050611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11643">SUSE bug 1050611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11643">SUSE bug 1050611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11643">SUSE bug 1050674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11643">SUSE bug 1050611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11643">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162325" comment="GraphicsMagick-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162326" comment="GraphicsMagick-devel-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162327" comment="libGraphicsMagick++-Q16-12-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162328" comment="libGraphicsMagick++-devel-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162329" comment="libGraphicsMagick-Q16-3-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162330" comment="libGraphicsMagick3-config-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162331" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162332" comment="perl-GraphicsMagick-1.3.25-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11644</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11644" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11644" source="CVE"/>
    <description>
    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11644.html">CVE-2017-11644</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11644">SUSE bug 1050606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11644">SUSE bug 1050606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11644">SUSE bug 1050606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11644">SUSE bug 1050606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11644">SUSE bug 1050606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11644">SUSE bug 1050606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11644">SUSE bug 1050606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11644">SUSE bug 1050606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11644">SUSE bug 1050606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11644">SUSE bug 1050606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11644">SUSE bug 1050606</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11671</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11671" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11671" source="CVE"/>
    <description>
    Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11671.html">CVE-2017-11671</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11671">SUSE bug 1050947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11671">SUSE bug 1050947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11671">SUSE bug 1050947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11671">SUSE bug 1050947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11671">SUSE bug 1050947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11671">SUSE bug 1050947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11671">SUSE bug 1050947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11671">SUSE bug 1050947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11671">SUSE bug 1050947</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166332" comment="cpp48-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152183" comment="cpp48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166333" comment="cross-aarch64-gcc48-icecream-backend-4.8.5-23.3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152873" comment="cross-aarch64-gcc48-icecream-backend is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166334" comment="cross-armv6hl-gcc48-icecream-backend-4.8.5-23.3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152874" comment="cross-armv6hl-gcc48-icecream-backend is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166335" comment="cross-armv7hl-gcc48-icecream-backend-4.8.5-23.3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152875" comment="cross-armv7hl-gcc48-icecream-backend is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166336" comment="cross-i386-gcc48-icecream-backend-4.8.5-23.3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152877" comment="cross-i386-gcc48-icecream-backend is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166337" comment="cross-ia64-gcc48-icecream-backend-4.8.5-23.3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152878" comment="cross-ia64-gcc48-icecream-backend is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166338" comment="cross-ppc-gcc48-icecream-backend-4.8.5-23.3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152879" comment="cross-ppc-gcc48-icecream-backend is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166339" comment="cross-ppc64-gcc48-icecream-backend-4.8.5-23.3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152880" comment="cross-ppc64-gcc48-icecream-backend is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166340" comment="cross-ppc64le-gcc48-icecream-backend-4.8.5-23.3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152881" comment="cross-ppc64le-gcc48-icecream-backend is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166341" comment="cross-s390-gcc48-icecream-backend-4.8.5-23.3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152882" comment="cross-s390-gcc48-icecream-backend is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166342" comment="cross-s390x-gcc48-icecream-backend-4.8.5-23.3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152883" comment="cross-s390x-gcc48-icecream-backend is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166343" comment="gcc48-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152184" comment="gcc48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166344" comment="gcc48-32bit-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152884" comment="gcc48-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166345" comment="gcc48-ada-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152885" comment="gcc48-ada is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166346" comment="gcc48-ada-32bit-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152886" comment="gcc48-ada-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166347" comment="gcc48-c++-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152185" comment="gcc48-c++ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166348" comment="gcc48-fortran-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152186" comment="gcc48-fortran is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166349" comment="gcc48-fortran-32bit-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152887" comment="gcc48-fortran-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166350" comment="gcc48-gij-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152187" comment="gcc48-gij is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166351" comment="gcc48-gij-32bit-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152888" comment="gcc48-gij-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166352" comment="gcc48-info-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152188" comment="gcc48-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166353" comment="gcc48-java-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152189" comment="gcc48-java is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166354" comment="gcc48-locale-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152190" comment="gcc48-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166355" comment="gcc48-obj-c++-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152889" comment="gcc48-obj-c++ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166356" comment="gcc48-objc-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152191" comment="gcc48-objc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166357" comment="gcc48-objc-32bit-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152890" comment="gcc48-objc-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166358" comment="gcc48-testresults-4.8.5-23.3.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152891" comment="gcc48-testresults is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166359" comment="libada48-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152908" comment="libada48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166360" comment="libada48-32bit-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152909" comment="libada48-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166361" comment="libasan0-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152192" comment="libasan0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166362" comment="libasan0-32bit-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152912" comment="libasan0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166363" comment="libffi4-gcc48-4.8.5-23.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152926" comment="libffi4-gcc48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166364" comment="libffi4-gcc48-32bit-4.8.5-23.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152927" comment="libffi4-gcc48-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166365" comment="libffi48-4.8.5-23.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152928" comment="libffi48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166366" comment="libffi48-devel-4.8.5-23.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152929" comment="libffi48-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166367" comment="libffi48-devel-32bit-4.8.5-23.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152930" comment="libffi48-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166368" comment="libgcj48-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152194" comment="libgcj48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166369" comment="libgcj48-32bit-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152934" comment="libgcj48-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166370" comment="libgcj48-devel-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152195" comment="libgcj48-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166371" comment="libgcj48-devel-32bit-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152935" comment="libgcj48-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166372" comment="libgcj48-jar-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152196" comment="libgcj48-jar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166326" comment="libgcj_bc1-gcc48-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152197" comment="libgcj_bc1-gcc48 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166373" comment="libobjc4-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152198" comment="libobjc4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166374" comment="libobjc4-32bit-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152955" comment="libobjc4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166375" comment="libstdc++48-devel-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152199" comment="libstdc++48-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166376" comment="libstdc++48-devel-32bit-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152960" comment="libstdc++48-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166377" comment="libstdc++48-doc-4.8.5-23.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152961" comment="libstdc++48-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711683" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11683</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11683" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11683" source="CVE"/>
    <description>
    There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11683.html">CVE-2017-11683</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11683">SUSE bug 1051188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11683">SUSE bug 1051188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11683">SUSE bug 1051188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11683">SUSE bug 1051188</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165957" comment="exiv2-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165958" comment="exiv2-lang-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165959" comment="libexiv2-14-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152551" comment="libexiv2-14 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165960" comment="libexiv2-14-32bit-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165961" comment="libexiv2-14-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165962" comment="libexiv2-devel-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11691</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11691" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11691" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11691.html">CVE-2017-11691</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11691">SUSE bug 1050950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11691">SUSE bug 1050950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11691">SUSE bug 1050950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161570" comment="cacti-1.1.16-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161571" comment="cacti-doc-1.1.16-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161572" comment="cacti-spine-1.1.16-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711724" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11724</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11724" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11724" source="CVE"/>
    <description>
    The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum_info and clone_info data structures.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11724.html">CVE-2017-11724</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11724">SUSE bug 1051446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11724">SUSE bug 1051446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11724">SUSE bug 1051446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11724">SUSE bug 1051446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11724">SUSE bug 1051446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11724">SUSE bug 1051446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11724">SUSE bug 1051446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11724">SUSE bug 1051446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11724">SUSE bug 1051446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11724">SUSE bug 1051446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11724">SUSE bug 1051446</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11750</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11750" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11750" source="CVE"/>
    <description>
    The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11750.html">CVE-2017-11750</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1047910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11750">SUSE bug 1051442</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170211" comment="GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170212" comment="GraphicsMagick-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170213" comment="libGraphicsMagick++-Q16-12-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170214" comment="libGraphicsMagick++-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170215" comment="libGraphicsMagick-Q16-3-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170216" comment="libGraphicsMagick3-config-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170217" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170218" comment="perl-GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11751</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11751" source="CVE"/>
    <description>
    The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11751.html">CVE-2017-11751</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051416</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11751">SUSE bug 1051412</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169709" comment="ImageMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169710" comment="ImageMagick-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169711" comment="ImageMagick-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169712" comment="ImageMagick-doc-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169713" comment="ImageMagick-extra-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169714" comment="libMagick++-6_Q16-3-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169715" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169716" comment="libMagick++-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169717" comment="libMagick++-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169718" comment="libMagickCore-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169719" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169720" comment="libMagickWand-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169721" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169722" comment="perl-PerlMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201711752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-11752</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-11752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11752" source="CVE"/>
    <description>
    The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-11752.html">CVE-2017-11752</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11752">SUSE bug 1051441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11752">SUSE bug 1051441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11752">SUSE bug 1051441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11752">SUSE bug 1051441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11752">SUSE bug 1051441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11752">SUSE bug 1051441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11752">SUSE bug 1051441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11752">SUSE bug 1051441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11752">SUSE bug 1051441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11752">SUSE bug 1051441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-11752">SUSE bug 1051441</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12065</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12065" source="CVE"/>
    <description>
    spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12065.html">CVE-2017-12065</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12065">SUSE bug 1051633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12065">SUSE bug 1051633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12065">SUSE bug 1051633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12065">SUSE bug 1051633</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12065">SUSE bug 1051633</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161570" comment="cacti-1.1.16-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161571" comment="cacti-doc-1.1.16-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161572" comment="cacti-spine-1.1.16-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12067</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12067" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12067" source="CVE"/>
    <description>
    Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12067.html">CVE-2017-12067</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12067">SUSE bug 1051634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12067">SUSE bug 1051634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12067">SUSE bug 1051634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12067">SUSE bug 1051634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12067">SUSE bug 1051634</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12067">SUSE bug 1051634</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162042" comment="libpotrace0-1.15-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151954" comment="libpotrace0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162043" comment="potrace-1.15-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151955" comment="potrace is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162044" comment="potrace-devel-1.15-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151956" comment="potrace-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12134</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12134" source="CVE"/>
    <description>
    The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12134.html">CVE-2017-12134</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1053919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12134">SUSE bug 1051790</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163938" comment="kernel-debug-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163939" comment="kernel-debug-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163940" comment="kernel-debug-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163941" comment="kernel-default-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163942" comment="kernel-default-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163943" comment="kernel-default-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163944" comment="kernel-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163945" comment="kernel-docs-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163946" comment="kernel-docs-html-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163947" comment="kernel-docs-pdf-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163948" comment="kernel-macros-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163949" comment="kernel-obs-build-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163950" comment="kernel-obs-qa-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163951" comment="kernel-source-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163952" comment="kernel-source-vanilla-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163953" comment="kernel-syms-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163954" comment="kernel-vanilla-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163955" comment="kernel-vanilla-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163956" comment="kernel-vanilla-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12135</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12135" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12135" source="CVE"/>
    <description>
    Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12135.html">CVE-2017-12135</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12135">SUSE bug 1051787</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163455" comment="xen-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163456" comment="xen-devel-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163457" comment="xen-doc-html-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163458" comment="xen-libs-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163459" comment="xen-libs-32bit-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163460" comment="xen-tools-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163461" comment="xen-tools-domU-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12136</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12136" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12136" source="CVE"/>
    <description>
    Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12136.html">CVE-2017-12136</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12136">SUSE bug 1051789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12136">SUSE bug 1051789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12136">SUSE bug 1051789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12136">SUSE bug 1051789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12136">SUSE bug 1051789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12136">SUSE bug 1051789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12136">SUSE bug 1051789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12136">SUSE bug 1051789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12136">SUSE bug 1051789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12136">SUSE bug 1051789</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163455" comment="xen-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163456" comment="xen-devel-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163457" comment="xen-doc-html-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163458" comment="xen-libs-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163459" comment="xen-libs-32bit-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163460" comment="xen-tools-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163461" comment="xen-tools-domU-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12137</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12137" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12137" source="CVE"/>
    <description>
    arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12137.html">CVE-2017-12137</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12137">SUSE bug 1051788</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163455" comment="xen-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163456" comment="xen-devel-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163457" comment="xen-doc-html-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163458" comment="xen-libs-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163459" comment="xen-libs-32bit-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163460" comment="xen-tools-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163461" comment="xen-tools-domU-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712140" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12140</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12140" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12140" source="CVE"/>
    <description>
    The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12140.html">CVE-2017-12140</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1052764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1052764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12140">SUSE bug 1051847</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168263" comment="GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168264" comment="GraphicsMagick-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168265" comment="libGraphicsMagick++-Q16-12-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168266" comment="libGraphicsMagick++-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168267" comment="libGraphicsMagick-Q16-3-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168268" comment="libGraphicsMagick3-config-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168269" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168270" comment="perl-GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12150</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12150" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12150.html">CVE-2017-12150</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12150">SUSE bug 1058622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165292" comment="ctdb-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165293" comment="ctdb-tests-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165294" comment="libdcerpc-binding0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165295" comment="libdcerpc-binding0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165296" comment="libdcerpc-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165297" comment="libdcerpc-samr-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165298" comment="libdcerpc-samr0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165299" comment="libdcerpc-samr0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165300" comment="libdcerpc0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165301" comment="libdcerpc0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165302" comment="libndr-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165303" comment="libndr-krb5pac-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165304" comment="libndr-krb5pac0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165305" comment="libndr-krb5pac0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165306" comment="libndr-nbt-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165307" comment="libndr-nbt0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165308" comment="libndr-nbt0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165309" comment="libndr-standard-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165310" comment="libndr-standard0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165311" comment="libndr-standard0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165312" comment="libndr0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165313" comment="libndr0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165314" comment="libnetapi-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165315" comment="libnetapi0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165316" comment="libnetapi0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165317" comment="libsamba-credentials-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165318" comment="libsamba-credentials0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165319" comment="libsamba-credentials0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165320" comment="libsamba-errors-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165321" comment="libsamba-errors0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165322" comment="libsamba-errors0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165323" comment="libsamba-hostconfig-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165324" comment="libsamba-hostconfig0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165325" comment="libsamba-hostconfig0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165326" comment="libsamba-passdb-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165327" comment="libsamba-passdb0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165328" comment="libsamba-passdb0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165329" comment="libsamba-policy-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165330" comment="libsamba-policy0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165331" comment="libsamba-policy0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165332" comment="libsamba-util-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165333" comment="libsamba-util0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165334" comment="libsamba-util0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165335" comment="libsamdb-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165336" comment="libsamdb0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165337" comment="libsamdb0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165338" comment="libsmbclient-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165339" comment="libsmbclient0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165340" comment="libsmbclient0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165341" comment="libsmbconf-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165342" comment="libsmbconf0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165343" comment="libsmbconf0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165344" comment="libsmbldap-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165345" comment="libsmbldap0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165346" comment="libsmbldap0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165347" comment="libtevent-util-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165348" comment="libtevent-util0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165349" comment="libtevent-util0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165350" comment="libwbclient-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165351" comment="libwbclient0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165352" comment="libwbclient0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165353" comment="samba-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165354" comment="samba-client-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165355" comment="samba-client-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165356" comment="samba-core-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165357" comment="samba-doc-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165358" comment="samba-libs-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165359" comment="samba-libs-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165360" comment="samba-pidl-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152776" comment="samba-pidl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165361" comment="samba-python-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165362" comment="samba-test-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165363" comment="samba-winbind-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165364" comment="samba-winbind-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712151" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12151</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12151" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12151" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12151.html">CVE-2017-12151</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12151">SUSE bug 1058565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165292" comment="ctdb-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165293" comment="ctdb-tests-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165294" comment="libdcerpc-binding0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165295" comment="libdcerpc-binding0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165296" comment="libdcerpc-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165297" comment="libdcerpc-samr-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165298" comment="libdcerpc-samr0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165299" comment="libdcerpc-samr0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165300" comment="libdcerpc0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165301" comment="libdcerpc0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165302" comment="libndr-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165303" comment="libndr-krb5pac-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165304" comment="libndr-krb5pac0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165305" comment="libndr-krb5pac0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165306" comment="libndr-nbt-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165307" comment="libndr-nbt0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165308" comment="libndr-nbt0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165309" comment="libndr-standard-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165310" comment="libndr-standard0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165311" comment="libndr-standard0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165312" comment="libndr0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165313" comment="libndr0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165314" comment="libnetapi-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165315" comment="libnetapi0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165316" comment="libnetapi0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165317" comment="libsamba-credentials-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165318" comment="libsamba-credentials0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165319" comment="libsamba-credentials0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165320" comment="libsamba-errors-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165321" comment="libsamba-errors0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165322" comment="libsamba-errors0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165323" comment="libsamba-hostconfig-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165324" comment="libsamba-hostconfig0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165325" comment="libsamba-hostconfig0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165326" comment="libsamba-passdb-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165327" comment="libsamba-passdb0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165328" comment="libsamba-passdb0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165329" comment="libsamba-policy-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165330" comment="libsamba-policy0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165331" comment="libsamba-policy0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165332" comment="libsamba-util-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165333" comment="libsamba-util0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165334" comment="libsamba-util0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165335" comment="libsamdb-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165336" comment="libsamdb0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165337" comment="libsamdb0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165338" comment="libsmbclient-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165339" comment="libsmbclient0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165340" comment="libsmbclient0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165341" comment="libsmbconf-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165342" comment="libsmbconf0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165343" comment="libsmbconf0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165344" comment="libsmbldap-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165345" comment="libsmbldap0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165346" comment="libsmbldap0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165347" comment="libtevent-util-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165348" comment="libtevent-util0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165349" comment="libtevent-util0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165350" comment="libwbclient-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165351" comment="libwbclient0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165352" comment="libwbclient0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165353" comment="samba-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165354" comment="samba-client-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165355" comment="samba-client-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165356" comment="samba-core-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165357" comment="samba-doc-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165358" comment="samba-libs-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165359" comment="samba-libs-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165360" comment="samba-pidl-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152776" comment="samba-pidl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165361" comment="samba-python-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165362" comment="samba-test-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165363" comment="samba-winbind-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165364" comment="samba-winbind-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712153" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12153</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12153" source="CVE"/>
    <description>
    A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12153.html">CVE-2017-12153</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12153">SUSE bug 1058410</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165715" comment="kernel-debug-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165716" comment="kernel-debug-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165717" comment="kernel-debug-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165718" comment="kernel-default-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165719" comment="kernel-default-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165720" comment="kernel-default-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165721" comment="kernel-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165722" comment="kernel-docs-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165723" comment="kernel-docs-html-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165724" comment="kernel-docs-pdf-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165725" comment="kernel-macros-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165726" comment="kernel-obs-build-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165727" comment="kernel-obs-qa-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165728" comment="kernel-source-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165729" comment="kernel-source-vanilla-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165730" comment="kernel-syms-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165731" comment="kernel-vanilla-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165732" comment="kernel-vanilla-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165733" comment="kernel-vanilla-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712154" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12154</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12154" source="CVE"/>
    <description>
    The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls exist in cases where L1 omits the "use TPR shadow" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12154.html">CVE-2017-12154</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12154">SUSE bug 1058507</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165715" comment="kernel-debug-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165716" comment="kernel-debug-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165717" comment="kernel-debug-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165718" comment="kernel-default-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165719" comment="kernel-default-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165720" comment="kernel-default-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165721" comment="kernel-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165722" comment="kernel-docs-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165723" comment="kernel-docs-html-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165724" comment="kernel-docs-pdf-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165725" comment="kernel-macros-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165726" comment="kernel-obs-build-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165727" comment="kernel-obs-qa-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165728" comment="kernel-source-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165729" comment="kernel-source-vanilla-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165730" comment="kernel-syms-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165731" comment="kernel-vanilla-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165732" comment="kernel-vanilla-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165733" comment="kernel-vanilla-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712163" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12163</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12163" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12163.html">CVE-2017-12163</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12163">SUSE bug 1058624</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165292" comment="ctdb-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165293" comment="ctdb-tests-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165294" comment="libdcerpc-binding0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165295" comment="libdcerpc-binding0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165296" comment="libdcerpc-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165297" comment="libdcerpc-samr-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165298" comment="libdcerpc-samr0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165299" comment="libdcerpc-samr0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165300" comment="libdcerpc0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165301" comment="libdcerpc0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165302" comment="libndr-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165303" comment="libndr-krb5pac-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165304" comment="libndr-krb5pac0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165305" comment="libndr-krb5pac0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165306" comment="libndr-nbt-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165307" comment="libndr-nbt0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165308" comment="libndr-nbt0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165309" comment="libndr-standard-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165310" comment="libndr-standard0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165311" comment="libndr-standard0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165312" comment="libndr0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165313" comment="libndr0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165314" comment="libnetapi-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165315" comment="libnetapi0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165316" comment="libnetapi0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165317" comment="libsamba-credentials-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165318" comment="libsamba-credentials0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165319" comment="libsamba-credentials0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165320" comment="libsamba-errors-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165321" comment="libsamba-errors0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165322" comment="libsamba-errors0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165323" comment="libsamba-hostconfig-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165324" comment="libsamba-hostconfig0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165325" comment="libsamba-hostconfig0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165326" comment="libsamba-passdb-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165327" comment="libsamba-passdb0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165328" comment="libsamba-passdb0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165329" comment="libsamba-policy-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165330" comment="libsamba-policy0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165331" comment="libsamba-policy0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165332" comment="libsamba-util-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165333" comment="libsamba-util0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165334" comment="libsamba-util0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165335" comment="libsamdb-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165336" comment="libsamdb0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165337" comment="libsamdb0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165338" comment="libsmbclient-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165339" comment="libsmbclient0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165340" comment="libsmbclient0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165341" comment="libsmbconf-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165342" comment="libsmbconf0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165343" comment="libsmbconf0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165344" comment="libsmbldap-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165345" comment="libsmbldap0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165346" comment="libsmbldap0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165347" comment="libtevent-util-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165348" comment="libtevent-util0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165349" comment="libtevent-util0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165350" comment="libwbclient-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165351" comment="libwbclient0-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165352" comment="libwbclient0-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165353" comment="samba-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165354" comment="samba-client-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165355" comment="samba-client-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165356" comment="samba-core-devel-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165357" comment="samba-doc-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165358" comment="samba-libs-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165359" comment="samba-libs-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165360" comment="samba-pidl-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152776" comment="samba-pidl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165361" comment="samba-python-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165362" comment="samba-test-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165363" comment="samba-winbind-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165364" comment="samba-winbind-32bit-4.4.2-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712166" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12166</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12166" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12166" source="CVE"/>
    <description>
    OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code execution.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12166.html">CVE-2017-12166</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12166">SUSE bug 1060877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12166">SUSE bug 1060877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12166">SUSE bug 1060877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12166">SUSE bug 1060877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12166">SUSE bug 1060877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12166">SUSE bug 1060877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12166">SUSE bug 1060877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12166">SUSE bug 1060877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12166">SUSE bug 1060877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12166">SUSE bug 1060877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12166">SUSE bug 1060877</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166210" comment="openvpn-2.3.8-8.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166211" comment="openvpn-auth-pam-plugin-2.3.8-8.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157252" comment="openvpn-auth-pam-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166212" comment="openvpn-devel-2.3.8-8.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157253" comment="openvpn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166213" comment="openvpn-down-root-plugin-2.3.8-8.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157254" comment="openvpn-down-root-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12172</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12172" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12172" source="CVE"/>
    <description>
    PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12172.html">CVE-2017-12172</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12172">SUSE bug 1062538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12172">SUSE bug 1062538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12172">SUSE bug 1062538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12172">SUSE bug 1062722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12172">SUSE bug 1062538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12172">SUSE bug 1062538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12172">SUSE bug 1062538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12172">SUSE bug 1062538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12172">SUSE bug 1062538</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12172">SUSE bug 1062538</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169731" comment="postgresql94-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169732" comment="postgresql94-contrib-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169733" comment="postgresql94-devel-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169734" comment="postgresql94-docs-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169735" comment="postgresql94-libs-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151088" comment="postgresql94-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169736" comment="postgresql94-plperl-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151089" comment="postgresql94-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169737" comment="postgresql94-plpython-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151090" comment="postgresql94-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169738" comment="postgresql94-pltcl-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151091" comment="postgresql94-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169739" comment="postgresql94-server-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169740" comment="postgresql94-test-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151093" comment="postgresql94-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12173</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12173" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12173.html">CVE-2017-12173</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12173">SUSE bug 1061832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12173">SUSE bug 1061832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12173">SUSE bug 1061832</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166595" comment="libipa_hbac-devel-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152068" comment="libipa_hbac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166596" comment="libipa_hbac0-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152069" comment="libipa_hbac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166597" comment="libsss_idmap-devel-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152070" comment="libsss_idmap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166598" comment="libsss_idmap0-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151530" comment="libsss_idmap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166599" comment="libsss_nss_idmap-devel-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152071" comment="libsss_nss_idmap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166600" comment="libsss_nss_idmap0-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152072" comment="libsss_nss_idmap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166601" comment="libsss_sudo-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152073" comment="libsss_sudo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166602" comment="python-ipa_hbac-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152074" comment="python-ipa_hbac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166603" comment="python-sss_nss_idmap-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152075" comment="python-sss_nss_idmap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166604" comment="python-sssd-config-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152076" comment="python-sssd-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166605" comment="sssd-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151531" comment="sssd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166606" comment="sssd-32bit-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151532" comment="sssd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166607" comment="sssd-ad-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152077" comment="sssd-ad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166608" comment="sssd-ipa-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152078" comment="sssd-ipa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166609" comment="sssd-krb5-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152079" comment="sssd-krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166610" comment="sssd-krb5-common-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151533" comment="sssd-krb5-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166611" comment="sssd-ldap-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151534" comment="sssd-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166612" comment="sssd-proxy-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152080" comment="sssd-proxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166613" comment="sssd-tools-1.13.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152081" comment="sssd-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712176" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12176</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12176" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12176.html">CVE-2017-12176</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12176">SUSE bug 1063041</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712177" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12177</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12177" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12177.html">CVE-2017-12177</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12177">SUSE bug 1063040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12177">SUSE bug 1063040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12177">SUSE bug 1063040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12177">SUSE bug 1063040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12177">SUSE bug 1063040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12177">SUSE bug 1063040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12177">SUSE bug 1063040</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12177">SUSE bug 1063040</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12178</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12178" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12178.html">CVE-2017-12178</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12178">SUSE bug 1063039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12178">SUSE bug 1063039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12178">SUSE bug 1063039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12178">SUSE bug 1063039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12178">SUSE bug 1063039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12178">SUSE bug 1063039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12178">SUSE bug 1063039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12178">SUSE bug 1063039</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712179" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12179</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12179" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12179.html">CVE-2017-12179</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12179">SUSE bug 1063038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12179">SUSE bug 1063038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12179">SUSE bug 1063038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12179">SUSE bug 1063038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12179">SUSE bug 1063038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12179">SUSE bug 1063038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12179">SUSE bug 1063038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12179">SUSE bug 1063038</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712180" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12180</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12180" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12180.html">CVE-2017-12180</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12180">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12180">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12180">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12180">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12180">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12180">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12180">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12180">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12180">SUSE bug 1063037</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712181" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12181</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12181" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12181.html">CVE-2017-12181</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12181">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12181">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12181">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12181">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12181">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12181">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12181">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12181">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12181">SUSE bug 1063037</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712182" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12182</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12182" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12182.html">CVE-2017-12182</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12182">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12182">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12182">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12182">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12182">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12182">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12182">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12182">SUSE bug 1063037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12182">SUSE bug 1063037</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712183" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12183</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12183" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12183.html">CVE-2017-12183</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12183">SUSE bug 1063035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12183">SUSE bug 1063035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12183">SUSE bug 1063035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12183">SUSE bug 1063035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12183">SUSE bug 1063035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12183">SUSE bug 1063035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12183">SUSE bug 1063035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12183">SUSE bug 1063035</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12184</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12184" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12184.html">CVE-2017-12184</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12184">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12184">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12184">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12184">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12184">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12184">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12184">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12184">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12184">SUSE bug 1063034</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712185" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12185</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12185" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12185.html">CVE-2017-12185</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12185">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12185">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12185">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12185">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12185">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12185">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12185">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12185">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12185">SUSE bug 1063034</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712186" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12186</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12186" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12186.html">CVE-2017-12186</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12186">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12186">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12186">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12186">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12186">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12186">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12186">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12186">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12186">SUSE bug 1063034</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12187</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12187" source="CVE"/>
    <description>
    xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12187.html">CVE-2017-12187</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12187">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12187">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12187">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12187">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12187">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12187">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12187">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12187">SUSE bug 1063034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12187">SUSE bug 1063034</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165963" comment="xorg-x11-server-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165964" comment="xorg-x11-server-extra-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165965" comment="xorg-x11-server-sdk-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165966" comment="xorg-x11-server-source-7.6_1.18.3-12.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12193</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12193" source="CVE"/>
    <description>
    The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12193.html">CVE-2017-12193</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12193">SUSE bug 1066192</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12424</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12424" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12424" source="CVE"/>
    <description>
    In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12424.html">CVE-2017-12424</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12424">SUSE bug 1052261</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12424">SUSE bug 1052261</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12424">SUSE bug 1052261</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12424">SUSE bug 1052261</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12424">SUSE bug 1052261</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12424">SUSE bug 1052261</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12424">SUSE bug 1052261</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12424">SUSE bug 1052261</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12424">SUSE bug 1052261</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166873" comment="shadow-4.2.1-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166874" comment="shadow is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12428</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12428" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12428" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service in CloneDrawInfo in draw.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12428.html">CVE-2017-12428</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12428">SUSE bug 1052249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12428">SUSE bug 1052249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12428">SUSE bug 1052249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12428">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12428">SUSE bug 1052249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12428">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12428">SUSE bug 1052249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12428">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12428">SUSE bug 1052249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12428">SUSE bug 1052249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12428">SUSE bug 1052249</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166921" comment="ImageMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166922" comment="ImageMagick-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166915" comment="ImageMagick-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166923" comment="ImageMagick-doc-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166924" comment="ImageMagick-extra-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166925" comment="libMagick++-6_Q16-3-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166916" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166917" comment="libMagick++-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166918" comment="libMagick++-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166926" comment="libMagickCore-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166919" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166927" comment="libMagickWand-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166920" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166928" comment="perl-PerlMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12430</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12430" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12430" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12430.html">CVE-2017-12430</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052251</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052252</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12430">SUSE bug 1052251</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169709" comment="ImageMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169710" comment="ImageMagick-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169711" comment="ImageMagick-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169712" comment="ImageMagick-doc-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169713" comment="ImageMagick-extra-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169714" comment="libMagick++-6_Q16-3-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169715" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169716" comment="libMagick++-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169717" comment="libMagick++-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169718" comment="libMagickCore-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169719" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169720" comment="libMagickWand-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169721" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169722" comment="perl-PerlMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712431" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12431</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12431" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12431" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12431.html">CVE-2017-12431</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12431">SUSE bug 1052253</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166921" comment="ImageMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166922" comment="ImageMagick-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166915" comment="ImageMagick-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166923" comment="ImageMagick-doc-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166924" comment="ImageMagick-extra-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166925" comment="libMagick++-6_Q16-3-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166916" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166917" comment="libMagick++-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166918" comment="libMagick++-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166926" comment="libMagickCore-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166919" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166927" comment="libMagickWand-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166920" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166928" comment="perl-PerlMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12433</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12433" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12433" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadPESImage in coders/pes.c, which allows attackers to cause a denial of service, related to ResizeMagickMemory in memory.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12433.html">CVE-2017-12433</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12433">SUSE bug 1052545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12433">SUSE bug 1052545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12433">SUSE bug 1052545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12433">SUSE bug 1052545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12433">SUSE bug 1052545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12433">SUSE bug 1052545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12433">SUSE bug 1052545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12433">SUSE bug 1052545</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12433">SUSE bug 1052545</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166921" comment="ImageMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166922" comment="ImageMagick-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166915" comment="ImageMagick-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166923" comment="ImageMagick-doc-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166924" comment="ImageMagick-extra-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166925" comment="libMagick++-6_Q16-3-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166916" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166917" comment="libMagick++-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166918" comment="libMagick++-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166926" comment="libMagickCore-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166919" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166927" comment="libMagickWand-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166920" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166928" comment="perl-PerlMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12434</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12434" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12434" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12434.html">CVE-2017-12434</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12434">SUSE bug 1052550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12434">SUSE bug 1052550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12434">SUSE bug 1052550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12434">SUSE bug 1052550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12434">SUSE bug 1052550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12434">SUSE bug 1052550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12434">SUSE bug 1052550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12434">SUSE bug 1052550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12434">SUSE bug 1052550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12434">SUSE bug 1052550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12434">SUSE bug 1052550</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12435</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12435" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12435" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12435.html">CVE-2017-12435</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12435">SUSE bug 1052553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12435">SUSE bug 1052553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12435">SUSE bug 1052553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12435">SUSE bug 1052553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12435">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12435">SUSE bug 1052553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12435">SUSE bug 1052553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12435">SUSE bug 1052553</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12448</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12448" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12448" source="CVE"/>
    <description>
    The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect functions are called during an attempt to release memory. The issue can be addressed by better input validation in the bfd_generic_archive_p function in bfd/archive.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12448.html">CVE-2017-12448</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12448">SUSE bug 1052518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12448">SUSE bug 1052518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12448">SUSE bug 1052518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12448">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12448">SUSE bug 1052518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12448">SUSE bug 1052518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12448">SUSE bug 1052518</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12448">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12448">SUSE bug 1059785</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12450</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12450" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12450" source="CVE"/>
    <description>
    The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12450.html">CVE-2017-12450</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12450">SUSE bug 1052514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12450">SUSE bug 1052514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12450">SUSE bug 1052514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12450">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12450">SUSE bug 1052514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12450">SUSE bug 1052514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12450">SUSE bug 1052514</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12450">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12450">SUSE bug 1059785</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12452</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12452" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12452" source="CVE"/>
    <description>
    The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted mach-o file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12452.html">CVE-2017-12452</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12452">SUSE bug 1052511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12452">SUSE bug 1052511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12452">SUSE bug 1052511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12452">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12452">SUSE bug 1052511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12452">SUSE bug 1052511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12452">SUSE bug 1052511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12452">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12452">SUSE bug 1059785</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12453</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12453" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12453" source="CVE"/>
    <description>
    The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12453.html">CVE-2017-12453</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12453">SUSE bug 1052509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12453">SUSE bug 1052509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12453">SUSE bug 1052509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12453">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12453">SUSE bug 1052509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12453">SUSE bug 1052509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12453">SUSE bug 1052509</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12453">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12453">SUSE bug 1059785</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12454</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12454" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12454" source="CVE"/>
    <description>
    The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12454.html">CVE-2017-12454</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12454">SUSE bug 1052507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12454">SUSE bug 1052507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12454">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12454">SUSE bug 1052507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12454">SUSE bug 1052507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12454">SUSE bug 1052507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12454">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12454">SUSE bug 1059785</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12456</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12456" source="CVE"/>
    <description>
    The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12456.html">CVE-2017-12456</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12456">SUSE bug 1052503</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12456">SUSE bug 1052503</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12456">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12456">SUSE bug 1052503</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12456">SUSE bug 1052503</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12456">SUSE bug 1052503</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12456">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12456">SUSE bug 1059785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12456">SUSE bug 1052503</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12456">SUSE bug 1052503</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12456">SUSE bug 1052503</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12563</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12563" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12563.html">CVE-2017-12563</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12563">SUSE bug 1052460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12563">SUSE bug 1052460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12563">SUSE bug 1052460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12563">SUSE bug 1052460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12563">SUSE bug 1052460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12563">SUSE bug 1072901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12563">SUSE bug 1052460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169232" comment="ImageMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169233" comment="ImageMagick-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169234" comment="ImageMagick-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169235" comment="ImageMagick-doc-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169236" comment="ImageMagick-extra-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169237" comment="libMagick++-6_Q16-3-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169238" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169239" comment="libMagick++-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169240" comment="libMagick++-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169241" comment="libMagickCore-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169242" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169243" comment="libMagickWand-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169244" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169245" comment="perl-PerlMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712564" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12564</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12564" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12564.html">CVE-2017-12564</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12564">SUSE bug 1052468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12564">SUSE bug 1052468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12564">SUSE bug 1052468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12564">SUSE bug 1052468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12564">SUSE bug 1052468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12564">SUSE bug 1052468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12564">SUSE bug 1052468</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12587</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12587" source="CVE"/>
    <description>
    ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12587.html">CVE-2017-12587</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12587">SUSE bug 1052450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712617" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12617</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12617" source="CVE"/>
    <description>
    When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12617.html">CVE-2017-12617</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12617">SUSE bug 1059554</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167063" comment="tomcat-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167064" comment="tomcat-admin-webapps-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167065" comment="tomcat-docs-webapp-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167066" comment="tomcat-el-3_0-api-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167067" comment="tomcat-embed-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167068" comment="tomcat-javadoc-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167069" comment="tomcat-jsp-2_3-api-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167070" comment="tomcat-jsvc-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167071" comment="tomcat-lib-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167072" comment="tomcat-servlet-3_1-api-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167073" comment="tomcat-webapps-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12618</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12618" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12618" source="CVE"/>
    <description>
    Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12618.html">CVE-2017-12618</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12618">SUSE bug 1064990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12618">SUSE bug 1064990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12618">SUSE bug 1064990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12618">SUSE bug 1064990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12618">SUSE bug 1064990</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168538" comment="libapr-util1-1.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151171" comment="libapr-util1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168539" comment="libapr-util1-dbd-mysql-1.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168540" comment="libapr-util1-dbd-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168541" comment="libapr-util1-dbd-pgsql-1.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168542" comment="libapr-util1-dbd-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168543" comment="libapr-util1-dbd-sqlite3-1.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168544" comment="libapr-util1-dbd-sqlite3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168545" comment="libapr-util1-devel-1.5.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151172" comment="libapr-util1-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12641</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12641" source="CVE"/>
    <description>
    ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12641.html">CVE-2017-12641</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12641">SUSE bug 1052777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12641">SUSE bug 1052777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12641">SUSE bug 1052777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12641">SUSE bug 1052777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12641">SUSE bug 1052777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12641">SUSE bug 1052777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12641">SUSE bug 1052777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12641">SUSE bug 1052777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12641">SUSE bug 1052777</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170211" comment="GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170212" comment="GraphicsMagick-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170213" comment="libGraphicsMagick++-Q16-12-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170214" comment="libGraphicsMagick++-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170215" comment="libGraphicsMagick-Q16-3-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170216" comment="libGraphicsMagick3-config-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170217" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170218" comment="perl-GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12642</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12642" source="CVE"/>
    <description>
    ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12642.html">CVE-2017-12642</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12642">SUSE bug 1052771</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169709" comment="ImageMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169710" comment="ImageMagick-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169711" comment="ImageMagick-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169712" comment="ImageMagick-doc-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169713" comment="ImageMagick-extra-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169714" comment="libMagick++-6_Q16-3-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169715" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169716" comment="libMagick++-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169717" comment="libMagick++-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169718" comment="libMagickCore-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169719" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169720" comment="libMagickWand-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169721" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169722" comment="perl-PerlMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712644" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12644</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12644" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12644" source="CVE"/>
    <description>
    ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12644.html">CVE-2017-12644</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12644">SUSE bug 1052764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12644">SUSE bug 1052764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12644">SUSE bug 1052764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12644">SUSE bug 1051847</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12644">SUSE bug 1052764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12644">SUSE bug 1052764</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12644">SUSE bug 1052764</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168263" comment="GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168264" comment="GraphicsMagick-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168265" comment="libGraphicsMagick++-Q16-12-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168266" comment="libGraphicsMagick++-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168267" comment="libGraphicsMagick-Q16-3-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168268" comment="libGraphicsMagick3-config-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168269" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168270" comment="perl-GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712662" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12662</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12662" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12662" source="CVE"/>
    <description>
    ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePDFImage in coders/pdf.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12662.html">CVE-2017-12662</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12662">SUSE bug 1052758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12662">SUSE bug 1052758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12662">SUSE bug 1052758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12662">SUSE bug 1052758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12662">SUSE bug 1052758</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12662">SUSE bug 1052758</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168263" comment="GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168264" comment="GraphicsMagick-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168265" comment="libGraphicsMagick++-Q16-12-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168266" comment="libGraphicsMagick++-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168267" comment="libGraphicsMagick-Q16-3-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168268" comment="libGraphicsMagick3-config-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168269" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168270" comment="perl-GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12667</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12667" source="CVE"/>
    <description>
    ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\mat.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12667.html">CVE-2017-12667</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12667">SUSE bug 1052732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12667">SUSE bug 1052732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12667">SUSE bug 1052732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12667">SUSE bug 1052732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12667">SUSE bug 1052732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12667">SUSE bug 1052732</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12667">SUSE bug 1052732</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12669</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12669" source="CVE"/>
    <description>
    ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12669.html">CVE-2017-12669</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12669">SUSE bug 1052689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12669">SUSE bug 1052689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12669">SUSE bug 1052689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12669">SUSE bug 1052689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12669">SUSE bug 1052689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12669">SUSE bug 1052689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12669">SUSE bug 1052689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12669">SUSE bug 1052689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12669">SUSE bug 1052689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12669">SUSE bug 1052689</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12670</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12670" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12670.html">CVE-2017-12670</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12670">SUSE bug 1052731</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12672</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12672" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12672" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12672.html">CVE-2017-12672</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12672">SUSE bug 1052720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12672">SUSE bug 1052720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12672">SUSE bug 1052720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12672">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12672">SUSE bug 1052720</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12672">SUSE bug 1052720</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712673" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12673</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12673" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12673" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12673.html">CVE-2017-12673</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12673">SUSE bug 1052717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12673">SUSE bug 1052717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12673">SUSE bug 1052717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12673">SUSE bug 1052717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12673">SUSE bug 1052717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12673">SUSE bug 1052717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12673">SUSE bug 1052717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12673">SUSE bug 1052717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12673">SUSE bug 1052717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12673">SUSE bug 1052717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12673">SUSE bug 1052717</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170211" comment="GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170212" comment="GraphicsMagick-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170213" comment="libGraphicsMagick++-Q16-12-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170214" comment="libGraphicsMagick++-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170215" comment="libGraphicsMagick-Q16-3-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170216" comment="libGraphicsMagick3-config-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170217" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170218" comment="perl-GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712675" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12675</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12675" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12675.html">CVE-2017-12675</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12675">SUSE bug 1052710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12675">SUSE bug 1052710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12675">SUSE bug 1052710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12675">SUSE bug 1052710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12675">SUSE bug 1052710</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12675">SUSE bug 1052710</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12676</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12676" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12676" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12676.html">CVE-2017-12676</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12676">SUSE bug 1052708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12676">SUSE bug 1052708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12676">SUSE bug 1052708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12676">SUSE bug 1052708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12676">SUSE bug 1052708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12676">SUSE bug 1052708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12676">SUSE bug 1052708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12676">SUSE bug 1052708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12676">SUSE bug 1052708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12676">SUSE bug 1052708</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170211" comment="GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170212" comment="GraphicsMagick-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170213" comment="libGraphicsMagick++-Q16-12-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170214" comment="libGraphicsMagick++-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170215" comment="libGraphicsMagick-Q16-3-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170216" comment="libGraphicsMagick3-config-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170217" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170218" comment="perl-GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712678" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12678</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12678" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12678" source="CVE"/>
    <description>
    In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12678.html">CVE-2017-12678</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12678">SUSE bug 1052699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12678">SUSE bug 1052699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12678">SUSE bug 1052699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12678">SUSE bug 1052699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12678">SUSE bug 1052699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12678">SUSE bug 1052699</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162045" comment="libtag-devel-1.11-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151715" comment="libtag-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162046" comment="libtag1-1.11-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151716" comment="libtag1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162047" comment="libtag1-32bit-1.11-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162048" comment="libtag1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162049" comment="libtag_c0-1.11-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151717" comment="libtag_c0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162050" comment="libtag_c0-32bit-1.11-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162051" comment="libtag_c0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162052" comment="taglib-1.11-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151718" comment="taglib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712691" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12691</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12691" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12691" source="CVE"/>
    <description>
    The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12691.html">CVE-2017-12691</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12691">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12691">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12691">SUSE bug 1082363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12691">SUSE bug 1082363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12691">SUSE bug 1082363</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169232" comment="ImageMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169233" comment="ImageMagick-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169234" comment="ImageMagick-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169235" comment="ImageMagick-doc-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169236" comment="ImageMagick-extra-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169237" comment="libMagick++-6_Q16-3-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169238" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169239" comment="libMagick++-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169240" comment="libMagick++-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169241" comment="libMagickCore-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169242" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169243" comment="libMagickWand-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169244" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169245" comment="perl-PerlMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12791</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12791" source="CVE"/>
    <description>
    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12791.html">CVE-2017-12791</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1062462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1062462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12791">SUSE bug 1053955</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165931" comment="salt-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153592" comment="salt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165932" comment="salt-api-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153593" comment="salt-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165933" comment="salt-bash-completion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153594" comment="salt-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165934" comment="salt-cloud-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153595" comment="salt-cloud is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165935" comment="salt-doc-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153596" comment="salt-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165936" comment="salt-fish-completion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153597" comment="salt-fish-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165937" comment="salt-master-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153598" comment="salt-master is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165938" comment="salt-minion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153599" comment="salt-minion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165939" comment="salt-proxy-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153600" comment="salt-proxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165940" comment="salt-ssh-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153602" comment="salt-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165941" comment="salt-syndic-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153603" comment="salt-syndic is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165942" comment="salt-zsh-completion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153604" comment="salt-zsh-completion is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712799" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12799</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12799" source="CVE"/>
    <description>
    The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12799.html">CVE-2017-12799</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12799">SUSE bug 1053347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12799">SUSE bug 1053347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12799">SUSE bug 1053347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12799">SUSE bug 1053347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12799">SUSE bug 1053347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12799">SUSE bug 1053347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12799">SUSE bug 1053347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12799">SUSE bug 1053347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12799">SUSE bug 1053347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12799">SUSE bug 1053347</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712809" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12809</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12809" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12809" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12809.html">CVE-2017-12809</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12809">SUSE bug 1054724</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12836" source="CVE"/>
    <description>
    CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12836.html">CVE-2017-12836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1066430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1066430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12836">SUSE bug 1071709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164124" comment="cvs-1.12.12-185.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151684" comment="cvs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164125" comment="cvs-doc-1.12.12-185.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164126" comment="cvs-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12837" source="CVE"/>
    <description>
    Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\N{}' escape and the case-insensitive modifier.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12837.html">CVE-2017-12837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12837">SUSE bug 1057724</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167170" comment="perl-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167171" comment="perl-32bit-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167172" comment="perl-base-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167173" comment="perl-base-32bit-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167174" comment="perl-doc-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712855" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12855</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12855" source="CVE"/>
    <description>
    Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12855.html">CVE-2017-12855</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12855">SUSE bug 1052686</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163455" comment="xen-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163456" comment="xen-devel-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163457" comment="xen-doc-html-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163458" comment="xen-libs-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163459" comment="xen-libs-32bit-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163460" comment="xen-tools-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163461" comment="xen-tools-domU-4.7.3_03-11.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712880" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12880</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12880" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12880" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11424.  Reason: This candidate is a duplicate of CVE-2017-11424.  Notes: All CVE users should reference CVE-2017-11424 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12880.html">CVE-2017-12880</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12880">SUSE bug 1054106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12880">SUSE bug 1054106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12880">SUSE bug 1054106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12880">SUSE bug 1054106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12880">SUSE bug 1054106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12880">SUSE bug 1054106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12880">SUSE bug 1054106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12880">SUSE bug 1054106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12880">SUSE bug 1054106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12880">SUSE bug 1054106</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12880">SUSE bug 1054106</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168889" comment="python-PyJWT-1.4.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168890" comment="python-PyJWT is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712883" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12883</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12883" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12883" source="CVE"/>
    <description>
    Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12883.html">CVE-2017-12883</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12883">SUSE bug 1057721</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167170" comment="perl-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167171" comment="perl-32bit-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167172" comment="perl-base-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167173" comment="perl-base-32bit-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167174" comment="perl-doc-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712893" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12893</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12893" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12893" source="CVE"/>
    <description>
    The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12893.html">CVE-2017-12893</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12893">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12893">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12893">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12893">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12893">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712894" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12894</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12894" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12894" source="CVE"/>
    <description>
    Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12894.html">CVE-2017-12894</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12894">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12894">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12894">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12894">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12894">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712895" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12895</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12895" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12895" source="CVE"/>
    <description>
    The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12895.html">CVE-2017-12895</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12895">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12895">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12895">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12895">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12895">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12896</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12896" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12896" source="CVE"/>
    <description>
    The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12896.html">CVE-2017-12896</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12896">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12896">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12896">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12896">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12896">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12897</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12897" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12897" source="CVE"/>
    <description>
    The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12897.html">CVE-2017-12897</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12897">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12897">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12897">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12897">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12897">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12898</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12898" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12898" source="CVE"/>
    <description>
    The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12898.html">CVE-2017-12898</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12898">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12898">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12898">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12898">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12898">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712899" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12899</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12899" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12899" source="CVE"/>
    <description>
    The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12899.html">CVE-2017-12899</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12899">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12899">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12899">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12899">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12899">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712900" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12900</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12900" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12900" source="CVE"/>
    <description>
    Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12900.html">CVE-2017-12900</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12900">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12900">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12900">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12900">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12900">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712901" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12901</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12901" source="CVE"/>
    <description>
    The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12901.html">CVE-2017-12901</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12901">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12901">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12901">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12901">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12901">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712902" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12902</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12902" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12902" source="CVE"/>
    <description>
    The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12902.html">CVE-2017-12902</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12902">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12902">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12902">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12902">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12902">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712904" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12904</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12904" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12904" source="CVE"/>
    <description>
    Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12904.html">CVE-2017-12904</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12904">SUSE bug 1054578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12904">SUSE bug 1054578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12904">SUSE bug 1054578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12904">SUSE bug 1054578</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169929" comment="newsbeuter-2.9-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169930" comment="newsbeuter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169931" comment="newsbeuter-lang-2.9-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169932" comment="newsbeuter-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712927" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12927</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12927" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12927" source="CVE"/>
    <description>
    A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12927.html">CVE-2017-12927</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12927">SUSE bug 1054390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12927">SUSE bug 1054390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12927">SUSE bug 1054390</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163283" comment="cacti-1.1.19-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163284" comment="cacti-doc-1.1.19-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163285" comment="cacti-spine-1.1.19-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12932</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12932" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12932" source="CVE"/>
    <description>
    ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12932.html">CVE-2017-12932</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12932">SUSE bug 1054432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12932">SUSE bug 1054432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12932">SUSE bug 1054432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12932">SUSE bug 1054432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12932">SUSE bug 1054432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12932">SUSE bug 1054432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12932">SUSE bug 1054432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12932">SUSE bug 1054432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12932">SUSE bug 1054432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12932">SUSE bug 1054432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12932">SUSE bug 1054432</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164127" comment="apache2-mod_php7-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164128" comment="php7-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164129" comment="php7-bcmath-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164130" comment="php7-bz2-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164131" comment="php7-calendar-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164132" comment="php7-ctype-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164133" comment="php7-curl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164134" comment="php7-dba-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164135" comment="php7-devel-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164136" comment="php7-dom-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164137" comment="php7-enchant-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164138" comment="php7-exif-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164139" comment="php7-fastcgi-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164140" comment="php7-fileinfo-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164141" comment="php7-firebird-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164142" comment="php7-fpm-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164143" comment="php7-ftp-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164144" comment="php7-gd-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164145" comment="php7-gettext-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164146" comment="php7-gmp-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164147" comment="php7-iconv-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164148" comment="php7-imap-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164149" comment="php7-intl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164150" comment="php7-json-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164151" comment="php7-ldap-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164152" comment="php7-mbstring-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164153" comment="php7-mcrypt-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164154" comment="php7-mysql-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164155" comment="php7-odbc-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164156" comment="php7-opcache-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164157" comment="php7-openssl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164158" comment="php7-pcntl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164159" comment="php7-pdo-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164160" comment="php7-pear-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164161" comment="php7-pear-Archive_Tar-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164162" comment="php7-pgsql-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164163" comment="php7-phar-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164164" comment="php7-posix-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164165" comment="php7-pspell-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164166" comment="php7-readline-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164167" comment="php7-shmop-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164168" comment="php7-snmp-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164169" comment="php7-soap-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164170" comment="php7-sockets-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164171" comment="php7-sqlite-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164172" comment="php7-sysvmsg-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164173" comment="php7-sysvsem-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164174" comment="php7-sysvshm-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164175" comment="php7-tidy-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164176" comment="php7-tokenizer-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164177" comment="php7-wddx-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164178" comment="php7-xmlreader-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164179" comment="php7-xmlrpc-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164180" comment="php7-xmlwriter-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164181" comment="php7-xsl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164182" comment="php7-zip-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164183" comment="php7-zlib-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712933" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12933</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12933" source="CVE"/>
    <description>
    The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12933.html">CVE-2017-12933</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12933">SUSE bug 1054430</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164651" comment="apache2-mod_php5-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164127" comment="apache2-mod_php7-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164652" comment="php5-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164653" comment="php5-bcmath-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164654" comment="php5-bz2-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164655" comment="php5-calendar-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164656" comment="php5-ctype-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164657" comment="php5-curl-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164658" comment="php5-dba-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164659" comment="php5-devel-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164660" comment="php5-dom-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164661" comment="php5-enchant-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164662" comment="php5-exif-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164663" comment="php5-fastcgi-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164664" comment="php5-fileinfo-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164665" comment="php5-firebird-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164666" comment="php5-fpm-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164667" comment="php5-ftp-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164668" comment="php5-gd-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164669" comment="php5-gettext-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164670" comment="php5-gmp-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164671" comment="php5-iconv-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164672" comment="php5-imap-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164673" comment="php5-intl-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164674" comment="php5-json-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164675" comment="php5-ldap-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164676" comment="php5-mbstring-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164677" comment="php5-mcrypt-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164678" comment="php5-mssql-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164679" comment="php5-mysql-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164680" comment="php5-odbc-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164681" comment="php5-opcache-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164682" comment="php5-openssl-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164683" comment="php5-pcntl-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164684" comment="php5-pdo-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164685" comment="php5-pear-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164686" comment="php5-pgsql-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164687" comment="php5-phar-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164688" comment="php5-posix-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164689" comment="php5-pspell-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164690" comment="php5-readline-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164691" comment="php5-shmop-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164692" comment="php5-snmp-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164693" comment="php5-soap-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164694" comment="php5-sockets-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164695" comment="php5-sqlite-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164696" comment="php5-suhosin-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164697" comment="php5-sysvmsg-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164698" comment="php5-sysvsem-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164699" comment="php5-sysvshm-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164700" comment="php5-tidy-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164701" comment="php5-tokenizer-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164702" comment="php5-wddx-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164703" comment="php5-xmlreader-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164704" comment="php5-xmlrpc-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164705" comment="php5-xmlwriter-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164706" comment="php5-xsl-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164707" comment="php5-zip-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164708" comment="php5-zlib-5.5.14-77.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164128" comment="php7-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164129" comment="php7-bcmath-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164130" comment="php7-bz2-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164131" comment="php7-calendar-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164132" comment="php7-ctype-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164133" comment="php7-curl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164134" comment="php7-dba-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164135" comment="php7-devel-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164136" comment="php7-dom-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164137" comment="php7-enchant-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164138" comment="php7-exif-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164139" comment="php7-fastcgi-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164140" comment="php7-fileinfo-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164141" comment="php7-firebird-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164142" comment="php7-fpm-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164143" comment="php7-ftp-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164144" comment="php7-gd-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164145" comment="php7-gettext-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164146" comment="php7-gmp-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164147" comment="php7-iconv-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164148" comment="php7-imap-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164149" comment="php7-intl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164150" comment="php7-json-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164151" comment="php7-ldap-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164152" comment="php7-mbstring-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164153" comment="php7-mcrypt-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164154" comment="php7-mysql-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164155" comment="php7-odbc-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164156" comment="php7-opcache-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164157" comment="php7-openssl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164158" comment="php7-pcntl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164159" comment="php7-pdo-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164160" comment="php7-pear-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164161" comment="php7-pear-Archive_Tar-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164162" comment="php7-pgsql-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164163" comment="php7-phar-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164164" comment="php7-posix-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164165" comment="php7-pspell-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164166" comment="php7-readline-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164167" comment="php7-shmop-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164168" comment="php7-snmp-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164169" comment="php7-soap-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164170" comment="php7-sockets-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164171" comment="php7-sqlite-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164172" comment="php7-sysvmsg-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164173" comment="php7-sysvsem-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164174" comment="php7-sysvshm-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164175" comment="php7-tidy-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164176" comment="php7-tokenizer-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164177" comment="php7-wddx-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164178" comment="php7-xmlreader-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164179" comment="php7-xmlrpc-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164180" comment="php7-xmlwriter-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164181" comment="php7-xsl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164182" comment="php7-zip-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164183" comment="php7-zlib-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712934" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12934</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12934" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12934" source="CVE"/>
    <description>
    ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free while unserializing untrusted data, related to the zval_get_type function in Zend/zend_types.h. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12934.html">CVE-2017-12934</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12934">SUSE bug 1054408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12934">SUSE bug 1054408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12934">SUSE bug 1054408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12934">SUSE bug 1054408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12934">SUSE bug 1054408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12934">SUSE bug 1054408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12934">SUSE bug 1054408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12934">SUSE bug 1054408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12934">SUSE bug 1054408</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12934">SUSE bug 1054408</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164127" comment="apache2-mod_php7-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164128" comment="php7-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164129" comment="php7-bcmath-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164130" comment="php7-bz2-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164131" comment="php7-calendar-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164132" comment="php7-ctype-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164133" comment="php7-curl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164134" comment="php7-dba-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164135" comment="php7-devel-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164136" comment="php7-dom-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164137" comment="php7-enchant-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164138" comment="php7-exif-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164139" comment="php7-fastcgi-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164140" comment="php7-fileinfo-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164141" comment="php7-firebird-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164142" comment="php7-fpm-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164143" comment="php7-ftp-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164144" comment="php7-gd-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164145" comment="php7-gettext-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164146" comment="php7-gmp-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164147" comment="php7-iconv-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164148" comment="php7-imap-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164149" comment="php7-intl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164150" comment="php7-json-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164151" comment="php7-ldap-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164152" comment="php7-mbstring-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164153" comment="php7-mcrypt-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164154" comment="php7-mysql-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164155" comment="php7-odbc-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164156" comment="php7-opcache-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164157" comment="php7-openssl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164158" comment="php7-pcntl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164159" comment="php7-pdo-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164160" comment="php7-pear-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164161" comment="php7-pear-Archive_Tar-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164162" comment="php7-pgsql-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164163" comment="php7-phar-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164164" comment="php7-posix-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164165" comment="php7-pspell-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164166" comment="php7-readline-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164167" comment="php7-shmop-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164168" comment="php7-snmp-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164169" comment="php7-soap-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164170" comment="php7-sockets-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164171" comment="php7-sqlite-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164172" comment="php7-sysvmsg-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164173" comment="php7-sysvsem-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164174" comment="php7-sysvshm-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164175" comment="php7-tidy-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164176" comment="php7-tokenizer-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164177" comment="php7-wddx-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164178" comment="php7-xmlreader-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164179" comment="php7-xmlrpc-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164180" comment="php7-xmlwriter-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164181" comment="php7-xsl-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164182" comment="php7-zip-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164183" comment="php7-zlib-7.0.7-14.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712935" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12935</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12935" source="CVE"/>
    <description>
    The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 mishandles large MNG images, leading to an invalid memory read in the SetImageColorCallBack function in magick/image.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12935.html">CVE-2017-12935</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12935">SUSE bug 1054600</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170211" comment="GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170212" comment="GraphicsMagick-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170213" comment="libGraphicsMagick++-Q16-12-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170214" comment="libGraphicsMagick++-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170215" comment="libGraphicsMagick-Q16-3-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170216" comment="libGraphicsMagick3-config-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170217" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170218" comment="perl-GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712936" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12936</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12936" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12936" source="CVE"/>
    <description>
    The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12936.html">CVE-2017-12936</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12936">SUSE bug 1054598</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166214" comment="GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166215" comment="GraphicsMagick-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166216" comment="libGraphicsMagick++-Q16-12-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166217" comment="libGraphicsMagick++-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166218" comment="libGraphicsMagick-Q16-3-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166219" comment="libGraphicsMagick3-config-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166220" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166221" comment="perl-GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12937</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12937" source="CVE"/>
    <description>
    The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12937.html">CVE-2017-12937</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054596</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12937">SUSE bug 1054596</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166214" comment="GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166215" comment="GraphicsMagick-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166216" comment="libGraphicsMagick++-Q16-12-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166217" comment="libGraphicsMagick++-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166218" comment="libGraphicsMagick-Q16-3-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166219" comment="libGraphicsMagick3-config-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166220" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166221" comment="perl-GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712958" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12958</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12958" source="CVE"/>
    <description>
    There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12958.html">CVE-2017-12958</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12958">SUSE bug 1054585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12958">SUSE bug 1054585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12958">SUSE bug 1054585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12958">SUSE bug 1054585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12958">SUSE bug 1054585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12958">SUSE bug 1054585</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163117" comment="pspp-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161698" comment="pspp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163118" comment="pspp-devel-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161700" comment="pspp-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712959" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12959</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12959" source="CVE"/>
    <description>
    There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12959.html">CVE-2017-12959</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12959">SUSE bug 1054588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12959">SUSE bug 1054588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12959">SUSE bug 1054588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12959">SUSE bug 1054588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12959">SUSE bug 1054588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12959">SUSE bug 1054588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163117" comment="pspp-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161698" comment="pspp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163118" comment="pspp-devel-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161700" comment="pspp-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712960" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12960</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12960" source="CVE"/>
    <description>
    There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12960.html">CVE-2017-12960</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12960">SUSE bug 1054587</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12960">SUSE bug 1054587</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12960">SUSE bug 1054587</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12960">SUSE bug 1054587</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12960">SUSE bug 1054587</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12960">SUSE bug 1054587</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163117" comment="pspp-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161698" comment="pspp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163118" comment="pspp-devel-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161700" comment="pspp-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712961" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12961</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12961" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12961" source="CVE"/>
    <description>
    There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12961.html">CVE-2017-12961</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12961">SUSE bug 1054586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12961">SUSE bug 1054586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12961">SUSE bug 1054586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12961">SUSE bug 1054586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12961">SUSE bug 1054586</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12961">SUSE bug 1054586</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163117" comment="pspp-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161698" comment="pspp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163118" comment="pspp-devel-1.0.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161700" comment="pspp-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12976</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12976" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12976" source="CVE"/>
    <description>
    git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12976.html">CVE-2017-12976</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1054653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1054653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1054653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1054653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1054653</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1053919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1066430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1066430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12976">SUSE bug 1071709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162556" comment="git-annex-6.20170818-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162557" comment="git-annex is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162558" comment="git-annex-bash-completion-6.20170818-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162559" comment="git-annex-bash-completion is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12978</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12978" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12978" source="CVE"/>
    <description>
    lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12978.html">CVE-2017-12978</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12978">SUSE bug 1054742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12978">SUSE bug 1054742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12978">SUSE bug 1054742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12978">SUSE bug 1054742</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12978">SUSE bug 1054742</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163283" comment="cacti-1.1.19-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163284" comment="cacti-doc-1.1.19-16.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163285" comment="cacti-spine-1.1.19-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712983" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12983</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12983" source="CVE"/>
    <description>
    Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12983.html">CVE-2017-12983</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12983">SUSE bug 1054757</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166943" comment="GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166944" comment="GraphicsMagick-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166945" comment="libGraphicsMagick++-Q16-12-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166946" comment="libGraphicsMagick++-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166947" comment="libGraphicsMagick-Q16-3-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166948" comment="libGraphicsMagick3-config-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166949" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166950" comment="perl-GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12985</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12985" source="CVE"/>
    <description>
    The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12985.html">CVE-2017-12985</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12985">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12985">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12985">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12985">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12985">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12986</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12986" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12986" source="CVE"/>
    <description>
    The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12986.html">CVE-2017-12986</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12986">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12986">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12986">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12986">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12986">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12987</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12987" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12987" source="CVE"/>
    <description>
    The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12987.html">CVE-2017-12987</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12987">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12987">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12987">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12987">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12987">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712988" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12988</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12988" source="CVE"/>
    <description>
    The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12988.html">CVE-2017-12988</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12988">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12988">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12988">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12988">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12988">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12989</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12989" source="CVE"/>
    <description>
    The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12989.html">CVE-2017-12989</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12989">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12989">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12989">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12989">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12989">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712990" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12990</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12990" source="CVE"/>
    <description>
    The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12990.html">CVE-2017-12990</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12990">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12990">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12990">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12990">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12990">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712991" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12991</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12991" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12991" source="CVE"/>
    <description>
    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12991.html">CVE-2017-12991</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12991">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12991">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12991">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12991">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12991">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12992</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12992" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12992" source="CVE"/>
    <description>
    The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12992.html">CVE-2017-12992</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12992">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12992">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12992">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12992">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12992">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12993</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12993" source="CVE"/>
    <description>
    The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12993.html">CVE-2017-12993</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12993">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12993">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12993">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12993">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12993">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12994</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12994" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12994" source="CVE"/>
    <description>
    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12994.html">CVE-2017-12994</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12994">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12994">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12994">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12994">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12994">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712995" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12995</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12995" source="CVE"/>
    <description>
    The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12995.html">CVE-2017-12995</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12995">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12995">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12995">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12995">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12995">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712996" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12996</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12996" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12996" source="CVE"/>
    <description>
    The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12996.html">CVE-2017-12996</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12996">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12996">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12996">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12996">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12996">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12997</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12997" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12997" source="CVE"/>
    <description>
    The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12997.html">CVE-2017-12997</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12997">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12997">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12997">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12997">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12997">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712998" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12998</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12998" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12998" source="CVE"/>
    <description>
    The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12998.html">CVE-2017-12998</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12998">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12998">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12998">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12998">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12998">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201712999" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-12999</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-12999" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12999" source="CVE"/>
    <description>
    The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-12999.html">CVE-2017-12999</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12999">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12999">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12999">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12999">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-12999">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13000</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13000" source="CVE"/>
    <description>
    The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13000.html">CVE-2017-13000</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13000">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13000">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13000">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13000">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13000">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13001</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13001" source="CVE"/>
    <description>
    The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13001.html">CVE-2017-13001</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13001">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13001">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13001">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13001">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13001">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713002" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13002</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13002" source="CVE"/>
    <description>
    The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13002.html">CVE-2017-13002</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13002">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13002">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13002">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13002">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13002">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713003" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13003</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13003" source="CVE"/>
    <description>
    The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13003.html">CVE-2017-13003</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13003">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13003">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13003">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13003">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13003">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713004" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13004</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13004" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13004" source="CVE"/>
    <description>
    The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13004.html">CVE-2017-13004</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13004">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13004">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13004">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13004">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13004">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713005" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13005</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13005" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13005" source="CVE"/>
    <description>
    The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13005.html">CVE-2017-13005</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13005">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13005">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13005">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13005">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13005">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13006</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13006" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13006" source="CVE"/>
    <description>
    The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13006.html">CVE-2017-13006</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13006">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13006">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13006">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13006">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13006">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13007</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13007" source="CVE"/>
    <description>
    The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13007.html">CVE-2017-13007</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13007">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13007">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13007">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13007">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13007">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13008</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13008" source="CVE"/>
    <description>
    The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13008.html">CVE-2017-13008</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13008">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13008">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13008">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13008">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13008">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13009</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13009" source="CVE"/>
    <description>
    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13009.html">CVE-2017-13009</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13009">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13009">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13009">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13009">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13009">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13010</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13010" source="CVE"/>
    <description>
    The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13010.html">CVE-2017-13010</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13010">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13010">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13010">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13010">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13010">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13011</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13011" source="CVE"/>
    <description>
    Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13011.html">CVE-2017-13011</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13011">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13011">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13011">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13011">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13011">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13011">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13012</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13012" source="CVE"/>
    <description>
    The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13012.html">CVE-2017-13012</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13012">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13012">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13012">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13012">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13012">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13013</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13013" source="CVE"/>
    <description>
    The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13013.html">CVE-2017-13013</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13013">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13013">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13013">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13013">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13013">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713014" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13014</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13014" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13014" source="CVE"/>
    <description>
    The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13014.html">CVE-2017-13014</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13014">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13014">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13014">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13014">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13014">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13015</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13015" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13015" source="CVE"/>
    <description>
    The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13015.html">CVE-2017-13015</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13015">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13015">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13015">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13015">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13015">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13016</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13016" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13016" source="CVE"/>
    <description>
    The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13016.html">CVE-2017-13016</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13016">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13016">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13016">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13016">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13016">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13017</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13017" source="CVE"/>
    <description>
    The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13017.html">CVE-2017-13017</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13017">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13017">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13017">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13017">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13017">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13018</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13018" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13018" source="CVE"/>
    <description>
    The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13018.html">CVE-2017-13018</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13018">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13018">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13018">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13018">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13018">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13019</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13019" source="CVE"/>
    <description>
    The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13019.html">CVE-2017-13019</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13019">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13019">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13019">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13019">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13019">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13020</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13020" source="CVE"/>
    <description>
    The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13020.html">CVE-2017-13020</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13020">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13020">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13020">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13020">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13020">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13021</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13021" source="CVE"/>
    <description>
    The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13021.html">CVE-2017-13021</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13021">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13021">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13021">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13021">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13021">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13022</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13022" source="CVE"/>
    <description>
    The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13022.html">CVE-2017-13022</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13022">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13022">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13022">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13022">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13022">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13023</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13023" source="CVE"/>
    <description>
    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13023.html">CVE-2017-13023</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13023">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13023">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13023">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13023">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13023">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13024</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13024" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13024" source="CVE"/>
    <description>
    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13024.html">CVE-2017-13024</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13024">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13024">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13024">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13024">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13024">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13025</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13025" source="CVE"/>
    <description>
    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13025.html">CVE-2017-13025</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13025">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13025">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13025">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13025">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13025">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13026</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13026" source="CVE"/>
    <description>
    The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13026.html">CVE-2017-13026</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13026">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13026">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13026">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13026">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13026">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713027" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13027</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13027" source="CVE"/>
    <description>
    The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13027.html">CVE-2017-13027</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13027">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13027">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13027">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13027">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13027">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713028" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13028</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13028" source="CVE"/>
    <description>
    The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13028.html">CVE-2017-13028</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13028">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13028">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13028">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13028">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13028">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13029</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13029" source="CVE"/>
    <description>
    The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13029.html">CVE-2017-13029</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13029">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13029">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13029">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13029">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13029">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13030</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13030" source="CVE"/>
    <description>
    The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13030.html">CVE-2017-13030</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13030">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13030">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13030">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13030">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13030">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13031</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13031" source="CVE"/>
    <description>
    The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13031.html">CVE-2017-13031</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13031">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13031">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13031">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13031">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13031">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13032</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13032" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13032" source="CVE"/>
    <description>
    The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13032.html">CVE-2017-13032</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13032">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13032">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13032">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13032">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13032">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13033</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13033" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13033" source="CVE"/>
    <description>
    The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13033.html">CVE-2017-13033</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13033">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13033">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13033">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13033">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13033">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13034</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13034" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13034" source="CVE"/>
    <description>
    The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13034.html">CVE-2017-13034</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13034">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13034">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13034">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13034">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13034">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13035</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13035" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13035" source="CVE"/>
    <description>
    The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13035.html">CVE-2017-13035</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13035">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13035">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13035">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13035">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13035">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713036" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13036</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13036" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13036" source="CVE"/>
    <description>
    The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13036.html">CVE-2017-13036</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13036">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13036">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13036">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13036">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13036">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13037</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13037" source="CVE"/>
    <description>
    The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13037.html">CVE-2017-13037</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13037">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13037">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13037">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13037">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13037">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13038</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13038" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13038" source="CVE"/>
    <description>
    The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13038.html">CVE-2017-13038</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13038">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13038">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13038">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13038">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13038">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13039</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13039" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13039" source="CVE"/>
    <description>
    The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13039.html">CVE-2017-13039</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13039">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13039">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13039">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13039">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13039">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13040</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13040" source="CVE"/>
    <description>
    The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13040.html">CVE-2017-13040</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13040">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13040">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13040">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13040">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13040">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13041</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13041" source="CVE"/>
    <description>
    The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13041.html">CVE-2017-13041</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13041">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13041">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13041">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13041">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13041">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13042</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13042" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13042" source="CVE"/>
    <description>
    The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13042.html">CVE-2017-13042</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13042">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13042">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13042">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13042">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13042">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13043</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13043" source="CVE"/>
    <description>
    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13043.html">CVE-2017-13043</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13043">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13043">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13043">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13043">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13043">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13044</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13044" source="CVE"/>
    <description>
    The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13044.html">CVE-2017-13044</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13044">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13044">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13044">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13044">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13044">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13045</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13045" source="CVE"/>
    <description>
    The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13045.html">CVE-2017-13045</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13045">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13045">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13045">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13045">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13045">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13046</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13046" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13046" source="CVE"/>
    <description>
    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13046.html">CVE-2017-13046</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13046">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13046">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13046">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13046">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13046">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13047</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13047" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13047" source="CVE"/>
    <description>
    The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13047.html">CVE-2017-13047</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13047">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13047">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13047">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13047">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13047">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13048</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13048" source="CVE"/>
    <description>
    The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13048.html">CVE-2017-13048</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13048">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13048">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13048">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13048">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13048">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13049</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13049" source="CVE"/>
    <description>
    The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13049.html">CVE-2017-13049</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13049">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13049">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13049">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13049">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13049">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13050</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13050" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13050" source="CVE"/>
    <description>
    The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13050.html">CVE-2017-13050</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13050">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13050">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13050">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13050">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13050">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13051</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13051" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13051" source="CVE"/>
    <description>
    The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13051.html">CVE-2017-13051</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13051">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13051">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13051">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13051">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13051">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13052</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13052" source="CVE"/>
    <description>
    The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13052.html">CVE-2017-13052</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13052">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13052">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13052">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13052">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13052">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13053</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13053" source="CVE"/>
    <description>
    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13053.html">CVE-2017-13053</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13053">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13053">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13053">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13053">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13053">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13054</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13054" source="CVE"/>
    <description>
    The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13054.html">CVE-2017-13054</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13054">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13054">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13054">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13054">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13054">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13055</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13055" source="CVE"/>
    <description>
    The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13055.html">CVE-2017-13055</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13055">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13055">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13055">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13055">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13055">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13060</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13060" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13060.html">CVE-2017-13060</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1076021</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13060">SUSE bug 1055065</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13061</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13061" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13061" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service (ReadPSDImage memory exhaustion) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13061.html">CVE-2017-13061</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1072901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13061">SUSE bug 1055063</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169232" comment="ImageMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169233" comment="ImageMagick-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169234" comment="ImageMagick-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169235" comment="ImageMagick-doc-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169236" comment="ImageMagick-extra-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169237" comment="libMagick++-6_Q16-3-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169238" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169239" comment="libMagick++-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169240" comment="libMagick++-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169241" comment="libMagickCore-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169242" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169243" comment="libMagickWand-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169244" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169245" comment="perl-PerlMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13062</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13062" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service (WriteMETAImage memory consumption) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13062.html">CVE-2017-13062</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055055</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13062">SUSE bug 1055053</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169232" comment="ImageMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169233" comment="ImageMagick-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169234" comment="ImageMagick-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169235" comment="ImageMagick-doc-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169236" comment="ImageMagick-extra-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169237" comment="libMagick++-6_Q16-3-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169238" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169239" comment="libMagick++-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169240" comment="libMagick++-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169241" comment="libMagickCore-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169242" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169243" comment="libMagickWand-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169244" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169245" comment="perl-PerlMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13063</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13063" source="CVE"/>
    <description>
    GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13063.html">CVE-2017-13063</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055038</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13063">SUSE bug 1055050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166214" comment="GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166215" comment="GraphicsMagick-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166216" comment="libGraphicsMagick++-Q16-12-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166217" comment="libGraphicsMagick++-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166218" comment="libGraphicsMagick-Q16-3-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166219" comment="libGraphicsMagick3-config-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166220" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166221" comment="perl-GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13064</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13064" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13064" source="CVE"/>
    <description>
    GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13064.html">CVE-2017-13064</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13064">SUSE bug 1055042</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166214" comment="GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166215" comment="GraphicsMagick-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166216" comment="libGraphicsMagick++-Q16-12-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166217" comment="libGraphicsMagick++-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166218" comment="libGraphicsMagick-Q16-3-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166219" comment="libGraphicsMagick3-config-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166220" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166221" comment="perl-GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13078</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078" source="CVE"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13078.html">CVE-2017-13078</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1063479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13078">SUSE bug 1056061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165777" comment="wpa_supplicant-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165778" comment="wpa_supplicant-gui-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13079</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079" source="CVE"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13079.html">CVE-2017-13079</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1063479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13079">SUSE bug 1056061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165777" comment="wpa_supplicant-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165778" comment="wpa_supplicant-gui-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13080</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080" source="CVE"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13080.html">CVE-2017-13080</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1063667</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13080">SUSE bug 1056061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166398" comment="kernel-debug-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166399" comment="kernel-debug-base-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166400" comment="kernel-debug-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166401" comment="kernel-default-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166402" comment="kernel-default-base-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166403" comment="kernel-default-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166404" comment="kernel-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166405" comment="kernel-docs-4.4.92-18.36.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166406" comment="kernel-docs-html-4.4.92-18.36.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166407" comment="kernel-docs-pdf-4.4.92-18.36.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167631" comment="kernel-firmware-20170530-7.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166408" comment="kernel-macros-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166409" comment="kernel-obs-build-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166410" comment="kernel-obs-qa-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166411" comment="kernel-source-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166412" comment="kernel-source-vanilla-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166413" comment="kernel-syms-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166414" comment="kernel-vanilla-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166415" comment="kernel-vanilla-base-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166416" comment="kernel-vanilla-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167633" comment="ucode-amd-20170530-7.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165777" comment="wpa_supplicant-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165778" comment="wpa_supplicant-gui-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13081</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081" source="CVE"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13081.html">CVE-2017-13081</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1063479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1066295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13081">SUSE bug 1056061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167631" comment="kernel-firmware-20170530-7.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167633" comment="ucode-amd-20170530-7.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165777" comment="wpa_supplicant-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165778" comment="wpa_supplicant-gui-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13087</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087" source="CVE"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13087.html">CVE-2017-13087</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1063479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13087">SUSE bug 1056061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165777" comment="wpa_supplicant-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165778" comment="wpa_supplicant-gui-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13088</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088" source="CVE"/>
    <description>
    Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13088.html">CVE-2017-13088</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1063479</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13088">SUSE bug 1056061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166192" comment="hostapd-2.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166193" comment="hostapd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165777" comment="wpa_supplicant-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152145" comment="wpa_supplicant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165778" comment="wpa_supplicant-gui-2.2-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152146" comment="wpa_supplicant-gui is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13089</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13089" source="CVE"/>
    <description>
    The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13089.html">CVE-2017-13089</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13089">SUSE bug 1064715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13089">SUSE bug 1064715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13089">SUSE bug 1064715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13089">SUSE bug 1064715</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166222" comment="wget-1.14-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13090</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13090" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13090" source="CVE"/>
    <description>
    The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in pieces of 8192 bytes by using the MIN() macro, but ends up passing the negative chunk length to retr.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. The attacker can corrupt malloc metadata after the allocated buffer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13090.html">CVE-2017-13090</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13090">SUSE bug 1064716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13090">SUSE bug 1064716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13090">SUSE bug 1064716</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13090">SUSE bug 1064716</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166222" comment="wget-1.14-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13133</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13133" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13133.html">CVE-2017-13133</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13133">SUSE bug 1055219</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166921" comment="ImageMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166922" comment="ImageMagick-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166915" comment="ImageMagick-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166923" comment="ImageMagick-doc-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166924" comment="ImageMagick-extra-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166925" comment="libMagick++-6_Q16-3-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166916" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166917" comment="libMagick++-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166918" comment="libMagick++-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166926" comment="libMagickCore-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166919" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166927" comment="libMagickWand-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166920" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166928" comment="perl-PerlMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713134" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13134</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13134" source="CVE"/>
    <description>
    In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13134.html">CVE-2017-13134</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13134">SUSE bug 1055214</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166943" comment="GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166944" comment="GraphicsMagick-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166945" comment="libGraphicsMagick++-Q16-12-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166946" comment="libGraphicsMagick++-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166947" comment="libGraphicsMagick-Q16-3-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166948" comment="libGraphicsMagick3-config-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166949" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166950" comment="perl-GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713139" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13139</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13139" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13139" source="CVE"/>
    <description>
    In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13139.html">CVE-2017-13139</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13139">SUSE bug 1055430</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166214" comment="GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166215" comment="GraphicsMagick-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166921" comment="ImageMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166922" comment="ImageMagick-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166915" comment="ImageMagick-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166923" comment="ImageMagick-doc-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166924" comment="ImageMagick-extra-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166216" comment="libGraphicsMagick++-Q16-12-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166217" comment="libGraphicsMagick++-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166218" comment="libGraphicsMagick-Q16-3-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166219" comment="libGraphicsMagick3-config-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166220" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166925" comment="libMagick++-6_Q16-3-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166916" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166917" comment="libMagick++-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166918" comment="libMagick++-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166926" comment="libMagickCore-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166919" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166927" comment="libMagickWand-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166920" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166221" comment="perl-GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166928" comment="perl-PerlMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13142" source="CVE"/>
    <description>
    In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13142.html">CVE-2017-13142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13142">SUSE bug 1055455</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170211" comment="GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170212" comment="GraphicsMagick-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170213" comment="libGraphicsMagick++-Q16-12-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170214" comment="libGraphicsMagick++-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170215" comment="libGraphicsMagick-Q16-3-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170216" comment="libGraphicsMagick3-config-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170217" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170218" comment="perl-GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713146" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13146</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13146" source="CVE"/>
    <description>
    In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13146.html">CVE-2017-13146</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13146">SUSE bug 1055323</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713147" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13147</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13147" source="CVE"/>
    <description>
    In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13147.html">CVE-2017-13147</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13147">SUSE bug 1055374</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170211" comment="GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170212" comment="GraphicsMagick-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170213" comment="libGraphicsMagick++-Q16-12-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170214" comment="libGraphicsMagick++-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170215" comment="libGraphicsMagick-Q16-3-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170216" comment="libGraphicsMagick3-config-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170217" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170218" comment="perl-GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13194</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13194" source="CVE"/>
    <description>
    A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13194.html">CVE-2017-13194</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13194">SUSE bug 1075992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13194">SUSE bug 1075992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13194">SUSE bug 1075992</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170219" comment="libvpx-1.3.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170220" comment="libvpx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170221" comment="libvpx-devel-1.3.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170222" comment="libvpx-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170223" comment="libvpx1-1.3.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170224" comment="libvpx1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170225" comment="libvpx1-32bit-1.3.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170226" comment="libvpx1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170227" comment="vpx-tools-1.3.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170228" comment="vpx-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13648</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13648" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13648" source="CVE"/>
    <description>
    In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13648.html">CVE-2017-13648</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1055434</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13648">SUSE bug 1055434</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713658" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13658</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13658" source="CVE"/>
    <description>
    In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13658.html">CVE-2017-13658</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13658">SUSE bug 1055855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13658">SUSE bug 1055855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13658">SUSE bug 1055855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13658">SUSE bug 1055855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13658">SUSE bug 1055855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13658">SUSE bug 1055855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13658">SUSE bug 1055855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13658">SUSE bug 1055855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13658">SUSE bug 1055855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13658">SUSE bug 1055855</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713672" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13672</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13672" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13672" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13672.html">CVE-2017-13672</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1056336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13672">SUSE bug 1084604</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13687</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13687" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13687" source="CVE"/>
    <description>
    The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13687.html">CVE-2017-13687</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13687">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13687">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13687">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13687">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13687">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13688</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13688" source="CVE"/>
    <description>
    The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13688.html">CVE-2017-13688</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13688">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13688">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13688">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13688">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13688">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13689</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13689" source="CVE"/>
    <description>
    The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13689.html">CVE-2017-13689</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13689">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13689">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13689">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13689">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13689">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13690</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13690" source="CVE"/>
    <description>
    The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13690.html">CVE-2017-13690</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13690">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13690">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13690">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13690">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13690">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713720" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13720</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13720" source="CVE"/>
    <description>
    In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because '\0' characters are incorrectly skipped in situations involving ? characters.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13720.html">CVE-2017-13720</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13720">SUSE bug 1054285</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168037" comment="libXfont-1.5.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152659" comment="libXfont is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168038" comment="libXfont-devel-1.5.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151631" comment="libXfont-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168039" comment="libXfont-devel-32bit-1.5.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152660" comment="libXfont-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168040" comment="libXfont1-1.5.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168041" comment="libXfont1-32bit-1.5.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152661" comment="libXfont1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13722</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13722" source="CVE"/>
    <description>
    In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash of the X server.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13722.html">CVE-2017-13722</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13722">SUSE bug 1049692</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168037" comment="libXfont-1.5.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152659" comment="libXfont is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168038" comment="libXfont-devel-1.5.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151631" comment="libXfont-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168039" comment="libXfont-devel-32bit-1.5.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152660" comment="libXfont-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168040" comment="libXfont1-1.5.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151632" comment="libXfont1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168041" comment="libXfont1-32bit-1.5.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152661" comment="libXfont1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713725" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13725</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13725" source="CVE"/>
    <description>
    The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13725.html">CVE-2017-13725</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13725">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13725">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13725">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13725">SUSE bug 1057247</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13725">SUSE bug 1057247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166209" comment="tcpdump-4.9.2-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713728" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13728</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13728" source="CVE"/>
    <description>
    There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13728.html">CVE-2017-13728</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13728">SUSE bug 1056136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13728">SUSE bug 1056136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13728">SUSE bug 1056136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13728">SUSE bug 1056136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13728">SUSE bug 1056136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13728">SUSE bug 1056136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13728">SUSE bug 1069530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13728">SUSE bug 1056136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13728">SUSE bug 1056136</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13728">SUSE bug 1056136</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169933" comment="libncurses5-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158856" comment="libncurses5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169934" comment="libncurses5-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158857" comment="libncurses5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169935" comment="libncurses6-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169936" comment="libncurses6-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158859" comment="libncurses6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169937" comment="ncurses-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158860" comment="ncurses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169938" comment="ncurses-devel-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158861" comment="ncurses-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169939" comment="ncurses-devel-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158862" comment="ncurses-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169940" comment="ncurses-utils-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169941" comment="tack-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158864" comment="tack is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169942" comment="terminfo-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169943" comment="terminfo-base-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13729</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13729" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13729" source="CVE"/>
    <description>
    There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13729.html">CVE-2017-13729</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13729">SUSE bug 1056132</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13729">SUSE bug 1056132</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13729">SUSE bug 1056132</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13729">SUSE bug 1056132</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13729">SUSE bug 1056132</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13729">SUSE bug 1056132</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13729">SUSE bug 1069530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13729">SUSE bug 1056132</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13729">SUSE bug 1056132</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13729">SUSE bug 1056132</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169933" comment="libncurses5-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158856" comment="libncurses5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169934" comment="libncurses5-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158857" comment="libncurses5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169935" comment="libncurses6-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169936" comment="libncurses6-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158859" comment="libncurses6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169937" comment="ncurses-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158860" comment="ncurses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169938" comment="ncurses-devel-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158861" comment="ncurses-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169939" comment="ncurses-devel-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158862" comment="ncurses-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169940" comment="ncurses-utils-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169941" comment="tack-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158864" comment="tack is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169942" comment="terminfo-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169943" comment="terminfo-base-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713730" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13730</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13730" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13730" source="CVE"/>
    <description>
    There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13730.html">CVE-2017-13730</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13730">SUSE bug 1056131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13730">SUSE bug 1056131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13730">SUSE bug 1056131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13730">SUSE bug 1056131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13730">SUSE bug 1056131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13730">SUSE bug 1056131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13730">SUSE bug 1069530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13730">SUSE bug 1056131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13730">SUSE bug 1056131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13730">SUSE bug 1056131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169933" comment="libncurses5-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158856" comment="libncurses5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169934" comment="libncurses5-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158857" comment="libncurses5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169935" comment="libncurses6-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169936" comment="libncurses6-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158859" comment="libncurses6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169937" comment="ncurses-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158860" comment="ncurses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169938" comment="ncurses-devel-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158861" comment="ncurses-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169939" comment="ncurses-devel-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158862" comment="ncurses-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169940" comment="ncurses-utils-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169941" comment="tack-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158864" comment="tack is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169942" comment="terminfo-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169943" comment="terminfo-base-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13731</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13731" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13731" source="CVE"/>
    <description>
    There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13731.html">CVE-2017-13731</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13731">SUSE bug 1056129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13731">SUSE bug 1056129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13731">SUSE bug 1056129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13731">SUSE bug 1056129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13731">SUSE bug 1056129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13731">SUSE bug 1056129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13731">SUSE bug 1069530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13731">SUSE bug 1056129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13731">SUSE bug 1056129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13731">SUSE bug 1056129</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169933" comment="libncurses5-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158856" comment="libncurses5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169934" comment="libncurses5-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158857" comment="libncurses5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169935" comment="libncurses6-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169936" comment="libncurses6-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158859" comment="libncurses6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169937" comment="ncurses-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158860" comment="ncurses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169938" comment="ncurses-devel-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158861" comment="ncurses-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169939" comment="ncurses-devel-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158862" comment="ncurses-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169940" comment="ncurses-utils-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169941" comment="tack-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158864" comment="tack is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169942" comment="terminfo-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169943" comment="terminfo-base-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13732</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13732" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13732" source="CVE"/>
    <description>
    There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13732.html">CVE-2017-13732</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13732">SUSE bug 1056128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13732">SUSE bug 1056128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13732">SUSE bug 1056128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13732">SUSE bug 1056128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13732">SUSE bug 1056128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13732">SUSE bug 1056128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13732">SUSE bug 1069530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13732">SUSE bug 1056128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13732">SUSE bug 1056128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13732">SUSE bug 1056128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13732">SUSE bug 1056128</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169933" comment="libncurses5-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158856" comment="libncurses5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169934" comment="libncurses5-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158857" comment="libncurses5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169935" comment="libncurses6-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169936" comment="libncurses6-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158859" comment="libncurses6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169937" comment="ncurses-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158860" comment="ncurses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169938" comment="ncurses-devel-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158861" comment="ncurses-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169939" comment="ncurses-devel-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158862" comment="ncurses-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169940" comment="ncurses-utils-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169941" comment="tack-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158864" comment="tack is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169942" comment="terminfo-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169943" comment="terminfo-base-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13733</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13733" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13733" source="CVE"/>
    <description>
    There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13733.html">CVE-2017-13733</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1069530</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13733">SUSE bug 1056127</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169933" comment="libncurses5-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158856" comment="libncurses5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169934" comment="libncurses5-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158857" comment="libncurses5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169935" comment="libncurses6-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158858" comment="libncurses6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169936" comment="libncurses6-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158859" comment="libncurses6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169937" comment="ncurses-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158860" comment="ncurses is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169938" comment="ncurses-devel-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158861" comment="ncurses-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169939" comment="ncurses-devel-32bit-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158862" comment="ncurses-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169940" comment="ncurses-utils-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158863" comment="ncurses-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169941" comment="tack-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158864" comment="tack is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169942" comment="terminfo-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158865" comment="terminfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169943" comment="terminfo-base-5.9-55.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158866" comment="terminfo-base is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13735</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13735" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13735" source="CVE"/>
    <description>
    There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13735.html">CVE-2017-13735</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1056170</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1056170</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1056170</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1056170</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1060321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1060321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1060321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1060321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1060321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1060321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1060321</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13735">SUSE bug 1060321</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164959" comment="libraw-0.17.1-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153171" comment="libraw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164960" comment="libraw-devel-0.17.1-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151901" comment="libraw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164961" comment="libraw-devel-static-0.17.1-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153172" comment="libraw-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164962" comment="libraw-tools-0.17.1-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153173" comment="libraw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164963" comment="libraw15-0.17.1-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154115" comment="libraw15 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13737</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13737" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13737" source="CVE"/>
    <description>
    There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13737.html">CVE-2017-13737</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13737">SUSE bug 1056162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13737">SUSE bug 1056162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13737">SUSE bug 1056162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13737">SUSE bug 1056162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13737">SUSE bug 1056162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13737">SUSE bug 1056162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13737">SUSE bug 1056162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13737">SUSE bug 1056162</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167878" comment="GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167879" comment="GraphicsMagick-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167880" comment="libGraphicsMagick++-Q16-12-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167881" comment="libGraphicsMagick++-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167882" comment="libGraphicsMagick-Q16-3-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167883" comment="libGraphicsMagick3-config-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167884" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167885" comment="perl-GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13738</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13738" source="CVE"/>
    <description>
    There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13738.html">CVE-2017-13738</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13738">SUSE bug 1056105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13738">SUSE bug 1056105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13738">SUSE bug 1056105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13738">SUSE bug 1056105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13738">SUSE bug 1056105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13738">SUSE bug 1056105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13738">SUSE bug 1056105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13738">SUSE bug 1056105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13738">SUSE bug 1056105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13738">SUSE bug 1056105</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164964" comment="liblouis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164965" comment="liblouis is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164966" comment="liblouis-data-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164968" comment="liblouis-devel-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164969" comment="liblouis-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164970" comment="liblouis-doc-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164971" comment="liblouis-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164972" comment="liblouis-tools-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164973" comment="liblouis-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164974" comment="liblouis9-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164975" comment="liblouis9 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164976" comment="python-louis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164977" comment="python-louis is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713739" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13739</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13739" source="CVE"/>
    <description>
    There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function resolveSubtable() in compileTranslationTable.c. It will lead to denial of service or remote code execution.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13739.html">CVE-2017-13739</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13739">SUSE bug 1056101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13739">SUSE bug 1056101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13739">SUSE bug 1056101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13739">SUSE bug 1056101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13739">SUSE bug 1056101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13739">SUSE bug 1056101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13739">SUSE bug 1056101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13739">SUSE bug 1056101</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164964" comment="liblouis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164965" comment="liblouis is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164966" comment="liblouis-data-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164968" comment="liblouis-devel-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164969" comment="liblouis-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164970" comment="liblouis-doc-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164971" comment="liblouis-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164972" comment="liblouis-tools-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164973" comment="liblouis-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164974" comment="liblouis9-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164975" comment="liblouis9 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164976" comment="python-louis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164977" comment="python-louis is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713740" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13740</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13740" source="CVE"/>
    <description>
    There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13740.html">CVE-2017-13740</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13740">SUSE bug 1056097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13740">SUSE bug 1056097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13740">SUSE bug 1056097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13740">SUSE bug 1056097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13740">SUSE bug 1056097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13740">SUSE bug 1056097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13740">SUSE bug 1056097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13740">SUSE bug 1056097</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164964" comment="liblouis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164965" comment="liblouis is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164966" comment="liblouis-data-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164968" comment="liblouis-devel-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164969" comment="liblouis-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164970" comment="liblouis-doc-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164971" comment="liblouis-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164972" comment="liblouis-tools-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164973" comment="liblouis-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164974" comment="liblouis9-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164975" comment="liblouis9 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164976" comment="python-louis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164977" comment="python-louis is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13741</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13741" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13741" source="CVE"/>
    <description>
    There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13741.html">CVE-2017-13741</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13741">SUSE bug 1056095</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13741">SUSE bug 1056095</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13741">SUSE bug 1056095</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13741">SUSE bug 1056095</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13741">SUSE bug 1056095</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13741">SUSE bug 1056095</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13741">SUSE bug 1056095</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164964" comment="liblouis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164965" comment="liblouis is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164966" comment="liblouis-data-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164968" comment="liblouis-devel-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164969" comment="liblouis-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164970" comment="liblouis-doc-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164971" comment="liblouis-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164972" comment="liblouis-tools-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164973" comment="liblouis-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164974" comment="liblouis9-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164975" comment="liblouis9 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164976" comment="python-louis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164977" comment="python-louis is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713743" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13743</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13743" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13743" source="CVE"/>
    <description>
    There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13743.html">CVE-2017-13743</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13743">SUSE bug 1056090</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164964" comment="liblouis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164965" comment="liblouis is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164966" comment="liblouis-data-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164968" comment="liblouis-devel-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164969" comment="liblouis-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164970" comment="liblouis-doc-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164971" comment="liblouis-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164972" comment="liblouis-tools-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164973" comment="liblouis-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164974" comment="liblouis9-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164975" comment="liblouis9 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164976" comment="python-louis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164977" comment="python-louis is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713744" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13744</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13744" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13744" source="CVE"/>
    <description>
    There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13744.html">CVE-2017-13744</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13744">SUSE bug 1056088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13744">SUSE bug 1056088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13744">SUSE bug 1056088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13744">SUSE bug 1056088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13744">SUSE bug 1056088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13744">SUSE bug 1056088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13744">SUSE bug 1056088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13744">SUSE bug 1056088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13744">SUSE bug 1056088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13744">SUSE bug 1056088</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164964" comment="liblouis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164965" comment="liblouis is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164966" comment="liblouis-data-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164967" comment="liblouis-data is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164968" comment="liblouis-devel-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164969" comment="liblouis-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164970" comment="liblouis-doc-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164971" comment="liblouis-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164972" comment="liblouis-tools-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164973" comment="liblouis-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164974" comment="liblouis9-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164975" comment="liblouis9 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164976" comment="python-louis-2.6.4-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164977" comment="python-louis is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13757</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13757" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13757" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13757.html">CVE-2017-13757</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13757">SUSE bug 1056312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13757">SUSE bug 1056312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13757">SUSE bug 1056312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13757">SUSE bug 1056312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13757">SUSE bug 1056312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13757">SUSE bug 1056312</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13765</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13765" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13765" source="CVE"/>
    <description>
    In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13765.html">CVE-2017-13765</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13765">SUSE bug 1056251</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13765">SUSE bug 1056251</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13765">SUSE bug 1056251</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13765">SUSE bug 1056251</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13765">SUSE bug 1056251</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13765">SUSE bug 1056251</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13765">SUSE bug 1056251</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13765">SUSE bug 1056251</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163119" comment="wireshark-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163120" comment="wireshark-devel-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163121" comment="wireshark-ui-gtk-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163122" comment="wireshark-ui-qt-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13766</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13766" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13766" source="CVE"/>
    <description>
    In Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of-bounds write. This was addressed in plugins/profinet/packet-dcerpc-pn-io.c by adding string validation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13766.html">CVE-2017-13766</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13766">SUSE bug 1056249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13766">SUSE bug 1056249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13766">SUSE bug 1056249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13766">SUSE bug 1056249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13766">SUSE bug 1056249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13766">SUSE bug 1056249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13766">SUSE bug 1056249</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13766">SUSE bug 1056249</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163119" comment="wireshark-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163120" comment="wireshark-devel-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163121" comment="wireshark-ui-gtk-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163122" comment="wireshark-ui-qt-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13767</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13767" source="CVE"/>
    <description>
    In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-msdp.c by adding length validation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13767.html">CVE-2017-13767</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13767">SUSE bug 1056248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13767">SUSE bug 1056248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13767">SUSE bug 1056248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13767">SUSE bug 1056248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163119" comment="wireshark-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163120" comment="wireshark-devel-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163121" comment="wireshark-ui-gtk-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163122" comment="wireshark-ui-qt-2.2.9-14.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713769" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13769</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13769" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13769" source="CVE"/>
    <description>
    The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-read) by sending a crafted JPEG file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13769.html">CVE-2017-13769</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13769">SUSE bug 1056432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13769">SUSE bug 1056432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13769">SUSE bug 1056432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13769">SUSE bug 1056432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13769">SUSE bug 1056432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13769">SUSE bug 1056432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13769">SUSE bug 1056432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13769">SUSE bug 1056432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13769">SUSE bug 1056432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13769">SUSE bug 1056432</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13769">SUSE bug 1056432</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13775</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13775" source="CVE"/>
    <description>
    GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13775.html">CVE-2017-13775</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13775">SUSE bug 1056431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13775">SUSE bug 1056431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13775">SUSE bug 1056431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13775">SUSE bug 1056431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13775">SUSE bug 1056431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13775">SUSE bug 1056431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13775">SUSE bug 1056431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13775">SUSE bug 1056431</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166214" comment="GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166215" comment="GraphicsMagick-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166216" comment="libGraphicsMagick++-Q16-12-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166217" comment="libGraphicsMagick++-devel-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166218" comment="libGraphicsMagick-Q16-3-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166219" comment="libGraphicsMagick3-config-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166220" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166221" comment="perl-GraphicsMagick-1.3.25-11.34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13776</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13776" source="CVE"/>
    <description>
    GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13776.html">CVE-2017-13776</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13776">SUSE bug 1056429</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166943" comment="GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166944" comment="GraphicsMagick-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166945" comment="libGraphicsMagick++-Q16-12-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166946" comment="libGraphicsMagick++-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166947" comment="libGraphicsMagick-Q16-3-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166948" comment="libGraphicsMagick3-config-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166949" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166950" comment="perl-GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201713777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-13777</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-13777" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13777" source="CVE"/>
    <description>
    GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-13777.html">CVE-2017-13777</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1057719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-13777">SUSE bug 1056426</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166943" comment="GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166944" comment="GraphicsMagick-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166945" comment="libGraphicsMagick++-Q16-12-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166946" comment="libGraphicsMagick++-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166947" comment="libGraphicsMagick-Q16-3-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166948" comment="libGraphicsMagick3-config-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166949" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166950" comment="perl-GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14032</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14032" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14032" source="CVE"/>
    <description>
    ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14032.html">CVE-2017-14032</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14032">SUSE bug 1056544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14032">SUSE bug 1056544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14032">SUSE bug 1056544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14032">SUSE bug 1056544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14032">SUSE bug 1056544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14032">SUSE bug 1056544</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165669" comment="libmbedtls9-1.3.19-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152973" comment="libmbedtls9 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165670" comment="libmbedtls9-32bit-1.3.19-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152974" comment="libmbedtls9-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165671" comment="mbedtls-1.3.19-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152975" comment="mbedtls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165672" comment="mbedtls-devel-1.3.19-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152976" comment="mbedtls-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14039</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14039" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14039" source="CVE"/>
    <description>
    A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14039.html">CVE-2017-14039</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14039">SUSE bug 1056622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14039">SUSE bug 1056622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14039">SUSE bug 1056622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14039">SUSE bug 1056622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14039">SUSE bug 1057511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14039">SUSE bug 1056622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14039">SUSE bug 1056622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14039">SUSE bug 1056622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14039">SUSE bug 1056622</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14039">SUSE bug 1056622</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165203" comment="libopenjp2-7-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165204" comment="libopenjp2-7-32bit-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165205" comment="openjpeg2-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165206" comment="openjpeg2-devel-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14040</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14040" source="CVE"/>
    <description>
    An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14040.html">CVE-2017-14040</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14040">SUSE bug 1056621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14040">SUSE bug 1056621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14040">SUSE bug 1056621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14040">SUSE bug 1056621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14040">SUSE bug 1056621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14040">SUSE bug 1056621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14040">SUSE bug 1056621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14040">SUSE bug 1056621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14040">SUSE bug 1056621</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165203" comment="libopenjp2-7-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165204" comment="libopenjp2-7-32bit-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165205" comment="openjpeg2-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165206" comment="openjpeg2-devel-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14041</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14041" source="CVE"/>
    <description>
    A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14041.html">CVE-2017-14041</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14041">SUSE bug 1056562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14041">SUSE bug 1056562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14041">SUSE bug 1056562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14041">SUSE bug 1056562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14041">SUSE bug 1056562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14041">SUSE bug 1056562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14041">SUSE bug 1056562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14041">SUSE bug 1056562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14041">SUSE bug 1056562</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165203" comment="libopenjp2-7-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165204" comment="libopenjp2-7-32bit-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165205" comment="openjpeg2-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165206" comment="openjpeg2-devel-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14042</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14042" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14042" source="CVE"/>
    <description>
    A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memory allocation, which may lead to remote denial of service in the MagickRealloc function in magick/memory.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14042.html">CVE-2017-14042</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1054598</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1054600</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1059721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14042">SUSE bug 1056550</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168669" comment="GraphicsMagick-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168670" comment="GraphicsMagick-devel-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169232" comment="ImageMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169233" comment="ImageMagick-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169234" comment="ImageMagick-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169235" comment="ImageMagick-doc-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169236" comment="ImageMagick-extra-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168671" comment="libGraphicsMagick++-Q16-12-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168672" comment="libGraphicsMagick++-devel-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168673" comment="libGraphicsMagick-Q16-3-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168674" comment="libGraphicsMagick3-config-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168675" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169237" comment="libMagick++-6_Q16-3-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169238" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169239" comment="libMagick++-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169240" comment="libMagick++-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169241" comment="libMagickCore-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169242" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169243" comment="libMagickWand-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169244" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168676" comment="perl-GraphicsMagick-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169245" comment="perl-PerlMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714051" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14051</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14051" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14051" source="CVE"/>
    <description>
    An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14051.html">CVE-2017-14051</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14051">SUSE bug 1056588</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163938" comment="kernel-debug-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163939" comment="kernel-debug-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163940" comment="kernel-debug-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163941" comment="kernel-default-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163942" comment="kernel-default-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163943" comment="kernel-default-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163944" comment="kernel-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163945" comment="kernel-docs-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163946" comment="kernel-docs-html-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163947" comment="kernel-docs-pdf-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163948" comment="kernel-macros-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163949" comment="kernel-obs-build-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163950" comment="kernel-obs-qa-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163951" comment="kernel-source-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163952" comment="kernel-source-vanilla-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163953" comment="kernel-syms-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163954" comment="kernel-vanilla-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163955" comment="kernel-vanilla-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163956" comment="kernel-vanilla-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14054</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14054" source="CVE"/>
    <description>
    In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would consume huge CPU resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14054.html">CVE-2017-14054</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14054">SUSE bug 1056765</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14054">SUSE bug 1056765</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14055</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14055" source="CVE"/>
    <description>
    In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14055.html">CVE-2017-14055</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14055">SUSE bug 1056766</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14055">SUSE bug 1056766</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14056</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14056" source="CVE"/>
    <description>
    In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but does not contain sufficient backing data, is provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14056.html">CVE-2017-14056</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14056">SUSE bug 1056760</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714057" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14057</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14057" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14057" source="CVE"/>
    <description>
    In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14057.html">CVE-2017-14057</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14057">SUSE bug 1056761</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14057">SUSE bug 1056761</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14058</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14058" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14058" source="CVE"/>
    <description>
    In FFmpeg 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14058.html">CVE-2017-14058</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14058">SUSE bug 1056762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14058">SUSE bug 1056762</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714059" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14059</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14059" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14059" source="CVE"/>
    <description>
    In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14059.html">CVE-2017-14059</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14059">SUSE bug 1056763</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14059">SUSE bug 1056763</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14103</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14103" source="CVE"/>
    <description>
    The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11403.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14103.html">CVE-2017-14103</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14103">SUSE bug 1057000</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170211" comment="GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170212" comment="GraphicsMagick-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170213" comment="libGraphicsMagick++-Q16-12-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170214" comment="libGraphicsMagick++-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170215" comment="libGraphicsMagick-Q16-3-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170216" comment="libGraphicsMagick3-config-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170217" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170218" comment="perl-GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14106</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14106" source="CVE"/>
    <description>
    The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14106.html">CVE-2017-14106</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14106">SUSE bug 1056982</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163938" comment="kernel-debug-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163939" comment="kernel-debug-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163940" comment="kernel-debug-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163941" comment="kernel-default-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163942" comment="kernel-default-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163943" comment="kernel-default-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163944" comment="kernel-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163945" comment="kernel-docs-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163946" comment="kernel-docs-html-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163947" comment="kernel-docs-pdf-4.4.87-18.29.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163948" comment="kernel-macros-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163949" comment="kernel-obs-build-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163950" comment="kernel-obs-qa-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163951" comment="kernel-source-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163952" comment="kernel-source-vanilla-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163953" comment="kernel-syms-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163954" comment="kernel-vanilla-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163955" comment="kernel-vanilla-base-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163956" comment="kernel-vanilla-devel-4.4.87-18.29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14107</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14107" source="CVE"/>
    <description>
    The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14107.html">CVE-2017-14107</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14107">SUSE bug 1056996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14107">SUSE bug 1056996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14107">SUSE bug 1056996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14107">SUSE bug 1056996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14107">SUSE bug 1056996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14107">SUSE bug 1056996</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164709" comment="libzip-0.11.1-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164710" comment="libzip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164711" comment="libzip-devel-0.11.1-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151554" comment="libzip-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164712" comment="libzip2-0.11.1-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151555" comment="libzip2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164713" comment="libzip2-32bit-0.11.1-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164714" comment="libzip2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14128</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14128" source="CVE"/>
    <description>
    The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14128.html">CVE-2017-14128</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14128">SUSE bug 1057139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14128">SUSE bug 1057139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14128">SUSE bug 1057139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14128">SUSE bug 1057139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14128">SUSE bug 1057139</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14128">SUSE bug 1057139</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14129</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14129" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14129" source="CVE"/>
    <description>
    The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14129.html">CVE-2017-14129</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14129">SUSE bug 1057144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14129">SUSE bug 1057144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14129">SUSE bug 1057144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14129">SUSE bug 1057144</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14129">SUSE bug 1057144</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14130</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14130" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14130" source="CVE"/>
    <description>
    The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (_bfd_elf_attr_strdup heap-based buffer over-read and application crash) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14130.html">CVE-2017-14130</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14130">SUSE bug 1057149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14130">SUSE bug 1057149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14130">SUSE bug 1057149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14130">SUSE bug 1057149</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14130">SUSE bug 1057149</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14138</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14138" source="CVE"/>
    <description>
    ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14138.html">CVE-2017-14138</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14138">SUSE bug 1057157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14138">SUSE bug 1057157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14138">SUSE bug 1057157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14138">SUSE bug 1057157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14138">SUSE bug 1057153</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14138">SUSE bug 1057157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14138">SUSE bug 1057157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14138">SUSE bug 1057157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14138">SUSE bug 1057157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14138">SUSE bug 1057157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14138">SUSE bug 1057157</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714164" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14164</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14164" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14164" source="CVE"/>
    <description>
    A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c) or possibly remote code execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14152.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14164.html">CVE-2017-14164</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14164">SUSE bug 1057511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14164">SUSE bug 1057511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14164">SUSE bug 1057511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14164">SUSE bug 1057511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14164">SUSE bug 1057511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14164">SUSE bug 1057511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14164">SUSE bug 1057511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14164">SUSE bug 1057511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14164">SUSE bug 1057511</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165203" comment="libopenjp2-7-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153807" comment="libopenjp2-7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165204" comment="libopenjp2-7-32bit-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153808" comment="libopenjp2-7-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165205" comment="openjpeg2-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153813" comment="openjpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165206" comment="openjpeg2-devel-2.1.0-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153814" comment="openjpeg2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714165" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14165</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14165" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14165" source="CVE"/>
    <description>
    The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14165.html">CVE-2017-14165</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1052553</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1059666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14165">SUSE bug 1057508</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166943" comment="GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166944" comment="GraphicsMagick-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166945" comment="libGraphicsMagick++-Q16-12-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166946" comment="libGraphicsMagick++-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166947" comment="libGraphicsMagick-Q16-3-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166948" comment="libGraphicsMagick3-config-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166949" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166950" comment="perl-GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14167</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14167" source="CVE"/>
    <description>
    Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14167.html">CVE-2017-14167</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14167">SUSE bug 1057585</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14169</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14169" source="CVE"/>
    <description>
    In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3, an integer signedness error might occur when a crafted file, which claims a large "item_num" field such as 0xffffffff, is provided. As a result, the variable "item_num" turns negative, bypassing the check for a large value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14169.html">CVE-2017-14169</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14169">SUSE bug 1057536</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714170" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14170</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14170" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14170" source="CVE"/>
    <description>
    In libavformat/mxfdec.c in FFmpeg 3.3.3, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted MXF file, which claims a large "nb_index_entries" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU resources, since there is no EOF check inside the loop. Moreover, this big loop can be invoked multiple times if there is more than one applicable data segment in the crafted MXF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14170.html">CVE-2017-14170</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14170">SUSE bug 1057537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714171" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14171</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14171" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14171" source="CVE"/>
    <description>
    In libavformat/nsvdec.c in FFmpeg 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but does not contain sufficient backing data, is provided, the loop over 'table_entries_used' would consume huge CPU resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14171.html">CVE-2017-14171</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14171">SUSE bug 1057539</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714172" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14172</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14172" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14172" source="CVE"/>
    <description>
    In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "extent" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14172.html">CVE-2017-14172</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14172">SUSE bug 1057730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14172">SUSE bug 1057730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14172">SUSE bug 1057730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14172">SUSE bug 1057730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14172">SUSE bug 1057730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14172">SUSE bug 1057730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14172">SUSE bug 1057730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14172">SUSE bug 1057730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14172">SUSE bug 1057730</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714173" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14173</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14173" source="CVE"/>
    <description>
    In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a very large "max_value" value.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14173.html">CVE-2017-14173</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14173">SUSE bug 1057729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14173">SUSE bug 1057729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14173">SUSE bug 1057729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14173">SUSE bug 1057729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14173">SUSE bug 1057729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14173">SUSE bug 1057729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14173">SUSE bug 1057729</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14173">SUSE bug 1057729</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714174" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14174</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14174" source="CVE"/>
    <description>
    In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14174.html">CVE-2017-14174</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1072901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14174">SUSE bug 1057723</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169232" comment="ImageMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169233" comment="ImageMagick-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169234" comment="ImageMagick-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169235" comment="ImageMagick-doc-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169236" comment="ImageMagick-extra-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169237" comment="libMagick++-6_Q16-3-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169238" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169239" comment="libMagick++-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169240" comment="libMagick++-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169241" comment="libMagickCore-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169242" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169243" comment="libMagickWand-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169244" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169245" comment="perl-PerlMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714175" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14175</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14175" source="CVE"/>
    <description>
    In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted XBM file, which claims large rows and columns fields in the header but does not contain sufficient backing data, is provided, the loop over the rows would consume huge CPU resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14175.html">CVE-2017-14175</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14175">SUSE bug 1057719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14175">SUSE bug 1057719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14175">SUSE bug 1056426</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14175">SUSE bug 1056429</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14175">SUSE bug 1057719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14175">SUSE bug 1057719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14175">SUSE bug 1057719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14175">SUSE bug 1057719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14175">SUSE bug 1057719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14175">SUSE bug 1057719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14175">SUSE bug 1057719</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714222" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14222</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14222" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14222" source="CVE"/>
    <description>
    In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14222.html">CVE-2017-14222</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14222">SUSE bug 1058020</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14223</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14223" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14223" source="CVE"/>
    <description>
    In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14223.html">CVE-2017-14223</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14223">SUSE bug 1058019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14225</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14225" source="CVE"/>
    <description>
    The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodec_string function in libavcodec/utils.c, leading to a NULL pointer dereference. (It is also conceivable that there is security relevance for a NULL pointer dereference in av_color_primaries_name calls within the ffprobe command-line program.)
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14225.html">CVE-2017-14225</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14225">SUSE bug 1058018</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163957" comment="ffmpeg-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163958" comment="ffmpeg2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163959" comment="ffmpeg2-devel-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163960" comment="lame-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164114" comment="lame is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163961" comment="lame-doc-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164115" comment="lame-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163962" comment="lame-mp3rtp-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164116" comment="lame-mp3rtp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163963" comment="libavcodec-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163964" comment="libavcodec56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163965" comment="libavcodec56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163966" comment="libavcodec57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163967" comment="libavcodec57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163968" comment="libavdevice-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163969" comment="libavdevice56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163970" comment="libavdevice56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163971" comment="libavdevice57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163972" comment="libavdevice57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163973" comment="libavfilter-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163974" comment="libavfilter5-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163975" comment="libavfilter5-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163976" comment="libavfilter6-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163977" comment="libavfilter6-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163978" comment="libavformat-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163979" comment="libavformat56-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163980" comment="libavformat56-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163981" comment="libavformat57-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163982" comment="libavformat57-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163983" comment="libavresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163984" comment="libavresample2-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163985" comment="libavresample2-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163986" comment="libavresample3-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163987" comment="libavresample3-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163988" comment="libavutil-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163989" comment="libavutil54-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163990" comment="libavutil54-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163991" comment="libavutil55-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163992" comment="libavutil55-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163993" comment="libmp3lame-devel-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164117" comment="libmp3lame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163994" comment="libmp3lame0-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164118" comment="libmp3lame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163995" comment="libmp3lame0-32bit-3.99.5-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164119" comment="libmp3lame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163996" comment="libpostproc-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163997" comment="libpostproc53-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163998" comment="libpostproc53-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163999" comment="libpostproc54-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164000" comment="libpostproc54-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164001" comment="libswresample-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164002" comment="libswresample1-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164003" comment="libswresample1-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164004" comment="libswresample2-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164005" comment="libswresample2-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164006" comment="libswscale-devel-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164007" comment="libswscale3-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164008" comment="libswscale3-32bit-2.8.13-25.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164009" comment="libswscale4-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164010" comment="libswscale4-32bit-3.3.4-6.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164011" comment="libtwolame-devel-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164120" comment="libtwolame-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164012" comment="libtwolame0-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164121" comment="libtwolame0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164013" comment="libtwolame0-32bit-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164122" comment="libtwolame0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164014" comment="twolame-0.3.13-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164123" comment="twolame is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14226</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14226" source="CVE"/>
    <description>
    WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the WPXTableList class in WPXTable.cpp). This vulnerability can be triggered in LibreOffice before 5.3.7. It may lead to suffering a remote attack against a LibreOffice application.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14226.html">CVE-2017-14226</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14226">SUSE bug 1058025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14226">SUSE bug 1058025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14226">SUSE bug 1058025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14226">SUSE bug 1058025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14226">SUSE bug 1058025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14226">SUSE bug 1058025</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166614" comment="libwpd-0.10.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166615" comment="libwpd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166616" comment="libwpd-0_10-10-0.10.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166617" comment="libwpd-0_10-10 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166618" comment="libwpd-devel-0.10.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166619" comment="libwpd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166620" comment="libwpd-devel-doc-0.10.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166621" comment="libwpd-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166622" comment="libwpd-tools-0.10.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166623" comment="libwpd-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714249" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14249</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14249" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14249" source="CVE"/>
    <description>
    ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14249.html">CVE-2017-14249</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14249">SUSE bug 1058082</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169709" comment="ImageMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169710" comment="ImageMagick-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169711" comment="ImageMagick-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169712" comment="ImageMagick-doc-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169713" comment="ImageMagick-extra-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169714" comment="libMagick++-6_Q16-3-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169715" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169716" comment="libMagick++-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169717" comment="libMagick++-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169718" comment="libMagickCore-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169719" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169720" comment="libMagickWand-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169721" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169722" comment="perl-PerlMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14265</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14265" source="CVE"/>
    <description>
    A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code execution attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14265.html">CVE-2017-14265</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14265">SUSE bug 1060163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14265">SUSE bug 1060163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14265">SUSE bug 1060163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14265">SUSE bug 1060163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14265">SUSE bug 1060163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14265">SUSE bug 1060163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14265">SUSE bug 1084688</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14265">SUSE bug 1084690</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14265">SUSE bug 1084691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164959" comment="libraw-0.17.1-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153171" comment="libraw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164960" comment="libraw-devel-0.17.1-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151901" comment="libraw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164961" comment="libraw-devel-static-0.17.1-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153172" comment="libraw-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164962" comment="libraw-tools-0.17.1-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153173" comment="libraw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164963" comment="libraw15-0.17.1-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154115" comment="libraw15 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14316</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14316" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14316" source="CVE"/>
    <description>
    A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to specify the first NUMA node that should be used for allocations through the `memflags` parameter; the node is extracted using the `MEMF_get_node` macro. While the function checks to see if the special constant `NUMA_NO_NODE` is specified, it otherwise does not handle the case where `node &gt;= MAX_NUMNODES`. This allows an out-of-bounds access to an internal array.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14316.html">CVE-2017-14316</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14316">SUSE bug 1056278</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164630" comment="xen-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164631" comment="xen-devel-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164632" comment="xen-doc-html-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164633" comment="xen-libs-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164634" comment="xen-libs-32bit-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164635" comment="xen-tools-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164636" comment="xen-tools-domU-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14317</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14317" source="CVE"/>
    <description>
    A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it (including domain creation / destruction, ballooning, device changes, etc.).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14317.html">CVE-2017-14317</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14317">SUSE bug 1056281</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164630" comment="xen-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164631" comment="xen-devel-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164632" comment="xen-doc-html-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164633" comment="xen-libs-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164634" comment="xen-libs-32bit-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164635" comment="xen-tools-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164636" comment="xen-tools-domU-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14318</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14318" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14318" source="CVE"/>
    <description>
    An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mapping to the calling domain exists for the page in question. However, the function does not check to see if the owning domain actually has a grant table or not. Some special domains, such as `DOMID_XEN`, `DOMID_IO` and `DOMID_COW` are created without grant tables. Hence, if __gnttab_cache_flush operates on a page owned by these special domains, it will attempt to dereference a NULL pointer in the domain struct.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14318.html">CVE-2017-14318</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14318">SUSE bug 1056280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14318">SUSE bug 1056280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14318">SUSE bug 1056280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14318">SUSE bug 1056280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14318">SUSE bug 1056280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14318">SUSE bug 1056280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14318">SUSE bug 1056280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14318">SUSE bug 1056280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14318">SUSE bug 1056280</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14318">SUSE bug 1056280</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164630" comment="xen-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164631" comment="xen-devel-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164632" comment="xen-doc-html-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164633" comment="xen-libs-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164634" comment="xen-libs-32bit-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164635" comment="xen-tools-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164636" comment="xen-tools-domU-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714319" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14319</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14319" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14319" source="CVE"/>
    <description>
    A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame was validated correctly, neither the presence of the mapping nor page writability were taken into account.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14319.html">CVE-2017-14319</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14319">SUSE bug 1056282</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164630" comment="xen-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164631" comment="xen-devel-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164632" comment="xen-doc-html-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164633" comment="xen-libs-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164634" comment="xen-libs-32bit-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164635" comment="xen-tools-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164636" comment="xen-tools-domU-4.7.3_04-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714326" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14326</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14326" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14326" source="CVE"/>
    <description>
    In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14326.html">CVE-2017-14326</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14326">SUSE bug 1058640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14326">SUSE bug 1058640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14326">SUSE bug 1058640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14326">SUSE bug 1058640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14326">SUSE bug 1058640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14326">SUSE bug 1058640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14326">SUSE bug 1058640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14326">SUSE bug 1058640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14326">SUSE bug 1058640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14326">SUSE bug 1058640</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14326">SUSE bug 1058640</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714333" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14333</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14333" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14333" source="CVE"/>
    <description>
    The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during "readelf -a" execution.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14333.html">CVE-2017-14333</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14333">SUSE bug 1058480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14333">SUSE bug 1058480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14333">SUSE bug 1058480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14333">SUSE bug 1058480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14333">SUSE bug 1058480</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14333">SUSE bug 1058480</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14341</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14341" source="CVE"/>
    <description>
    ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14341.html">CVE-2017-14341</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14341">SUSE bug 1058637</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167878" comment="GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167879" comment="GraphicsMagick-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167880" comment="libGraphicsMagick++-Q16-12-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167881" comment="libGraphicsMagick++-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167882" comment="libGraphicsMagick-Q16-3-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167883" comment="libGraphicsMagick3-config-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167884" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167885" comment="perl-GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14342</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14342" source="CVE"/>
    <description>
    ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14342.html">CVE-2017-14342</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14342">SUSE bug 1058485</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167878" comment="GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167879" comment="GraphicsMagick-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167880" comment="libGraphicsMagick++-Q16-12-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167881" comment="libGraphicsMagick++-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167882" comment="libGraphicsMagick-Q16-3-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167883" comment="libGraphicsMagick3-config-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167884" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167885" comment="perl-GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14343</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14343" source="CVE"/>
    <description>
    ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14343.html">CVE-2017-14343</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1082363</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14343">SUSE bug 1058422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169232" comment="ImageMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169233" comment="ImageMagick-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169234" comment="ImageMagick-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169235" comment="ImageMagick-doc-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169236" comment="ImageMagick-extra-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169237" comment="libMagick++-6_Q16-3-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169238" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169239" comment="libMagick++-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169240" comment="libMagick++-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169241" comment="libMagickCore-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169242" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169243" comment="libMagickWand-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169244" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169245" comment="perl-PerlMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14348</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14348" source="CVE"/>
    <description>
    LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14348.html">CVE-2017-14348</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14348">SUSE bug 1058467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14348">SUSE bug 1058467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14348">SUSE bug 1058467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14348">SUSE bug 1058467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14348">SUSE bug 1063798</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164748" comment="libraw-0.17.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153171" comment="libraw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164749" comment="libraw-devel-0.17.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151901" comment="libraw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164750" comment="libraw-devel-static-0.17.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153172" comment="libraw-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164751" comment="libraw-tools-0.17.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153173" comment="libraw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164752" comment="libraw15-0.17.1-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154115" comment="libraw15 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14482</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14482" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14482" source="CVE"/>
    <description>
    GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe Gnus support for enriched and richtext inline MIME objects in lisp/gnus/mm-view.el. In particular, an Emacs user can be instantly compromised by reading a crafted email message (or Usenet news article).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14482.html">CVE-2017-14482</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14482">SUSE bug 1058425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14482">SUSE bug 1058425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14482">SUSE bug 1058425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14482">SUSE bug 1058425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14482">SUSE bug 1058425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14482">SUSE bug 1058425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14482">SUSE bug 1058425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14482">SUSE bug 1058425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14482">SUSE bug 1058425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14482">SUSE bug 1058425</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14482">SUSE bug 1058425</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164523" comment="emacs-24.3-24.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151668" comment="emacs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164524" comment="emacs-el-24.3-24.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164525" comment="emacs-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164526" comment="emacs-info-24.3-24.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151669" comment="emacs-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164527" comment="emacs-nox-24.3-24.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151670" comment="emacs-nox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164528" comment="emacs-x11-24.3-24.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151671" comment="emacs-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164529" comment="etags-24.3-24.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151672" comment="etags is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714489" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14489</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14489" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14489" source="CVE"/>
    <description>
    The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of service (panic) by leveraging incorrect length validation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14489.html">CVE-2017-14489</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14489">SUSE bug 1059051</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165715" comment="kernel-debug-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165716" comment="kernel-debug-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165717" comment="kernel-debug-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165718" comment="kernel-default-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165719" comment="kernel-default-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165720" comment="kernel-default-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165721" comment="kernel-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165722" comment="kernel-docs-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165723" comment="kernel-docs-html-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165724" comment="kernel-docs-pdf-4.4.90-18.32.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165725" comment="kernel-macros-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165726" comment="kernel-obs-build-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165727" comment="kernel-obs-qa-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165728" comment="kernel-source-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165729" comment="kernel-source-vanilla-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165730" comment="kernel-syms-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165731" comment="kernel-vanilla-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165732" comment="kernel-vanilla-base-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165733" comment="kernel-vanilla-devel-4.4.90-18.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714491" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14491</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14491" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14491" source="CVE"/>
    <description>
    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14491.html">CVE-2017-14491</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1063832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1063832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1063832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1063832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14491">SUSE bug 1060354</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164895" comment="dnsmasq-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164896" comment="dnsmasq-utils-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153255" comment="dnsmasq-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714492" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14492</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14492" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14492" source="CVE"/>
    <description>
    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14492.html">CVE-2017-14492</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060355</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060355</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060355</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060355</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060355</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060355</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1063832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14492">SUSE bug 1060355</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164895" comment="dnsmasq-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164896" comment="dnsmasq-utils-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153255" comment="dnsmasq-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14493</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14493" source="CVE"/>
    <description>
    Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14493.html">CVE-2017-14493</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14493">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14493">SUSE bug 1060361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14493">SUSE bug 1060362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14493">SUSE bug 1060364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14493">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14493">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14493">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14493">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14493">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14493">SUSE bug 1063832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14493">SUSE bug 1060360</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164895" comment="dnsmasq-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164896" comment="dnsmasq-utils-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153255" comment="dnsmasq-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14494</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14494" source="CVE"/>
    <description>
    dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14494.html">CVE-2017-14494</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14494">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14494">SUSE bug 1060361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14494">SUSE bug 1060362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14494">SUSE bug 1060364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14494">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14494">SUSE bug 1060361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14494">SUSE bug 1060361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14494">SUSE bug 1060361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14494">SUSE bug 1060361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14494">SUSE bug 1060361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14494">SUSE bug 1060361</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164895" comment="dnsmasq-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164896" comment="dnsmasq-utils-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153255" comment="dnsmasq-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14495</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14495" source="CVE"/>
    <description>
    Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14495.html">CVE-2017-14495</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14495">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14495">SUSE bug 1060361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14495">SUSE bug 1060362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14495">SUSE bug 1060364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14495">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14495">SUSE bug 1060362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14495">SUSE bug 1060362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14495">SUSE bug 1060362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14495">SUSE bug 1060362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14495">SUSE bug 1060362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14495">SUSE bug 1060362</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164895" comment="dnsmasq-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164896" comment="dnsmasq-utils-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153255" comment="dnsmasq-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14496</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14496" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14496" source="CVE"/>
    <description>
    Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14496.html">CVE-2017-14496</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14496">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14496">SUSE bug 1060361</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14496">SUSE bug 1060362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14496">SUSE bug 1060364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14496">SUSE bug 1060360</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14496">SUSE bug 1060364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14496">SUSE bug 1060364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14496">SUSE bug 1060364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14496">SUSE bug 1060364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14496">SUSE bug 1060364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164895" comment="dnsmasq-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152784" comment="dnsmasq is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164896" comment="dnsmasq-utils-2.78-10.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153255" comment="dnsmasq-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714500" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14500</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14500" source="CVE"/>
    <description>
    Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure (i.e., a podcast file) that includes shell metacharacters in its filename, related to pb_controller.cpp and queueloader.cpp, a different vulnerability than CVE-2017-12904.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14500.html">CVE-2017-14500</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14500">SUSE bug 1059057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14500">SUSE bug 1059057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14500">SUSE bug 1059057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14500">SUSE bug 1059057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14500">SUSE bug 1059057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14500">SUSE bug 1059057</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170229" comment="newsbeuter-2.9-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169930" comment="newsbeuter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170230" comment="newsbeuter-lang-2.9-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169932" comment="newsbeuter-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14504</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14504" source="CVE"/>
    <description>
    ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the correct number of colors for the XV 332 format, leading to a NULL Pointer Dereference.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14504.html">CVE-2017-14504</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14504">SUSE bug 1059721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14504">SUSE bug 1059721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14504">SUSE bug 1059721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14504">SUSE bug 1059721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14504">SUSE bug 1059721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14504">SUSE bug 1059721</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168669" comment="GraphicsMagick-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168670" comment="GraphicsMagick-devel-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168671" comment="libGraphicsMagick++-Q16-12-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168672" comment="libGraphicsMagick++-devel-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168673" comment="libGraphicsMagick-Q16-3-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168674" comment="libGraphicsMagick3-config-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168675" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168676" comment="perl-GraphicsMagick-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14529</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14529" source="CVE"/>
    <description>
    The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PE file, related to the bfd_getl16 function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14529.html">CVE-2017-14529</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14529">SUSE bug 1059050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14529">SUSE bug 1059050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14529">SUSE bug 1059050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14529">SUSE bug 1059050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14529">SUSE bug 1059050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14529">SUSE bug 1059050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14531</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14531" source="CVE"/>
    <description>
    ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14531.html">CVE-2017-14531</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14531">SUSE bug 1059666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14531">SUSE bug 1059666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14531">SUSE bug 1059666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14531">SUSE bug 1057508</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14531">SUSE bug 1059666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14531">SUSE bug 1059666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14531">SUSE bug 1059666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14531">SUSE bug 1059666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14531">SUSE bug 1059666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14531">SUSE bug 1059666</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14531">SUSE bug 1059666</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714532" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14532</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14532" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14532" source="CVE"/>
    <description>
    ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14532.html">CVE-2017-14532</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14532">SUSE bug 1059663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14532">SUSE bug 1059663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14532">SUSE bug 1059663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14532">SUSE bug 1059663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14532">SUSE bug 1059663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14532">SUSE bug 1059663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14532">SUSE bug 1059663</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165673" comment="GraphicsMagick-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165674" comment="GraphicsMagick-devel-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165675" comment="libGraphicsMagick++-Q16-12-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165676" comment="libGraphicsMagick++-devel-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165677" comment="libGraphicsMagick-Q16-3-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165678" comment="libGraphicsMagick3-config-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165679" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165680" comment="perl-GraphicsMagick-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14533</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14533" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14533" source="CVE"/>
    <description>
    ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14533.html">CVE-2017-14533</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14533">SUSE bug 1059751</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714607" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14607</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14607" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14607" source="CVE"/>
    <description>
    In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14607.html">CVE-2017-14607</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14607">SUSE bug 1059778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14607">SUSE bug 1059778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14607">SUSE bug 1059778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14607">SUSE bug 1059778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14607">SUSE bug 1059778</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14607">SUSE bug 1059778</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714608" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14608</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14608" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14608" source="CVE"/>
    <description>
    In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/dcraw_common.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14608.html">CVE-2017-14608</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14608">SUSE bug 1063798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14608">SUSE bug 1063798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14608">SUSE bug 1063798</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14608">SUSE bug 1063798</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166067" comment="libraw-0.17.1-2.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153171" comment="libraw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166068" comment="libraw-devel-0.17.1-2.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151901" comment="libraw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166069" comment="libraw-devel-static-0.17.1-2.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153172" comment="libraw-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166070" comment="libraw-tools-0.17.1-2.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153173" comment="libraw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166071" comment="libraw15-0.17.1-2.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154115" comment="libraw15 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714632" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14632</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632" source="CVE"/>
    <description>
    Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi-&gt;channels&lt;=0, a similar issue to Mozilla bug 550184.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14632.html">CVE-2017-14632</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14632">SUSE bug 1059809</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169421" comment="libvorbis-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169422" comment="libvorbis is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169423" comment="libvorbis-devel-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151121" comment="libvorbis-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169424" comment="libvorbis-doc-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169425" comment="libvorbis-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169426" comment="libvorbis0-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169427" comment="libvorbis0-32bit-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169428" comment="libvorbisenc2-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169429" comment="libvorbisenc2-32bit-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169430" comment="libvorbisfile3-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169431" comment="libvorbisfile3-32bit-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151127" comment="libvorbisfile3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14633</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14633" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633" source="CVE"/>
    <description>
    In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14633.html">CVE-2017-14633</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1081833</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1081833</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14633">SUSE bug 1059811</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169421" comment="libvorbis-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169422" comment="libvorbis is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169423" comment="libvorbis-devel-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151121" comment="libvorbis-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169424" comment="libvorbis-doc-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169425" comment="libvorbis-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169426" comment="libvorbis0-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151122" comment="libvorbis0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169427" comment="libvorbis0-32bit-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151123" comment="libvorbis0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169428" comment="libvorbisenc2-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151124" comment="libvorbisenc2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169429" comment="libvorbisenc2-32bit-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151125" comment="libvorbisenc2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169430" comment="libvorbisfile3-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151126" comment="libvorbisfile3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169431" comment="libvorbisfile3-32bit-1.3.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151127" comment="libvorbisfile3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14635</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14635" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14635" source="CVE"/>
    <description>
    In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14635.html">CVE-2017-14635</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14635">SUSE bug 1059691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14635">SUSE bug 1059691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14635">SUSE bug 1059691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14635">SUSE bug 1059691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14635">SUSE bug 1059691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14635">SUSE bug 1059691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14635">SUSE bug 1059691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164897" comment="otrs-3.3.18-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154272" comment="otrs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164898" comment="otrs-doc-3.3.18-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154273" comment="otrs-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164899" comment="otrs-itsm-3.3.14-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154274" comment="otrs-itsm is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714682" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14682</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14682" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14682" source="CVE"/>
    <description>
    GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14682.html">CVE-2017-14682</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1047356</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14682">SUSE bug 1060176</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714695" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14695</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14695" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14695" source="CVE"/>
    <description>
    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14695.html">CVE-2017-14695</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14695">SUSE bug 1062462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14695">SUSE bug 1062462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14695">SUSE bug 1062462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14695">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14695">SUSE bug 1062462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14695">SUSE bug 1062462</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165931" comment="salt-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153592" comment="salt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165932" comment="salt-api-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153593" comment="salt-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165933" comment="salt-bash-completion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153594" comment="salt-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165934" comment="salt-cloud-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153595" comment="salt-cloud is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165935" comment="salt-doc-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153596" comment="salt-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165936" comment="salt-fish-completion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153597" comment="salt-fish-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165937" comment="salt-master-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153598" comment="salt-master is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165938" comment="salt-minion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153599" comment="salt-minion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165939" comment="salt-proxy-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153600" comment="salt-proxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165940" comment="salt-ssh-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153602" comment="salt-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165941" comment="salt-syndic-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153603" comment="salt-syndic is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165942" comment="salt-zsh-completion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153604" comment="salt-zsh-completion is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14696</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14696" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14696" source="CVE"/>
    <description>
    SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14696.html">CVE-2017-14696</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14696">SUSE bug 1062464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14696">SUSE bug 1062464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14696">SUSE bug 1062464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14696">SUSE bug 1053955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14696">SUSE bug 1062464</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14696">SUSE bug 1062464</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165931" comment="salt-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153592" comment="salt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165932" comment="salt-api-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153593" comment="salt-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165933" comment="salt-bash-completion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153594" comment="salt-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165934" comment="salt-cloud-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153595" comment="salt-cloud is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165935" comment="salt-doc-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153596" comment="salt-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165936" comment="salt-fish-completion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153597" comment="salt-fish-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165937" comment="salt-master-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153598" comment="salt-master is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165938" comment="salt-minion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153599" comment="salt-minion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165939" comment="salt-proxy-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153600" comment="salt-proxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165940" comment="salt-ssh-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153602" comment="salt-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165941" comment="salt-syndic-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153603" comment="salt-syndic is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165942" comment="salt-zsh-completion-2017.7.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153604" comment="salt-zsh-completion is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714727" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14727</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14727" source="CVE"/>
    <description>
    logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14727.html">CVE-2017-14727</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14727">SUSE bug 1060140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14727">SUSE bug 1060140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14727">SUSE bug 1060140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14727">SUSE bug 1060140</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14727">SUSE bug 1060140</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164823" comment="weechat-1.5-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155009" comment="weechat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164824" comment="weechat-aspell-1.5-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155010" comment="weechat-aspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164825" comment="weechat-devel-1.5-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155011" comment="weechat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164815" comment="weechat-doc-1.5-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155012" comment="weechat-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164826" comment="weechat-guile-1.5-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155013" comment="weechat-guile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164827" comment="weechat-lang-1.5-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155014" comment="weechat-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164828" comment="weechat-lua-1.5-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155015" comment="weechat-lua is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164829" comment="weechat-perl-1.5-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155016" comment="weechat-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164830" comment="weechat-python-1.5-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155017" comment="weechat-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164831" comment="weechat-ruby-1.5-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155018" comment="weechat-ruby is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164832" comment="weechat-tcl-1.5-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155019" comment="weechat-tcl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714729" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14729</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14729" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14729" source="CVE"/>
    <description>
    The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14729.html">CVE-2017-14729</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14729">SUSE bug 1060621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14729">SUSE bug 1060621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14729">SUSE bug 1060621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14729">SUSE bug 1060621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14729">SUSE bug 1060621</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14729">SUSE bug 1060621</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714733" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14733</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14733" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14733" source="CVE"/>
    <description>
    ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14733.html">CVE-2017-14733</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14733">SUSE bug 1060577</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168263" comment="GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168264" comment="GraphicsMagick-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168265" comment="libGraphicsMagick++-Q16-12-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168266" comment="libGraphicsMagick++-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168267" comment="libGraphicsMagick-Q16-3-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168268" comment="libGraphicsMagick3-config-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168269" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168270" comment="perl-GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14745</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14745" source="CVE"/>
    <description>
    The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14745.html">CVE-2017-14745</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14745">SUSE bug 1060599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14745">SUSE bug 1060599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14745">SUSE bug 1060599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14745">SUSE bug 1060599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14745">SUSE bug 1060599</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14745">SUSE bug 1060599</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14746</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14746" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14746" source="CVE"/>
    <description>
    Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14746.html">CVE-2017-14746</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14746">SUSE bug 1060427</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167457" comment="ctdb-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167458" comment="ctdb-tests-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167459" comment="libdcerpc-binding0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167460" comment="libdcerpc-binding0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167461" comment="libdcerpc-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167462" comment="libdcerpc-samr-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167463" comment="libdcerpc-samr0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167464" comment="libdcerpc-samr0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167465" comment="libdcerpc0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167466" comment="libdcerpc0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167467" comment="libndr-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167468" comment="libndr-krb5pac-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167469" comment="libndr-krb5pac0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167470" comment="libndr-krb5pac0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167471" comment="libndr-nbt-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167472" comment="libndr-nbt0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167473" comment="libndr-nbt0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167474" comment="libndr-standard-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167475" comment="libndr-standard0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167476" comment="libndr-standard0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167477" comment="libndr0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167478" comment="libndr0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167479" comment="libnetapi-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167480" comment="libnetapi0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167481" comment="libnetapi0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167482" comment="libsamba-credentials-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167483" comment="libsamba-credentials0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167484" comment="libsamba-credentials0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167485" comment="libsamba-errors-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167486" comment="libsamba-errors0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167487" comment="libsamba-errors0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167488" comment="libsamba-hostconfig-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167489" comment="libsamba-hostconfig0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167490" comment="libsamba-hostconfig0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167491" comment="libsamba-passdb-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167492" comment="libsamba-passdb0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167493" comment="libsamba-passdb0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167494" comment="libsamba-policy-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167495" comment="libsamba-policy0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167496" comment="libsamba-policy0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167497" comment="libsamba-util-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167498" comment="libsamba-util0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167499" comment="libsamba-util0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167500" comment="libsamdb-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167501" comment="libsamdb0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167502" comment="libsamdb0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167503" comment="libsmbclient-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167504" comment="libsmbclient0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167505" comment="libsmbclient0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167506" comment="libsmbconf-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167507" comment="libsmbconf0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167508" comment="libsmbconf0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167509" comment="libsmbldap-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167510" comment="libsmbldap0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167511" comment="libsmbldap0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167512" comment="libtevent-util-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167513" comment="libtevent-util0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167514" comment="libtevent-util0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167515" comment="libwbclient-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167516" comment="libwbclient0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167517" comment="libwbclient0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167518" comment="samba-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167519" comment="samba-client-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167520" comment="samba-client-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167521" comment="samba-core-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167522" comment="samba-doc-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167523" comment="samba-libs-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167524" comment="samba-libs-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167525" comment="samba-pidl-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152776" comment="samba-pidl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167526" comment="samba-python-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167527" comment="samba-test-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167528" comment="samba-winbind-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167529" comment="samba-winbind-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14804</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14804" source="CVE"/>
    <description>
    The build package before 20171128 did not check directory names during extraction of build results that allowed untrusted builds to write outside of the target system,allowing escape out of buildroots.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14804.html">CVE-2017-14804</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14804">SUSE bug 1069904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168196" comment="build-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168197" comment="build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168198" comment="build-initvm-i586-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168199" comment="build-initvm-i586 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168200" comment="build-initvm-x86_64-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168201" comment="build-initvm-x86_64 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168202" comment="build-mkbaselibs-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168203" comment="build-mkbaselibs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168204" comment="build-mkdrpms-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168205" comment="build-mkdrpms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168206" comment="obs-service-source_validator-0.7-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153664" comment="obs-service-source_validator is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168207" comment="osc-0.162.0-7.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151686" comment="osc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14859</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14859" source="CVE"/>
    <description>
    An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14859.html">CVE-2017-14859</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14859">SUSE bug 1061000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14859">SUSE bug 1061000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14859">SUSE bug 1061000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14859">SUSE bug 1061000</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165957" comment="exiv2-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165958" comment="exiv2-lang-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165959" comment="libexiv2-14-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152551" comment="libexiv2-14 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165960" comment="libexiv2-14-32bit-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165961" comment="libexiv2-14-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165962" comment="libexiv2-devel-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14862</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14862" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14862" source="CVE"/>
    <description>
    An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14862.html">CVE-2017-14862</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14862">SUSE bug 1060996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14862">SUSE bug 1060996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14862">SUSE bug 1060996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14862">SUSE bug 1060996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14862">SUSE bug 1060996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14862">SUSE bug 1060996</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165957" comment="exiv2-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165958" comment="exiv2-lang-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165959" comment="libexiv2-14-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152551" comment="libexiv2-14 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165960" comment="libexiv2-14-32bit-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165961" comment="libexiv2-14-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165962" comment="libexiv2-devel-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14865</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14865" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14865" source="CVE"/>
    <description>
    There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14865.html">CVE-2017-14865</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14865">SUSE bug 1061003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14865">SUSE bug 1061003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14865">SUSE bug 1061003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14865">SUSE bug 1061003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165957" comment="exiv2-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154125" comment="exiv2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165958" comment="exiv2-lang-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154126" comment="exiv2-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165959" comment="libexiv2-14-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152551" comment="libexiv2-14 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165960" comment="libexiv2-14-32bit-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165961" comment="libexiv2-14-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165962" comment="libexiv2-devel-0.25-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152552" comment="libexiv2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714867" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14867</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14867" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14867" source="CVE"/>
    <description>
    Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The vulnerable code is reachable via git-shell even without CVS support.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14867.html">CVE-2017-14867</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1060377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1060378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1060377</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1060378</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14867">SUSE bug 1061041</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165761" comment="git-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151600" comment="git is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165762" comment="git-arch-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153608" comment="git-arch is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165763" comment="git-core-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151601" comment="git-core is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165764" comment="git-credential-gnome-keyring-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153609" comment="git-credential-gnome-keyring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165765" comment="git-cvs-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151602" comment="git-cvs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165766" comment="git-daemon-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151603" comment="git-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165767" comment="git-doc-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153610" comment="git-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165768" comment="git-email-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151604" comment="git-email is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165769" comment="git-gui-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151605" comment="git-gui is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165770" comment="git-svn-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151606" comment="git-svn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165771" comment="git-web-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151607" comment="git-web is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165772" comment="gitk-2.12.3-5.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151608" comment="gitk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714919" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14919</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14919" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14919" source="CVE"/>
    <description>
    Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14919.html">CVE-2017-14919</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14919">SUSE bug 1059050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14919">SUSE bug 1059050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169246" comment="nodejs4-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154256" comment="nodejs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169247" comment="nodejs4-devel-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154257" comment="nodejs4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169248" comment="nodejs4-docs-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154258" comment="nodejs4-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169249" comment="npm4-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154259" comment="npm4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14974</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14974" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14974" source="CVE"/>
    <description>
    The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14974.html">CVE-2017-14974</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14974">SUSE bug 1061241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14974">SUSE bug 1061241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14974">SUSE bug 1061241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14974">SUSE bug 1061241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14974">SUSE bug 1061241</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714989" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14989</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14989" source="CVE"/>
    <description>
    A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14989.html">CVE-2017-14989</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14989">SUSE bug 1061254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14989">SUSE bug 1061254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14989">SUSE bug 1061254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14989">SUSE bug 1061254</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14989">SUSE bug 1061254</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201714994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-14994</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-14994" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14994" source="CVE"/>
    <description>
    ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted DICOM image, related to the ability of DCM_ReadNonNativeImages to yield an image list with zero frames.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-14994.html">CVE-2017-14994</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14994">SUSE bug 1061587</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14994">SUSE bug 1061587</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14994">SUSE bug 1061587</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14994">SUSE bug 1061587</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14994">SUSE bug 1061587</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14994">SUSE bug 1061587</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-14994">SUSE bug 1061587</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168263" comment="GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168264" comment="GraphicsMagick-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168265" comment="libGraphicsMagick++-Q16-12-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168266" comment="libGraphicsMagick++-devel-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168267" comment="libGraphicsMagick-Q16-3-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168268" comment="libGraphicsMagick3-config-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168269" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168270" comment="perl-GraphicsMagick-1.3.25-11.48.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15033</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15033" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15033" source="CVE"/>
    <description>
    ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15033.html">CVE-2017-15033</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15033">SUSE bug 1061873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15033">SUSE bug 1061873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15033">SUSE bug 1061873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15033">SUSE bug 1061873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15033">SUSE bug 1061873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15033">SUSE bug 1061873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15033">SUSE bug 1061873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15033">SUSE bug 1061873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15033">SUSE bug 1061873</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165673" comment="GraphicsMagick-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165674" comment="GraphicsMagick-devel-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166921" comment="ImageMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166922" comment="ImageMagick-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166915" comment="ImageMagick-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166923" comment="ImageMagick-doc-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166924" comment="ImageMagick-extra-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165675" comment="libGraphicsMagick++-Q16-12-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165676" comment="libGraphicsMagick++-devel-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165677" comment="libGraphicsMagick-Q16-3-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165678" comment="libGraphicsMagick3-config-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165679" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166925" comment="libMagick++-6_Q16-3-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166916" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166917" comment="libMagick++-devel-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166918" comment="libMagick++-devel-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166926" comment="libMagickCore-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166919" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166927" comment="libMagickWand-6_Q16-1-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166920" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165680" comment="perl-GraphicsMagick-1.3.25-11.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166928" comment="perl-PerlMagick-6.8.8.1-30.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15038</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15038" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15038" source="CVE"/>
    <description>
    Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15038.html">CVE-2017-15038</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15038">SUSE bug 1062069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15038">SUSE bug 1062069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15038">SUSE bug 1062069</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15047</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15047" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15047" source="CVE"/>
    <description>
    The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15047.html">CVE-2017-15047</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15047">SUSE bug 1061967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15047">SUSE bug 1061967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15047">SUSE bug 1061967</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15047">SUSE bug 1061967</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170231" comment="redis-4.0.6-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152049" comment="redis is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15056</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15056" source="CVE"/>
    <description>
    p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by an Invalid Pointer Read in PackLinuxElf64::unpack().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15056.html">CVE-2017-15056</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15056">SUSE bug 1062059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15056">SUSE bug 1062059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15056">SUSE bug 1062059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15056">SUSE bug 1062059</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15056">SUSE bug 1062059</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165779" comment="upx-3.94-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009165780" comment="upx is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15088</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15088" source="CVE"/>
    <description>
    plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) in situations involving untrusted X.509 data, related to the get_matching_data and X509_NAME_oneline_ex functions. NOTE: this has security relevance only in use cases outside of the MIT Kerberos distribution, e.g., the use of get_matching_data in KDC certauth plugin code that is specific to Red Hat.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15088.html">CVE-2017-15088</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15088">SUSE bug 1065274</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166875" comment="krb5-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151005" comment="krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166876" comment="krb5-32bit-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151006" comment="krb5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166877" comment="krb5-client-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151007" comment="krb5-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166878" comment="krb5-devel-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151008" comment="krb5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166879" comment="krb5-devel-32bit-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152677" comment="krb5-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166880" comment="krb5-doc-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152678" comment="krb5-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166881" comment="krb5-mini-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152679" comment="krb5-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166882" comment="krb5-mini-devel-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152680" comment="krb5-mini-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166883" comment="krb5-plugin-kdb-ldap-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152681" comment="krb5-plugin-kdb-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166884" comment="krb5-plugin-preauth-otp-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152682" comment="krb5-plugin-preauth-otp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166885" comment="krb5-plugin-preauth-pkinit-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152683" comment="krb5-plugin-preauth-pkinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166886" comment="krb5-server-1.12.5-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152684" comment="krb5-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715090" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15090</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15090" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15090" source="CVE"/>
    <description>
    An issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4.0.0 and up to and including 4.0.6, where the signatures might have been accepted as valid even if the signed data was not in bailiwick of the DNSKEY used to sign it. This allows an attacker in position of man-in-the-middle to alter the content of records by issuing a valid signature for the crafted records.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15090.html">CVE-2017-15090</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15090">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15090">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15090">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15090">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15090">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15090">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15090">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15090">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15090">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15090">SUSE bug 1069242</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167886" comment="pdns-recursor-3.7.3-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153799" comment="pdns-recursor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15091</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15091" source="CVE"/>
    <description>
    An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly keyword. This missing check allows an attacker with valid API credentials to flush the cache, trigger a zone transfer or send a NOTIFY.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15091.html">CVE-2017-15091</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15091">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15091">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15091">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15091">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15091">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15091">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15091">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15091">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15091">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15091">SUSE bug 1069242</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167887" comment="pdns-3.4.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152980" comment="pdns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167888" comment="pdns-backend-ldap-3.4.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152981" comment="pdns-backend-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167889" comment="pdns-backend-lua-3.4.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152982" comment="pdns-backend-lua is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167890" comment="pdns-backend-mydns-3.4.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152983" comment="pdns-backend-mydns is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167891" comment="pdns-backend-mysql-3.4.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152984" comment="pdns-backend-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167892" comment="pdns-backend-postgresql-3.4.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152985" comment="pdns-backend-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167893" comment="pdns-backend-sqlite3-3.4.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152986" comment="pdns-backend-sqlite3 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15092</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15092" source="CVE"/>
    <description>
    A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15092.html">CVE-2017-15092</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15092">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15092">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15092">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15092">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15092">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15092">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15092">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15092">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15092">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15092">SUSE bug 1069242</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167886" comment="pdns-recursor-3.7.3-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153799" comment="pdns-recursor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15093</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15093" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15093" source="CVE"/>
    <description>
    When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor's configuration.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15093.html">CVE-2017-15093</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15093">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15093">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15093">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15093">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15093">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15093">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15093">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15093">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15093">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15093">SUSE bug 1069242</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167886" comment="pdns-recursor-3.7.3-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153799" comment="pdns-recursor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15094</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15094" source="CVE"/>
    <description>
    An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and including 4.0.6 leading to a memory leak when parsing specially crafted DNSSEC ECDSA keys. These keys are only parsed when validation is enabled by setting dnssec to a value other than off or process-no-validate (default).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15094.html">CVE-2017-15094</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15094">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15094">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15094">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15094">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15094">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15094">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15094">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15094">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15094">SUSE bug 1069242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15094">SUSE bug 1069242</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167886" comment="pdns-recursor-3.7.3-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153799" comment="pdns-recursor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15098</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15098" source="CVE"/>
    <description>
    Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15098.html">CVE-2017-15098</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15098">SUSE bug 1067844</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168891" comment="libecpg6-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168892" comment="libecpg6-32bit-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151070" comment="libecpg6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168893" comment="libpq5-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168894" comment="libpq5-32bit-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151072" comment="libpq5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169731" comment="postgresql94-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169732" comment="postgresql94-contrib-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169733" comment="postgresql94-devel-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169734" comment="postgresql94-docs-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169735" comment="postgresql94-libs-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151088" comment="postgresql94-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169736" comment="postgresql94-plperl-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151089" comment="postgresql94-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169737" comment="postgresql94-plpython-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151090" comment="postgresql94-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169738" comment="postgresql94-pltcl-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151091" comment="postgresql94-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169739" comment="postgresql94-server-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169740" comment="postgresql94-test-9.4.15-9.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151093" comment="postgresql94-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168895" comment="postgresql96-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161265" comment="postgresql96 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168896" comment="postgresql96-contrib-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161266" comment="postgresql96-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168897" comment="postgresql96-devel-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161267" comment="postgresql96-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168898" comment="postgresql96-docs-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161268" comment="postgresql96-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168899" comment="postgresql96-libs-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163499" comment="postgresql96-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168900" comment="postgresql96-plperl-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163501" comment="postgresql96-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168901" comment="postgresql96-plpython-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163503" comment="postgresql96-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168902" comment="postgresql96-pltcl-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163505" comment="postgresql96-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168903" comment="postgresql96-server-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161269" comment="postgresql96-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168904" comment="postgresql96-test-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163508" comment="postgresql96-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15099</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15099" source="CVE"/>
    <description>
    INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15099.html">CVE-2017-15099</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15099">SUSE bug 1067841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15099">SUSE bug 1067841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15099">SUSE bug 1067841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15099">SUSE bug 1067841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15099">SUSE bug 1067841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15099">SUSE bug 1067841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15099">SUSE bug 1067841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15099">SUSE bug 1067841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15099">SUSE bug 1067841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15099">SUSE bug 1067841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15099">SUSE bug 1067841</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168891" comment="libecpg6-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168892" comment="libecpg6-32bit-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151070" comment="libecpg6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168893" comment="libpq5-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168894" comment="libpq5-32bit-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151072" comment="libpq5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168895" comment="postgresql96-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161265" comment="postgresql96 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168896" comment="postgresql96-contrib-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161266" comment="postgresql96-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168897" comment="postgresql96-devel-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161267" comment="postgresql96-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168898" comment="postgresql96-docs-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161268" comment="postgresql96-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168899" comment="postgresql96-libs-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163499" comment="postgresql96-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168900" comment="postgresql96-plperl-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163501" comment="postgresql96-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168901" comment="postgresql96-plpython-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163503" comment="postgresql96-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168902" comment="postgresql96-pltcl-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163505" comment="postgresql96-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168903" comment="postgresql96-server-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161269" comment="postgresql96-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168904" comment="postgresql96-test-9.6.6-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163508" comment="postgresql96-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15115</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15115" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15115" source="CVE"/>
    <description>
    The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15115.html">CVE-2017-15115</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15115">SUSE bug 1068671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15115">SUSE bug 1068671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15115">SUSE bug 1068671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15115">SUSE bug 1068671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15115">SUSE bug 1068671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715191" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15191</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15191" source="CVE"/>
    <description>
    In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in epan/dissectors/packet-dmp.c by validating a string length.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15191.html">CVE-2017-15191</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15191">SUSE bug 1062645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15191">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15191">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15191">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15191">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165681" comment="wireshark-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165682" comment="wireshark-devel-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165683" comment="wireshark-ui-gtk-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165684" comment="wireshark-ui-qt-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715192" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15192</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15192" source="CVE"/>
    <description>
    In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15192.html">CVE-2017-15192</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15192">SUSE bug 1062645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15192">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15192">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15192">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15192">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165681" comment="wireshark-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165682" comment="wireshark-devel-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165683" comment="wireshark-ui-gtk-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165684" comment="wireshark-ui-qt-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15193</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15193" source="CVE"/>
    <description>
    In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-mbim.c by changing the memory-allocation approach.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15193.html">CVE-2017-15193</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15193">SUSE bug 1062645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15193">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15193">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15193">SUSE bug 983671</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15193">SUSE bug 983671</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165681" comment="wireshark-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165682" comment="wireshark-devel-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165683" comment="wireshark-ui-gtk-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165684" comment="wireshark-ui-qt-2.2.10-14.16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15194</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15194" source="CVE"/>
    <description>
    include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15194.html">CVE-2017-15194</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15194">SUSE bug 1062554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15194">SUSE bug 1062554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15194">SUSE bug 1062554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15194">SUSE bug 1062554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15194">SUSE bug 1062554</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165781" comment="cacti-1.1.26-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165782" comment="cacti-doc-1.1.26-16.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165783" comment="cacti-spine-1.1.26-7.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15217</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15217" source="CVE"/>
    <description>
    ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15217.html">CVE-2017-15217</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15217">SUSE bug 1062750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15217">SUSE bug 1062750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15217">SUSE bug 1062750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15217">SUSE bug 1062750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15217">SUSE bug 1062750</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15217">SUSE bug 1062750</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715218" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15218</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15218" source="CVE"/>
    <description>
    ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15218.html">CVE-2017-15218</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15218">SUSE bug 1062752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15218">SUSE bug 1062752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15218">SUSE bug 1062752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15218">SUSE bug 1047910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15218">SUSE bug 1062752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15218">SUSE bug 1062752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15218">SUSE bug 1062752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15218">SUSE bug 1062752</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15218">SUSE bug 1062752</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170211" comment="GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170212" comment="GraphicsMagick-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170213" comment="libGraphicsMagick++-Q16-12-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170214" comment="libGraphicsMagick++-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170215" comment="libGraphicsMagick-Q16-3-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170216" comment="libGraphicsMagick3-config-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170217" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170218" comment="perl-GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15227</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15227" source="CVE"/>
    <description>
    Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels from the query list, resulting in use-after-free conditions when updating the state later on.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15227.html">CVE-2017-15227</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15227">SUSE bug 1064540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15227">SUSE bug 1064540</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165996" comment="irssi-1.0.5-14.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165997" comment="irssi-devel-1.0.5-14.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15228</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15228" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15228" source="CVE"/>
    <description>
    Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15228.html">CVE-2017-15228</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15228">SUSE bug 1064540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15228">SUSE bug 1064540</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165996" comment="irssi-1.0.5-14.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165997" comment="irssi-devel-1.0.5-14.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15232</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15232" source="CVE"/>
    <description>
    libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15232.html">CVE-2017-15232</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15232">SUSE bug 1062937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15232">SUSE bug 1062937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15232">SUSE bug 1062937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15232">SUSE bug 1062937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15232">SUSE bug 1062937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15232">SUSE bug 1062937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15232">SUSE bug 1062937</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166378" comment="libjpeg-turbo-1.5.2-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152540" comment="libjpeg-turbo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166379" comment="libjpeg62-62.2.0-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152541" comment="libjpeg62 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166380" comment="libjpeg62-32bit-62.2.0-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166381" comment="libjpeg62-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166382" comment="libjpeg62-devel-62.2.0-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152542" comment="libjpeg62-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166383" comment="libjpeg62-devel-32bit-62.2.0-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166384" comment="libjpeg62-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166385" comment="libjpeg62-turbo-1.5.2-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166386" comment="libjpeg62-turbo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166387" comment="libjpeg8-8.1.2-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152543" comment="libjpeg8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166388" comment="libjpeg8-32bit-8.1.2-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152544" comment="libjpeg8-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166389" comment="libjpeg8-devel-8.1.2-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166390" comment="libjpeg8-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166391" comment="libjpeg8-devel-32bit-8.1.2-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166392" comment="libjpeg8-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166393" comment="libturbojpeg0-8.1.2-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152545" comment="libturbojpeg0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166394" comment="libturbojpeg0-32bit-8.1.2-35.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166395" comment="libturbojpeg0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15265</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15265" source="CVE"/>
    <description>
    Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15265.html">CVE-2017-15265</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15265">SUSE bug 1062520</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166398" comment="kernel-debug-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166399" comment="kernel-debug-base-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166400" comment="kernel-debug-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166401" comment="kernel-default-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166402" comment="kernel-default-base-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166403" comment="kernel-default-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166404" comment="kernel-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166405" comment="kernel-docs-4.4.92-18.36.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166406" comment="kernel-docs-html-4.4.92-18.36.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166407" comment="kernel-docs-pdf-4.4.92-18.36.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166408" comment="kernel-macros-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166409" comment="kernel-obs-build-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166410" comment="kernel-obs-qa-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166411" comment="kernel-source-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166412" comment="kernel-source-vanilla-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166413" comment="kernel-syms-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166414" comment="kernel-vanilla-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166415" comment="kernel-vanilla-base-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166416" comment="kernel-vanilla-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715268" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15268</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15268" source="CVE"/>
    <description>
    Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15268.html">CVE-2017-15268</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15268">SUSE bug 1062942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15268">SUSE bug 1062942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15268">SUSE bug 1062942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15268">SUSE bug 1062942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715275" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15275</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15275" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15275" source="CVE"/>
    <description>
    Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15275.html">CVE-2017-15275</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15275">SUSE bug 1063008</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167457" comment="ctdb-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167458" comment="ctdb-tests-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167459" comment="libdcerpc-binding0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167460" comment="libdcerpc-binding0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167461" comment="libdcerpc-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167462" comment="libdcerpc-samr-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167463" comment="libdcerpc-samr0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167464" comment="libdcerpc-samr0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167465" comment="libdcerpc0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167466" comment="libdcerpc0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167467" comment="libndr-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167468" comment="libndr-krb5pac-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167469" comment="libndr-krb5pac0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167470" comment="libndr-krb5pac0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167471" comment="libndr-nbt-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167472" comment="libndr-nbt0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167473" comment="libndr-nbt0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167474" comment="libndr-standard-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167475" comment="libndr-standard0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167476" comment="libndr-standard0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167477" comment="libndr0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167478" comment="libndr0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167479" comment="libnetapi-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167480" comment="libnetapi0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167481" comment="libnetapi0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167482" comment="libsamba-credentials-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167483" comment="libsamba-credentials0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167484" comment="libsamba-credentials0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167485" comment="libsamba-errors-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167486" comment="libsamba-errors0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167487" comment="libsamba-errors0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167488" comment="libsamba-hostconfig-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167489" comment="libsamba-hostconfig0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167490" comment="libsamba-hostconfig0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167491" comment="libsamba-passdb-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167492" comment="libsamba-passdb0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167493" comment="libsamba-passdb0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167494" comment="libsamba-policy-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167495" comment="libsamba-policy0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167496" comment="libsamba-policy0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167497" comment="libsamba-util-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167498" comment="libsamba-util0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167499" comment="libsamba-util0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167500" comment="libsamdb-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167501" comment="libsamdb0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167502" comment="libsamdb0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167503" comment="libsmbclient-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167504" comment="libsmbclient0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167505" comment="libsmbclient0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167506" comment="libsmbconf-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167507" comment="libsmbconf0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167508" comment="libsmbconf0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167509" comment="libsmbldap-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167510" comment="libsmbldap0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167511" comment="libsmbldap0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167512" comment="libtevent-util-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167513" comment="libtevent-util0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167514" comment="libtevent-util0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167515" comment="libwbclient-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167516" comment="libwbclient0-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167517" comment="libwbclient0-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167518" comment="samba-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167519" comment="samba-client-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167520" comment="samba-client-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167521" comment="samba-core-devel-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167522" comment="samba-doc-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167523" comment="samba-libs-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167524" comment="samba-libs-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167525" comment="samba-pidl-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152776" comment="samba-pidl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167526" comment="samba-python-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167527" comment="samba-test-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167528" comment="samba-winbind-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167529" comment="samba-winbind-32bit-4.4.2-11.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715277" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15277</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15277" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15277" source="CVE"/>
    <description>
    ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15277.html">CVE-2017-15277</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15277">SUSE bug 1063050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15277">SUSE bug 1063050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15277">SUSE bug 1063050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15277">SUSE bug 1063050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15277">SUSE bug 1063050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15277">SUSE bug 1063050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15277">SUSE bug 1063050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168669" comment="GraphicsMagick-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168670" comment="GraphicsMagick-devel-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169232" comment="ImageMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169233" comment="ImageMagick-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169234" comment="ImageMagick-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169235" comment="ImageMagick-doc-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169236" comment="ImageMagick-extra-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168671" comment="libGraphicsMagick++-Q16-12-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168672" comment="libGraphicsMagick++-devel-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168673" comment="libGraphicsMagick-Q16-3-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168674" comment="libGraphicsMagick3-config-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168675" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169237" comment="libMagick++-6_Q16-3-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169238" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169239" comment="libMagick++-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169240" comment="libMagick++-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169241" comment="libMagickCore-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169242" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169243" comment="libMagickWand-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169244" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168676" comment="perl-GraphicsMagick-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169245" comment="perl-PerlMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715281" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15281</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15281" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15281" source="CVE"/>
    <description>
    ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or move depends on uninitialised value(s)."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15281.html">CVE-2017-15281</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15281">SUSE bug 1063049</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15281">SUSE bug 1063049</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15281">SUSE bug 1063049</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15281">SUSE bug 1063049</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15281">SUSE bug 1063049</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15281">SUSE bug 1072901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15281">SUSE bug 1063049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169232" comment="ImageMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169233" comment="ImageMagick-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169234" comment="ImageMagick-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169235" comment="ImageMagick-doc-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169236" comment="ImageMagick-extra-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169237" comment="libMagick++-6_Q16-3-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169238" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169239" comment="libMagick++-devel-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169240" comment="libMagick++-devel-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169241" comment="libMagickCore-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169242" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169243" comment="libMagickWand-6_Q16-1-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169244" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169245" comment="perl-PerlMagick-6.8.8.1-30.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15289</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15289" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15289" source="CVE"/>
    <description>
    The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15289.html">CVE-2017-15289</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15289">SUSE bug 1063122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15289">SUSE bug 1063123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15289">SUSE bug 1063122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15289">SUSE bug 1063122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15289">SUSE bug 1063123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15289">SUSE bug 1063123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15289">SUSE bug 1063122</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167533" comment="xen-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167534" comment="xen-devel-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167535" comment="xen-doc-html-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167536" comment="xen-libs-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167537" comment="xen-libs-32bit-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167538" comment="xen-tools-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167539" comment="xen-tools-domU-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15369</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15369" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15369" source="CVE"/>
    <description>
    The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service (Fitz fz_drop_imp use-after-free and application crash) or possibly have unspecified other impact via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15369.html">CVE-2017-15369</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15369">SUSE bug 1063413</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15369">SUSE bug 1063413</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170232" comment="mupdf-1.12.0-13.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170233" comment="mupdf-devel-static-1.12.0-13.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15386</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15386" source="CVE"/>
    <description>
    Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15386.html">CVE-2017-15386</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15386">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15386">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15387</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15387" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15387" source="CVE"/>
    <description>
    Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15387.html">CVE-2017-15387</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15387">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15387">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15388</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15388" source="CVE"/>
    <description>
    Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15388.html">CVE-2017-15388</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15388">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15388">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15389</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15389" source="CVE"/>
    <description>
    An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15389.html">CVE-2017-15389</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15389">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15389">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15390</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15390" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15390" source="CVE"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15390.html">CVE-2017-15390</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15390">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15390">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15391</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15391" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15391" source="CVE"/>
    <description>
    Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15391.html">CVE-2017-15391</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15391">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15391">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15392</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15392" source="CVE"/>
    <description>
    Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to potentially exploit heap corruption via a crafted Windows Registry entry, related to PlatformIntegration.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15392.html">CVE-2017-15392</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15392">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15392">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15393</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15393" source="CVE"/>
    <description>
    Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15393.html">CVE-2017-15393</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15393">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15393">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15394</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15394" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15394" source="CVE"/>
    <description>
    Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15394.html">CVE-2017-15394</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15394">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15394">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15395</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15395" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15395" source="CVE"/>
    <description>
    A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15395.html">CVE-2017-15395</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15395">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15395">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15396</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15396" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15396.html">CVE-2017-15396</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15396">SUSE bug 1065405</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15398</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15398" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15398" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15398.html">CVE-2017-15398</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15398">SUSE bug 1066851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15398">SUSE bug 1066853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15398">SUSE bug 1066851</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166707" comment="chromedriver-62.0.3202.89-104.38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166708" comment="chromium-62.0.3202.89-104.38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15399</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15399" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15399" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15399.html">CVE-2017-15399</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15399">SUSE bug 1066851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15399">SUSE bug 1066853</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15399">SUSE bug 1066851</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166707" comment="chromedriver-62.0.3202.89-104.38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166708" comment="chromium-62.0.3202.89-104.38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15408</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15408" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15408" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15408.html">CVE-2017-15408</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15408">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15408">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15409</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15409" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15409" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15409.html">CVE-2017-15409</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15409">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15409">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15410</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15410" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15410.html">CVE-2017-15410</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15410">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15410">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715411" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15411</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15411" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15411.html">CVE-2017-15411</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15411">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15411">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15412</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15412" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15412.html">CVE-2017-15412</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15412">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15412">SUSE bug 1077993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15412">SUSE bug 1077993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15412">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15412">SUSE bug 1077993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15412">SUSE bug 1077993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15412">SUSE bug 1077993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15412">SUSE bug 1077993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15412">SUSE bug 1077993</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715413" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15413</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15413" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15413" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15413.html">CVE-2017-15413</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15413">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15413">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15415</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15415" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15415" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15415.html">CVE-2017-15415</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15415">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15415">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15416</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15416" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15416" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15416.html">CVE-2017-15416</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15416">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15416">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15417</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15417" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15417.html">CVE-2017-15417</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15417">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15417">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15418</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15418" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15418.html">CVE-2017-15418</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15418">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15418">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15419</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15419" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15419" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15419.html">CVE-2017-15419</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15419">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15419">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15420</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15420" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15420.html">CVE-2017-15420</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15420">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15420">SUSE bug 1077571</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15420">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15422</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15422" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15422" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15422.html">CVE-2017-15422</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15422">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15422">SUSE bug 1077999</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15422">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15422">SUSE bug 1077999</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715423" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15423</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15423" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15423" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15423.html">CVE-2017-15423</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15423">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15423">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715424" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15424</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15424" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15424" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15424.html">CVE-2017-15424</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15424">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15424">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715425" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15425</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15425" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15425" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15425.html">CVE-2017-15425</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15425">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15425">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15426</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15426" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15426" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15426.html">CVE-2017-15426</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15426">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15426">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15427</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15427" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15427.html">CVE-2017-15427</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15427">SUSE bug 1071691</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15427">SUSE bug 1071691</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168113" comment="chromedriver-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168114" comment="chromium-63.0.3239.84-104.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15429</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15429" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15429" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15429.html">CVE-2017-15429</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15429">SUSE bug 1072976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15429">SUSE bug 1072976</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168677" comment="chromedriver-63.0.3239.108-104.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168678" comment="chromium-63.0.3239.108-104.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15587</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15587" source="CVE"/>
    <description>
    An integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c in Artifex MuPDF 1.11.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15587.html">CVE-2017-15587</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15587">SUSE bug 1064027</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15587">SUSE bug 1064027</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170232" comment="mupdf-1.12.0-13.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170233" comment="mupdf-devel-static-1.12.0-13.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715588" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15588</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15588" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15588" source="CVE"/>
    <description>
    An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause a stale TLB entry.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15588.html">CVE-2017-15588</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15588">SUSE bug 1061082</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166441" comment="xen-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166442" comment="xen-devel-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166443" comment="xen-doc-html-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166444" comment="xen-libs-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166445" comment="xen-libs-32bit-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166446" comment="xen-tools-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166447" comment="xen-tools-domU-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15589</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15589" source="CVE"/>
    <description>
    An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15589.html">CVE-2017-15589</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15589">SUSE bug 1061080</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166441" comment="xen-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166442" comment="xen-devel-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166443" comment="xen-doc-html-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166444" comment="xen-libs-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166445" comment="xen-libs-32bit-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166446" comment="xen-tools-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166447" comment="xen-tools-domU-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15590</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15590" source="CVE"/>
    <description>
    An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15590.html">CVE-2017-15590</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15590">SUSE bug 1061076</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166441" comment="xen-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166442" comment="xen-devel-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166443" comment="xen-doc-html-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166444" comment="xen-libs-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166445" comment="xen-libs-32bit-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166446" comment="xen-tools-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166447" comment="xen-tools-domU-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15591</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15591" source="CVE"/>
    <description>
    An issue was discovered in Xen 4.5.x through 4.9.x allowing attackers (who control a stub domain kernel or tool stack) to cause a denial of service (host OS crash) because of a missing comparison (of range start to range end) within the DMOP map/unmap implementation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15591.html">CVE-2017-15591</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15591">SUSE bug 1061077</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166441" comment="xen-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166442" comment="xen-devel-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166443" comment="xen-doc-html-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166444" comment="xen-libs-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166445" comment="xen-libs-32bit-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166446" comment="xen-tools-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166447" comment="xen-tools-domU-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15592</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15592" source="CVE"/>
    <description>
    An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because self-linear shadow mappings are mishandled for translated guests.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15592.html">CVE-2017-15592</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15592">SUSE bug 1061086</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166441" comment="xen-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166442" comment="xen-devel-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166443" comment="xen-doc-html-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166444" comment="xen-libs-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166445" comment="xen-libs-32bit-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166446" comment="xen-tools-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166447" comment="xen-tools-domU-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15593</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15593" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15593" source="CVE"/>
    <description>
    An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak) because reference counts are mishandled.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15593.html">CVE-2017-15593</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15593">SUSE bug 1061084</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166441" comment="xen-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166442" comment="xen-devel-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166443" comment="xen-doc-html-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166444" comment="xen-libs-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166445" comment="xen-libs-32bit-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166446" comment="xen-tools-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166447" comment="xen-tools-domU-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15594</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15594" source="CVE"/>
    <description>
    An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service (hypervisor crash) or gain privileges because IDT settings are mishandled during CPU hotplugging.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15594.html">CVE-2017-15594</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15594">SUSE bug 1061087</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166441" comment="xen-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166442" comment="xen-devel-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166443" comment="xen-doc-html-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166444" comment="xen-libs-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166445" comment="xen-libs-32bit-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166446" comment="xen-tools-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166447" comment="xen-tools-domU-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15595</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15595" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15595" source="CVE"/>
    <description>
    An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via crafted page-table stacking.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15595.html">CVE-2017-15595</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15595">SUSE bug 1061081</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166441" comment="xen-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166442" comment="xen-devel-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166443" comment="xen-doc-html-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166444" comment="xen-libs-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166445" comment="xen-libs-32bit-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166446" comment="xen-tools-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166447" comment="xen-tools-domU-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15597</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15597" source="CVE"/>
    <description>
    An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accompanied by a suitable page reference. Other portions of code, however, did not match up with that assumption. When such a grant copy operation is being done on a grant of a dying domain, the assumption turns out wrong. A malicious guest administrator can cause hypervisor memory corruption, most likely resulting in host crash and a Denial of Service. Privilege escalation and information leaks cannot be ruled out.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15597.html">CVE-2017-15597</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15597">SUSE bug 1061075</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167533" comment="xen-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167534" comment="xen-devel-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167535" comment="xen-doc-html-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167536" comment="xen-libs-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167537" comment="xen-libs-32bit-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167538" comment="xen-tools-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167539" comment="xen-tools-domU-4.7.4_02-11.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715638" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15638</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15638" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15638" source="CVE"/>
    <description>
    The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 SP2; before 3.6.312.333-3.10.1 in SLE Desktop 12 SP3 and Server 12 SP3; before 3.6_SVNr208-2.18.3.1 in SLE Server 11 SP4; before 3.6.312-5.9.1 in openSUSE Leap 42.2; and before 3.6.312.333-7.1 in openSUSE Leap 42.3 might allow remote attackers to bypass intended access restrictions on the portmap service by leveraging a missing source net restriction for _rpc_ services.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15638.html">CVE-2017-15638</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15638">SUSE bug 1064127</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166624" comment="SuSEfirewall2-3.6.312-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166625" comment="SuSEfirewall2 is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15649</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15649" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15649" source="CVE"/>
    <description>
    net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fanout_add and packet_do_bind) that leads to a use-after-free, a different vulnerability than CVE-2017-6346.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15649.html">CVE-2017-15649</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064392</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15649">SUSE bug 1064392</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166398" comment="kernel-debug-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166399" comment="kernel-debug-base-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166400" comment="kernel-debug-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166401" comment="kernel-default-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166402" comment="kernel-default-base-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166403" comment="kernel-default-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166404" comment="kernel-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166405" comment="kernel-docs-4.4.92-18.36.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166406" comment="kernel-docs-html-4.4.92-18.36.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166407" comment="kernel-docs-pdf-4.4.92-18.36.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166408" comment="kernel-macros-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166409" comment="kernel-obs-build-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166410" comment="kernel-obs-qa-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166411" comment="kernel-source-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166412" comment="kernel-source-vanilla-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166413" comment="kernel-syms-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166414" comment="kernel-vanilla-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166415" comment="kernel-vanilla-base-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166416" comment="kernel-vanilla-devel-4.4.92-18.36.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715670" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15670</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15670" source="CVE"/>
    <description>
    The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15670.html">CVE-2017-15670</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15670">SUSE bug 1064583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15670">SUSE bug 1064583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169693" comment="glibc-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169694" comment="glibc-devel-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169695" comment="glibc-devel-static-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152567" comment="glibc-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169696" comment="glibc-extra-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169697" comment="glibc-html-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152569" comment="glibc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169698" comment="glibc-i18ndata-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152570" comment="glibc-i18ndata is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169699" comment="glibc-info-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169700" comment="glibc-locale-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169701" comment="glibc-obsolete-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152571" comment="glibc-obsolete is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169702" comment="glibc-profile-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152572" comment="glibc-profile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169703" comment="glibc-testsuite-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152574" comment="glibc-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169704" comment="glibc-utils-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152575" comment="glibc-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169705" comment="glibc-utils-32bit-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152576" comment="glibc-utils-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169706" comment="nscd-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15671</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15671" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15671" source="CVE"/>
    <description>
    The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15671.html">CVE-2017-15671</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15671">SUSE bug 1064569</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15671">SUSE bug 1064569</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169693" comment="glibc-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169694" comment="glibc-devel-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169695" comment="glibc-devel-static-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152567" comment="glibc-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169696" comment="glibc-extra-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169697" comment="glibc-html-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152569" comment="glibc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169698" comment="glibc-i18ndata-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152570" comment="glibc-i18ndata is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169699" comment="glibc-info-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169700" comment="glibc-locale-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169701" comment="glibc-obsolete-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152571" comment="glibc-obsolete is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169702" comment="glibc-profile-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152572" comment="glibc-profile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169703" comment="glibc-testsuite-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152574" comment="glibc-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169704" comment="glibc-utils-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152575" comment="glibc-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169705" comment="glibc-utils-32bit-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152576" comment="glibc-utils-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169706" comment="nscd-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715721" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15721</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15721" source="CVE"/>
    <description>
    In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative to CVE-2017-9468.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15721.html">CVE-2017-15721</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15721">SUSE bug 1064540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15721">SUSE bug 1064540</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165996" comment="irssi-1.0.5-14.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165997" comment="irssi-devel-1.0.5-14.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715722" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15722</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15722" source="CVE"/>
    <description>
    In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15722.html">CVE-2017-15722</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15722">SUSE bug 1064540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15722">SUSE bug 1064540</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165996" comment="irssi-1.0.5-14.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165997" comment="irssi-devel-1.0.5-14.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715723" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15723</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15723" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15723" source="CVE"/>
    <description>
    In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15723.html">CVE-2017-15723</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15723">SUSE bug 1064540</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15723">SUSE bug 1064540</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165996" comment="irssi-1.0.5-14.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165997" comment="irssi-devel-1.0.5-14.14.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15804</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15804" source="CVE"/>
    <description>
    The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15804.html">CVE-2017-15804</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15804">SUSE bug 1064580</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15804">SUSE bug 1064580</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169693" comment="glibc-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169694" comment="glibc-devel-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169695" comment="glibc-devel-static-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152567" comment="glibc-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169696" comment="glibc-extra-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169697" comment="glibc-html-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152569" comment="glibc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169698" comment="glibc-i18ndata-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152570" comment="glibc-i18ndata is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169699" comment="glibc-info-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169700" comment="glibc-locale-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169701" comment="glibc-obsolete-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152571" comment="glibc-obsolete is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169702" comment="glibc-profile-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152572" comment="glibc-profile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169703" comment="glibc-testsuite-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152574" comment="glibc-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169704" comment="glibc-utils-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152575" comment="glibc-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169705" comment="glibc-utils-32bit-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152576" comment="glibc-utils-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169706" comment="nscd-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715864" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15864</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15864" source="CVE"/>
    <description>
    In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15864.html">CVE-2017-15864</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15864">SUSE bug 1068677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15864">SUSE bug 1068677</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167074" comment="otrs-3.3.20-5.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154272" comment="otrs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167075" comment="otrs-doc-3.3.20-5.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154273" comment="otrs-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167076" comment="otrs-itsm-3.3.14-5.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154274" comment="otrs-itsm is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15896</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15896" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15896" source="CVE"/>
    <description>
    Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15896.html">CVE-2017-15896</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15896">SUSE bug 1071905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15896">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15896">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15896">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15896">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15896">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15896">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15896">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15896">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15896">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15896">SUSE bug 1072322</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169246" comment="nodejs4-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154256" comment="nodejs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169247" comment="nodejs4-devel-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154257" comment="nodejs4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169248" comment="nodejs4-docs-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154258" comment="nodejs4-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169249" comment="npm4-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154259" comment="npm4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715906" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15906</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15906" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15906" source="CVE"/>
    <description>
    The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15906.html">CVE-2017-15906</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1064285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1074115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1074115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1079488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1079488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1079488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1079488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1079488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1079488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1079488</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1064285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1064285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1064285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1064285</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1074115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1074115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1074115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1074115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1074115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1074115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1074115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1074115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1074115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1090163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15906">SUSE bug 1065000</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168064" comment="openssh-7.2p2-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152110" comment="openssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168065" comment="openssh-askpass-gnome-7.2p2-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153167" comment="openssh-askpass-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168066" comment="openssh-cavs-7.2p2-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153168" comment="openssh-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168067" comment="openssh-fips-7.2p2-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153169" comment="openssh-fips is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168068" comment="openssh-helpers-7.2p2-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152111" comment="openssh-helpers is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15923</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15923" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15923" source="CVE"/>
    <description>
    Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service (crash) via vectors related to parsing of IRC color formatting codes.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15923.html">CVE-2017-15923</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15923">SUSE bug 1068097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15923">SUSE bug 1068097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15923">SUSE bug 1068097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15923">SUSE bug 1068097</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15923">SUSE bug 1068097</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167163" comment="konversation-1.6.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152510" comment="konversation is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167164" comment="konversation-lang-1.6.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152511" comment="konversation-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201715930" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-15930</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-15930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15930" source="CVE"/>
    <description>
    In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs while transferring JPEG scanlines, related to a PixelPacket pointer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-15930.html">CVE-2017-15930</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15930">SUSE bug 1066003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15930">SUSE bug 1066003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15930">SUSE bug 1066003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15930">SUSE bug 1066003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15930">SUSE bug 1066003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-15930">SUSE bug 1066003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166943" comment="GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166944" comment="GraphicsMagick-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166945" comment="libGraphicsMagick++-Q16-12-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166946" comment="libGraphicsMagick++-devel-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166947" comment="libGraphicsMagick-Q16-3-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166948" comment="libGraphicsMagick3-config-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166949" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166950" comment="perl-GraphicsMagick-1.3.25-11.39.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716232" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16232</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16232" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16232.html">CVE-2017-16232</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16232">SUSE bug 1069213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16232">SUSE bug 1069213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16232">SUSE bug 1069213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16232">SUSE bug 1069213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16232">SUSE bug 1069213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16232">SUSE bug 1069213</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169689" comment="libtiff-devel-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169670" comment="libtiff-devel-32bit-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169690" comment="libtiff5-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169691" comment="libtiff5-32bit-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169692" comment="tiff-4.0.9-17.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716528" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16528</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16528" source="CVE"/>
    <description>
    sound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16528.html">CVE-2017-16528</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16528">SUSE bug 1066629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16528">SUSE bug 1066629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16528">SUSE bug 1066629</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16528">SUSE bug 1066629</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716536" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16536</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16536" source="CVE"/>
    <description>
    The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16536.html">CVE-2017-16536</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16536">SUSE bug 1066606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16536">SUSE bug 1066606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16536">SUSE bug 1066606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16536">SUSE bug 1066606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16536">SUSE bug 1066606</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716537" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16537</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16537" source="CVE"/>
    <description>
    The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16537.html">CVE-2017-16537</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16537">SUSE bug 1066573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16537">SUSE bug 1066573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16537">SUSE bug 1066573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16537">SUSE bug 1066573</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16545</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16545" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16545" source="CVE"/>
    <description>
    The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service (ImportIndexQuantumType invalid write and application crash) or possibly have unspecified other impact via a malformed WPG image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16545.html">CVE-2017-16545</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16545">SUSE bug 1067184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16545">SUSE bug 1067184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16545">SUSE bug 1067184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16545">SUSE bug 1067184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16545">SUSE bug 1067184</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167878" comment="GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167879" comment="GraphicsMagick-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167880" comment="libGraphicsMagick++-Q16-12-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167881" comment="libGraphicsMagick++-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167882" comment="libGraphicsMagick-Q16-3-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167883" comment="libGraphicsMagick3-config-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167884" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167885" comment="perl-GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16546</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16546" source="CVE"/>
    <description>
    The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16546.html">CVE-2017-16546</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16546">SUSE bug 1067181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16546">SUSE bug 1067181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16546">SUSE bug 1067181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16546">SUSE bug 1067181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16546">SUSE bug 1067181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16546">SUSE bug 1067181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16546">SUSE bug 1067181</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167878" comment="GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167879" comment="GraphicsMagick-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167880" comment="libGraphicsMagick++-Q16-12-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167881" comment="libGraphicsMagick++-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167882" comment="libGraphicsMagick-Q16-3-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167883" comment="libGraphicsMagick3-config-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167884" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167885" comment="perl-GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16547</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16547" source="CVE"/>
    <description>
    The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service (negative strncpy and application crash) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16547.html">CVE-2017-16547</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16547">SUSE bug 1067177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16547">SUSE bug 1067177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16547">SUSE bug 1067177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16547">SUSE bug 1067177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16547">SUSE bug 1067177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16547">SUSE bug 1067177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16547">SUSE bug 1067177</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16548</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16548" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548" source="CVE"/>
    <description>
    The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data to the daemon.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16548.html">CVE-2017-16548</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16548">SUSE bug 1066644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16548">SUSE bug 1066644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16548">SUSE bug 1066644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16548">SUSE bug 1066644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16548">SUSE bug 1066644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16548">SUSE bug 1066644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16548">SUSE bug 1066644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169741" comment="rsync-3.1.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151567" comment="rsync is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16641</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16641" source="CVE"/>
    <description>
    lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save request to settings.php.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16641.html">CVE-2017-16641</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16641">SUSE bug 1067166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16641">SUSE bug 1067166</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16641">SUSE bug 1067166</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167009" comment="cacti-1.1.28-16.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167010" comment="cacti-doc-1.1.28-16.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167011" comment="cacti-spine-1.1.28-7.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716642" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16642</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16642" source="CVE"/>
    <description>
    In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16642.html">CVE-2017-16642</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16642">SUSE bug 1067441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16642">SUSE bug 1048112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16642">SUSE bug 1067441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16642">SUSE bug 1067441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16642">SUSE bug 1067441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16642">SUSE bug 1067441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16642">SUSE bug 1067441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16642">SUSE bug 1067441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16642">SUSE bug 1076391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168546" comment="apache2-mod_php5-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168115" comment="apache2-mod_php7-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168547" comment="php5-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168548" comment="php5-bcmath-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168549" comment="php5-bz2-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168550" comment="php5-calendar-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168551" comment="php5-ctype-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168552" comment="php5-curl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168553" comment="php5-dba-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168554" comment="php5-devel-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168555" comment="php5-dom-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168556" comment="php5-enchant-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168557" comment="php5-exif-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168558" comment="php5-fastcgi-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168559" comment="php5-fileinfo-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168560" comment="php5-firebird-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168561" comment="php5-fpm-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168562" comment="php5-ftp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168563" comment="php5-gd-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168564" comment="php5-gettext-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168565" comment="php5-gmp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168566" comment="php5-iconv-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168567" comment="php5-imap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168568" comment="php5-intl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168569" comment="php5-json-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168570" comment="php5-ldap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168571" comment="php5-mbstring-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168572" comment="php5-mcrypt-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168573" comment="php5-mssql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168574" comment="php5-mysql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168575" comment="php5-odbc-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168576" comment="php5-opcache-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168577" comment="php5-openssl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168578" comment="php5-pcntl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168579" comment="php5-pdo-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168580" comment="php5-pear-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168581" comment="php5-pgsql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168582" comment="php5-phar-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168583" comment="php5-posix-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168584" comment="php5-pspell-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168585" comment="php5-readline-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168586" comment="php5-shmop-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168587" comment="php5-snmp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168588" comment="php5-soap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168589" comment="php5-sockets-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168590" comment="php5-sqlite-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168591" comment="php5-suhosin-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168592" comment="php5-sysvmsg-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168593" comment="php5-sysvsem-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168594" comment="php5-sysvshm-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168595" comment="php5-tidy-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168596" comment="php5-tokenizer-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168597" comment="php5-wddx-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168598" comment="php5-xmlreader-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168599" comment="php5-xmlrpc-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168600" comment="php5-xmlwriter-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168601" comment="php5-xsl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168602" comment="php5-zip-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168603" comment="php5-zlib-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168116" comment="php7-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168117" comment="php7-bcmath-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168118" comment="php7-bz2-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168119" comment="php7-calendar-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168120" comment="php7-ctype-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168121" comment="php7-curl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168122" comment="php7-dba-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168123" comment="php7-devel-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168124" comment="php7-dom-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168125" comment="php7-enchant-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168126" comment="php7-exif-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168127" comment="php7-fastcgi-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168128" comment="php7-fileinfo-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168129" comment="php7-firebird-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168130" comment="php7-fpm-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168131" comment="php7-ftp-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168132" comment="php7-gd-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168133" comment="php7-gettext-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168134" comment="php7-gmp-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168135" comment="php7-iconv-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168136" comment="php7-imap-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168137" comment="php7-intl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168138" comment="php7-json-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168139" comment="php7-ldap-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168140" comment="php7-mbstring-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168141" comment="php7-mcrypt-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168142" comment="php7-mysql-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168143" comment="php7-odbc-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168144" comment="php7-opcache-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168145" comment="php7-openssl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168146" comment="php7-pcntl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168147" comment="php7-pdo-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168148" comment="php7-pear-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168149" comment="php7-pear-Archive_Tar-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168150" comment="php7-pgsql-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168151" comment="php7-phar-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168152" comment="php7-posix-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168153" comment="php7-pspell-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168154" comment="php7-readline-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168155" comment="php7-shmop-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168156" comment="php7-snmp-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168157" comment="php7-soap-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168158" comment="php7-sockets-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168159" comment="php7-sqlite-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168160" comment="php7-sysvmsg-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168161" comment="php7-sysvsem-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168162" comment="php7-sysvshm-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168163" comment="php7-tidy-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168164" comment="php7-tokenizer-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168165" comment="php7-wddx-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168166" comment="php7-xmlreader-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168167" comment="php7-xmlrpc-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168168" comment="php7-xmlwriter-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168169" comment="php7-xsl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168170" comment="php7-zip-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168171" comment="php7-zlib-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716646" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16646</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16646" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16646" source="CVE"/>
    <description>
    drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16646.html">CVE-2017-16646</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16646">SUSE bug 1067105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16646">SUSE bug 1067105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16646">SUSE bug 1067105</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16646">SUSE bug 1067105</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716660" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16660</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16660" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16660" source="CVE"/>
    <description>
    Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php request containing PHP code in a Client-ip header.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16660.html">CVE-2017-16660</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16660">SUSE bug 1067164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16660">SUSE bug 1067164</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16660">SUSE bug 1067164</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167009" comment="cacti-1.1.28-16.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167010" comment="cacti-doc-1.1.28-16.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167011" comment="cacti-spine-1.1.28-7.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716661" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16661</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16661" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16661" source="CVE"/>
    <description>
    Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by filename=passwd (with a Log Path under /etc) to read /etc/passwd.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16661.html">CVE-2017-16661</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16661">SUSE bug 1067163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16661">SUSE bug 1067163</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16661">SUSE bug 1067163</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167009" comment="cacti-1.1.28-16.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167010" comment="cacti-doc-1.1.28-16.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167011" comment="cacti-spine-1.1.28-7.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16664</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16664" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16664" source="CVE"/>
    <description>
    Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before 5.0.24, 4 before 4.0.26, and 3.3 before 3.3.20. In the agent interface, an authenticated remote attacker can execute shell commands as the webserver user via URL manipulation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16664.html">CVE-2017-16664</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16664">SUSE bug 1069391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16664">SUSE bug 1069391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167074" comment="otrs-3.3.20-5.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154272" comment="otrs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167075" comment="otrs-doc-3.3.20-5.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154273" comment="otrs-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167076" comment="otrs-itsm-3.3.14-5.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154274" comment="otrs-itsm is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16667</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16667" source="CVE"/>
    <description>
    backintime (aka Back in Time) before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify-send' command, leading to some parts of file paths being executed as shell commands within an os.system call in qt4/plugins/notifyplugin.py. This could allow an attacker to craft an unreadable file with a specific name to run arbitrary shell commands.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16667.html">CVE-2017-16667</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16667">SUSE bug 1067342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16667">SUSE bug 1067342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16667">SUSE bug 1067342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16667">SUSE bug 1067342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16667">SUSE bug 1067342</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16667">SUSE bug 1067342</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167175" comment="backintime-1.1.20-3.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154848" comment="backintime is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167176" comment="backintime-lang-1.1.20-3.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154850" comment="backintime-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167177" comment="backintime-qt4-1.1.20-3.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154852" comment="backintime-qt4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16669</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16669" source="CVE"/>
    <description>
    coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixel_cache.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16669.html">CVE-2017-16669</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16669">SUSE bug 1067409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16669">SUSE bug 1067409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16669">SUSE bug 1067409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16669">SUSE bug 1067409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16669">SUSE bug 1067409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16669">SUSE bug 1067409</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16669">SUSE bug 1072898</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167878" comment="GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167879" comment="GraphicsMagick-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168875" comment="ImageMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168876" comment="ImageMagick-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168877" comment="ImageMagick-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168878" comment="ImageMagick-doc-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168879" comment="ImageMagick-extra-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167880" comment="libGraphicsMagick++-Q16-12-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167881" comment="libGraphicsMagick++-devel-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167882" comment="libGraphicsMagick-Q16-3-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167883" comment="libGraphicsMagick3-config-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167884" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168880" comment="libMagick++-6_Q16-3-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168881" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168882" comment="libMagick++-devel-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168883" comment="libMagick++-devel-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168884" comment="libMagickCore-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168885" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168886" comment="libMagickWand-6_Q16-1-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168887" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167885" comment="perl-GraphicsMagick-1.3.25-11.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168888" comment="perl-PerlMagick-6.8.8.1-30.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716785" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16785</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16785" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16785" source="CVE"/>
    <description>
    Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16785.html">CVE-2017-16785</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16785">SUSE bug 1068028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16785">SUSE bug 1068028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16785">SUSE bug 1068028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16785">SUSE bug 1068028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16785">SUSE bug 1068028</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16785">SUSE bug 1068028</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167009" comment="cacti-1.1.28-16.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152167" comment="cacti is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167010" comment="cacti-doc-1.1.28-16.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152168" comment="cacti-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167011" comment="cacti-spine-1.1.28-7.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153174" comment="cacti-spine is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16837" source="CVE"/>
    <description>
    Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking these function pointers.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16837.html">CVE-2017-16837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16837">SUSE bug 1068390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16837">SUSE bug 889339</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16837">SUSE bug 1068390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16837">SUSE bug 1068390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16837">SUSE bug 1068390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16837">SUSE bug 1068390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16837">SUSE bug 1068390</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16837">SUSE bug 1068390</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167178" comment="tboot-20170711_1.9.6-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167179" comment="tboot is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716852" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16852</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16852" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16852" source="CVE"/>
    <description>
    shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka SSPCPP-763.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16852.html">CVE-2017-16852</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16852">SUSE bug 1068689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16852">SUSE bug 1068689</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16852">SUSE bug 1068689</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167781" comment="libshibsp-lite6-2.5.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167894" comment="libshibsp-lite6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167782" comment="libshibsp6-2.5.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167895" comment="libshibsp6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167783" comment="shibboleth-sp-2.5.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167896" comment="shibboleth-sp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167787" comment="shibboleth-sp-devel-2.5.5-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167897" comment="shibboleth-sp-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16853</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16853" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16853" source="CVE"/>
    <description>
    The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka CPPOST-105.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16853.html">CVE-2017-16853</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16853">SUSE bug 1068685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16853">SUSE bug 1068685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16853">SUSE bug 1068685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16853">SUSE bug 1068685</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167976" comment="libsaml-devel-2.5.5-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168172" comment="libsaml-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167965" comment="libsaml8-2.5.5-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168173" comment="libsaml8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167966" comment="opensaml-2.5.5-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168174" comment="opensaml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167967" comment="opensaml-bin-2.5.5-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168175" comment="opensaml-bin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167968" comment="opensaml-schemas-2.5.5-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168176" comment="opensaml-schemas is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16938</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16938" source="CVE"/>
    <description>
    A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16938.html">CVE-2017-16938</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16938">SUSE bug 1069774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16938">SUSE bug 1069774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16938">SUSE bug 1069774</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16938">SUSE bug 1069774</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167630" comment="optipng-0.7.5-9.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153607" comment="optipng is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716939" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16939</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16939" source="CVE"/>
    <description>
    The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16939.html">CVE-2017-16939</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16939">SUSE bug 1069702</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716943" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16943</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16943" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16943" source="CVE"/>
    <description>
    The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via vectors involving BDAT commands.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16943.html">CVE-2017-16943</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16943">SUSE bug 1069857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16943">SUSE bug 1069857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16943">SUSE bug 1069857</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16943">SUSE bug 1069857</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167898" comment="exim-4.86.2-10.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153580" comment="exim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167899" comment="eximon-4.86.2-10.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153581" comment="eximon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167900" comment="eximstats-html-4.86.2-10.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153582" comment="eximstats-html is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16994</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16994" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16994" source="CVE"/>
    <description>
    The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16994.html">CVE-2017-16994</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16994">SUSE bug 1069996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16994">SUSE bug 1069996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16994">SUSE bug 1069996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16994">SUSE bug 1069996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16994">SUSE bug 1069996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16994">SUSE bug 1069996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16994">SUSE bug 1069996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16994">SUSE bug 1069996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16994">SUSE bug 1069996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16994">SUSE bug 1069996</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16994">SUSE bug 1069996</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201716997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-16997</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-16997" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16997" source="CVE"/>
    <description>
    elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-16997.html">CVE-2017-16997</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16997">SUSE bug 1073231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16997">SUSE bug 1073231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16997">SUSE bug 1073231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16997">SUSE bug 1073231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16997">SUSE bug 1073231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16997">SUSE bug 1073231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16997">SUSE bug 1073231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16997">SUSE bug 1073231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-16997">SUSE bug 1073231</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169693" comment="glibc-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169694" comment="glibc-devel-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169695" comment="glibc-devel-static-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152567" comment="glibc-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169696" comment="glibc-extra-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169697" comment="glibc-html-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152569" comment="glibc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169698" comment="glibc-i18ndata-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152570" comment="glibc-i18ndata is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169699" comment="glibc-info-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169700" comment="glibc-locale-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169701" comment="glibc-obsolete-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152571" comment="glibc-obsolete is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169702" comment="glibc-profile-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152572" comment="glibc-profile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169703" comment="glibc-testsuite-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152574" comment="glibc-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169704" comment="glibc-utils-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152575" comment="glibc-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169705" comment="glibc-utils-32bit-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152576" comment="glibc-utils-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169706" comment="nscd-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17083</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17083" source="CVE"/>
    <description>
    In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17083.html">CVE-2017-17083</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17083">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17083">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17083">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17083">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17083">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17083">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17083">SUSE bug 1070727</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167635" comment="wireshark-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167636" comment="wireshark-devel-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167637" comment="wireshark-ui-gtk-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167638" comment="wireshark-ui-qt-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717084" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17084</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17084" source="CVE"/>
    <description>
    In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17084.html">CVE-2017-17084</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17084">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17084">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17084">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17084">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17084">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17084">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17084">SUSE bug 1070727</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167635" comment="wireshark-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167636" comment="wireshark-devel-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167637" comment="wireshark-ui-gtk-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167638" comment="wireshark-ui-qt-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17085</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17085" source="CVE"/>
    <description>
    In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17085.html">CVE-2017-17085</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17085">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17085">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17085">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17085">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17085">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17085">SUSE bug 1070727</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17085">SUSE bug 1070727</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167635" comment="wireshark-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167636" comment="wireshark-devel-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167637" comment="wireshark-ui-gtk-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167638" comment="wireshark-ui-qt-2.2.11-14.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17433</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17433" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433" source="CVE"/>
    <description>
    The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds with certain file metadata updates before checking for a filename in the daemon_filter_list data structure, which allows remote attackers to bypass intended access restrictions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17433.html">CVE-2017-17433</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17433">SUSE bug 1071459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17433">SUSE bug 1071459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17433">SUSE bug 1071459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17433">SUSE bug 1071459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17433">SUSE bug 1071459</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17433">SUSE bug 1071459</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169741" comment="rsync-3.1.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151567" comment="rsync is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17434</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17434" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434" source="CVE"/>
    <description>
    The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_filter_list data structure (in the recv_files function in receiver.c) and also does not apply the sanitize_paths protection mechanism to pathnames found in "xname follows" strings (in the read_ndx_and_attrs function in rsync.c), which allows remote attackers to bypass intended access restrictions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17434.html">CVE-2017-17434</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17434">SUSE bug 1071460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17434">SUSE bug 1071460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17434">SUSE bug 1071460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17434">SUSE bug 1071460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17434">SUSE bug 1071460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17434">SUSE bug 1071460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169741" comment="rsync-3.1.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151567" comment="rsync is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17439</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17439" source="CVE"/>
    <description>
    In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to the _kdc_as_rep function in kdc/kerberos5.c and the der_length_visible_string function in lib/asn1/der_length.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17439.html">CVE-2017-17439</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17439">SUSE bug 1071675</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17439">SUSE bug 1071675</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168271" comment="libheimdal-7.4.0-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162039" comment="libheimdal is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168272" comment="libheimdal-devel-7.4.0-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162041" comment="libheimdal-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17448</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17448" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17448" source="CVE"/>
    <description>
    net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17448.html">CVE-2017-17448</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17448">SUSE bug 1071693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17448">SUSE bug 1071693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17448">SUSE bug 1071693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17448">SUSE bug 1071693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17448">SUSE bug 1071693</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17448">SUSE bug 1071693</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17449</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17449" source="CVE"/>
    <description>
    The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17449.html">CVE-2017-17449</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17449">SUSE bug 1071694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17449">SUSE bug 1071694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17449">SUSE bug 1071694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17449">SUSE bug 1071694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17449">SUSE bug 1071694</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17449">SUSE bug 1071694</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17450</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17450" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17450" source="CVE"/>
    <description>
    net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17450.html">CVE-2017-17450</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1074033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1074033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1074033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1074033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1074033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1074033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1074033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1074033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1074033</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17450">SUSE bug 1071695</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17458</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17458" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17458" source="CVE"/>
    <description>
    In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17458.html">CVE-2017-17458</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17458">SUSE bug 1071715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17458">SUSE bug 1071715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17458">SUSE bug 1071715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17458">SUSE bug 1071715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17458">SUSE bug 1071715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17458">SUSE bug 1071715</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168679" comment="mercurial-3.8.3-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153633" comment="mercurial is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168680" comment="mercurial-lang-3.8.3-2.11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153634" comment="mercurial-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17459</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17459" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17459" source="CVE"/>
    <description>
    http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-14176, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17459.html">CVE-2017-17459</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17459">SUSE bug 1071709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17459">SUSE bug 1071709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17459">SUSE bug 1071709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168273" comment="fossil-2.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168274" comment="fossil is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17498</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17498" source="CVE"/>
    <description>
    WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (bit_stream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17498.html">CVE-2017-17498</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17498">SUSE bug 1072103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17498">SUSE bug 1072103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17498">SUSE bug 1072103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17498">SUSE bug 1072103</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17498">SUSE bug 1072103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168669" comment="GraphicsMagick-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168670" comment="GraphicsMagick-devel-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168671" comment="libGraphicsMagick++-Q16-12-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168672" comment="libGraphicsMagick++-devel-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168673" comment="libGraphicsMagick-Q16-3-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168674" comment="libGraphicsMagick3-config-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168675" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168676" comment="perl-GraphicsMagick-1.3.25-11.52.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717531" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17531</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17531" source="CVE"/>
    <description>
    gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17531.html">CVE-2017-17531</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17531">SUSE bug 1073197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17531">SUSE bug 1073197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17531">SUSE bug 1073197</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17531">SUSE bug 1073197</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168934" comment="global-6.5.1-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168935" comment="global is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717680" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17680</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17680" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17680" source="CVE"/>
    <description>
    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17680.html">CVE-2017-17680</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1074122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17680">SUSE bug 1072902</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169709" comment="ImageMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169710" comment="ImageMagick-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169711" comment="ImageMagick-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169712" comment="ImageMagick-doc-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169713" comment="ImageMagick-extra-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169714" comment="libMagick++-6_Q16-3-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169715" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169716" comment="libMagick++-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169717" comment="libMagick++-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169718" comment="libMagickCore-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169719" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169720" comment="libMagickWand-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169721" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169722" comment="perl-PerlMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17805</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17805" source="CVE"/>
    <description>
    The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17805.html">CVE-2017-17805</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17805">SUSE bug 1073792</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169190" comment="kernel-debug-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169191" comment="kernel-debug-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169192" comment="kernel-debug-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169193" comment="kernel-default-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169194" comment="kernel-default-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169195" comment="kernel-default-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169196" comment="kernel-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169197" comment="kernel-docs-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169198" comment="kernel-docs-html-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169199" comment="kernel-docs-pdf-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169200" comment="kernel-macros-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169201" comment="kernel-obs-build-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169202" comment="kernel-obs-qa-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169203" comment="kernel-source-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169204" comment="kernel-source-vanilla-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169205" comment="kernel-syms-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169206" comment="kernel-vanilla-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169207" comment="kernel-vanilla-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169208" comment="kernel-vanilla-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717806" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17806</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17806" source="CVE"/>
    <description>
    The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17806.html">CVE-2017-17806</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17806">SUSE bug 1073874</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169190" comment="kernel-debug-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169191" comment="kernel-debug-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169192" comment="kernel-debug-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169193" comment="kernel-default-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169194" comment="kernel-default-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169195" comment="kernel-default-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169196" comment="kernel-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169197" comment="kernel-docs-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169198" comment="kernel-docs-html-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169199" comment="kernel-docs-pdf-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169200" comment="kernel-macros-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169201" comment="kernel-obs-build-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169202" comment="kernel-obs-qa-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169203" comment="kernel-source-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169204" comment="kernel-source-vanilla-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169205" comment="kernel-syms-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169206" comment="kernel-vanilla-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169207" comment="kernel-vanilla-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169208" comment="kernel-vanilla-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717858" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17858</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17858" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17858" source="CVE"/>
    <description>
    Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to potentially execute arbitrary code via a crafted PDF file, because xref subsection object numbers are unrestricted.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17858.html">CVE-2017-17858</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17858">SUSE bug 1077161</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17858">SUSE bug 1077161</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170232" comment="mupdf-1.12.0-13.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170233" comment="mupdf-devel-static-1.12.0-13.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17866</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17866" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17866" source="CVE"/>
    <description>
    pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17866.html">CVE-2017-17866</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17866">SUSE bug 1074116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17866">SUSE bug 1074116</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17866">SUSE bug 1074116</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170232" comment="mupdf-1.12.0-13.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170233" comment="mupdf-devel-static-1.12.0-13.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717881" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17881</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17881" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17881" source="CVE"/>
    <description>
    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17881.html">CVE-2017-17881</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17881">SUSE bug 1074123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17881">SUSE bug 1074123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17881">SUSE bug 1074123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17881">SUSE bug 1074123</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17881">SUSE bug 1074123</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717882" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17882</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17882" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17882" source="CVE"/>
    <description>
    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17882.html">CVE-2017-17882</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17882">SUSE bug 1074122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17882">SUSE bug 1074122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17882">SUSE bug 1074122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17882">SUSE bug 1074122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17882">SUSE bug 1074122</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169709" comment="ImageMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169710" comment="ImageMagick-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169711" comment="ImageMagick-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169712" comment="ImageMagick-doc-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169713" comment="ImageMagick-extra-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169714" comment="libMagick++-6_Q16-3-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169715" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169716" comment="libMagick++-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169717" comment="libMagick++-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169718" comment="libMagickCore-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169719" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169720" comment="libMagickWand-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169721" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169722" comment="perl-PerlMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201717997" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-17997</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-17997" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17997" source="CVE"/>
    <description>
    In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-17997.html">CVE-2017-17997</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17997">SUSE bug 1077080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17997">SUSE bug 1077080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17997">SUSE bug 1077080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17997">SUSE bug 1077080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17997">SUSE bug 1077080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17997">SUSE bug 1077080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17997">SUSE bug 1077080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17997">SUSE bug 1077080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17997">SUSE bug 1077080</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-17997">SUSE bug 1077080</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169742" comment="wireshark-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169743" comment="wireshark-devel-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169744" comment="wireshark-ui-gtk-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169745" comment="wireshark-ui-qt-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:201718022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-18022</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-18022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18022" source="CVE"/>
    <description>
    In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-18022.html">CVE-2017-18022</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-18022">SUSE bug 1074975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-18022">SUSE bug 1074969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-18022">SUSE bug 1074975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-18022">SUSE bug 1074975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-18022">SUSE bug 1074975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-18022">SUSE bug 1074975</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169723" comment="GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169724" comment="GraphicsMagick-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169725" comment="libGraphicsMagick++-Q16-12-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169726" comment="libGraphicsMagick++-devel-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169727" comment="libGraphicsMagick-Q16-3-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169728" comment="libGraphicsMagick3-config-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169729" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169730" comment="perl-GraphicsMagick-1.3.25-11.60.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172295" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2295</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2295" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2295" source="CVE"/>
    <description>
    Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YAML deserialization in an unsafe manner, which would lead to remote code execution. This change constrains the format of data on the wire to PSON or safely decoded YAML.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2295.html">CVE-2017-2295</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2295">SUSE bug 1040151</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159435" comment="ruby2.1-rubygem-puppet-3.8.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159436" comment="ruby2.1-rubygem-puppet is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159437" comment="ruby2.1-rubygem-puppet-doc-3.8.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159438" comment="ruby2.1-rubygem-puppet-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159439" comment="ruby2.1-rubygem-puppet-testsuite-3.8.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159440" comment="ruby2.1-rubygem-puppet-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159441" comment="rubygem-puppet-3.8.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159442" comment="rubygem-puppet is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159443" comment="rubygem-puppet-emacs-3.8.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159444" comment="rubygem-puppet-emacs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159445" comment="rubygem-puppet-master-3.8.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159446" comment="rubygem-puppet-master is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159447" comment="rubygem-puppet-master-unicorn-3.8.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159448" comment="rubygem-puppet-master-unicorn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159449" comment="rubygem-puppet-vim-3.8.7-17.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159450" comment="rubygem-puppet-vim is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2350</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2350" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2350" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2350.html">CVE-2017-2350</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2350">SUSE bug 1024749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2350">SUSE bug 1024749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2350">SUSE bug 1024749</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2350">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2354</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2354" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2354.html">CVE-2017-2354</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2354">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2355</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2355" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2355.html">CVE-2017-2355</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2355">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2356</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2356" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2356.html">CVE-2017-2356</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2356">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2362</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2362" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2362" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2362.html">CVE-2017-2362</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2362">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2363</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2363" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2363" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2363.html">CVE-2017-2363</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2363">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2364</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2364" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2364" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2364.html">CVE-2017-2364</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2364">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2365</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2365" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2365.html">CVE-2017-2365</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2365">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172366" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2366</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2366" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2366" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2366.html">CVE-2017-2366</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2366">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172369" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2369</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2369" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2369" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2369.html">CVE-2017-2369</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2369">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172371" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2371</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2371" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2371" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2371.html">CVE-2017-2371</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2371">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2373</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2373" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2373.html">CVE-2017-2373</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2373">SUSE bug 1024749</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172496" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2496</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2496" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2496" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2496.html">CVE-2017-2496</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2496">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2510</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2510" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with pageshow events.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2510.html">CVE-2017-2510</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2510">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2538" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2538.html">CVE-2017-2538</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2538">SUSE bug 1045460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2538">SUSE bug 1045460</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2538">SUSE bug 1045460</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2539</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2539" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2539.html">CVE-2017-2539</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2539">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172581" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2581</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2581" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2581" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2581.html">CVE-2017-2581</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2581">SUSE bug 1024287</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157557" comment="libnetpbm-devel-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153784" comment="libnetpbm-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157558" comment="libnetpbm11-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153785" comment="libnetpbm11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157559" comment="libnetpbm11-32bit-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153786" comment="libnetpbm11-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157560" comment="netpbm-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153787" comment="netpbm is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2583</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2583" source="CVE"/>
    <description>
    The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a "MOV SS, NULL selector" instruction, which allows guest OS users to cause a denial of service (guest OS crash) or gain guest OS privileges via a crafted application.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2583.html">CVE-2017-2583</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2583">SUSE bug 1020602</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148375" comment="kernel-debug-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148376" comment="kernel-debug-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148377" comment="kernel-debug-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148378" comment="kernel-default-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148379" comment="kernel-default-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148380" comment="kernel-default-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148381" comment="kernel-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148382" comment="kernel-docs-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148383" comment="kernel-docs-html-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148384" comment="kernel-docs-pdf-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148385" comment="kernel-macros-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148386" comment="kernel-obs-build-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148387" comment="kernel-obs-qa-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148388" comment="kernel-source-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148389" comment="kernel-source-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148390" comment="kernel-syms-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148391" comment="kernel-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148392" comment="kernel-vanilla-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148393" comment="kernel-vanilla-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172584" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2584</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2584" source="CVE"/>
    <description>
    arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free) via a crafted application that leverages instruction emulation for fxrstor, fxsave, sgdt, and sidt.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2584.html">CVE-2017-2584</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2584">SUSE bug 1019851</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148375" comment="kernel-debug-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148376" comment="kernel-debug-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148377" comment="kernel-debug-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148378" comment="kernel-default-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148379" comment="kernel-default-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148380" comment="kernel-default-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148381" comment="kernel-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148382" comment="kernel-docs-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148383" comment="kernel-docs-html-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148384" comment="kernel-docs-pdf-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148385" comment="kernel-macros-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148386" comment="kernel-obs-build-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148387" comment="kernel-obs-qa-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148388" comment="kernel-source-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148389" comment="kernel-source-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148390" comment="kernel-syms-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148391" comment="kernel-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148392" comment="kernel-vanilla-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148393" comment="kernel-vanilla-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2586</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2586" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2586" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2586.html">CVE-2017-2586</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2586">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2586">SUSE bug 1024292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2586">SUSE bug 1024292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2586">SUSE bug 1024292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2586">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2586">SUSE bug 1024292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2586">SUSE bug 1024292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2586">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2586">SUSE bug 1024292</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2586">SUSE bug 1024292</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157557" comment="libnetpbm-devel-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153784" comment="libnetpbm-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157558" comment="libnetpbm11-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153785" comment="libnetpbm11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157559" comment="libnetpbm11-32bit-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153786" comment="libnetpbm11-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157560" comment="netpbm-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153787" comment="netpbm is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2587</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2587" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2587.html">CVE-2017-2587</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2587">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2587">SUSE bug 1024294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2587">SUSE bug 1024294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2587">SUSE bug 1024294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2587">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2587">SUSE bug 1024294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2587">SUSE bug 1024294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2587">SUSE bug 1024287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2587">SUSE bug 1024294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2587">SUSE bug 1024294</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157557" comment="libnetpbm-devel-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153784" comment="libnetpbm-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157558" comment="libnetpbm11-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153785" comment="libnetpbm11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157559" comment="libnetpbm11-32bit-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153786" comment="libnetpbm11-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157560" comment="netpbm-10.66.3-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153787" comment="netpbm is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2596</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2596" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2596" source="CVE"/>
    <description>
    The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service (host OS memory consumption) by leveraging the mishandling of page references.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2596.html">CVE-2017-2596</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2596">SUSE bug 1022785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2596">SUSE bug 1022785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2596">SUSE bug 1022785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2596">SUSE bug 1022785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2596">SUSE bug 1022785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2596">SUSE bug 1022785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2596">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2596">SUSE bug 1022785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2596">SUSE bug 1022785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2596">SUSE bug 1022785</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150470" comment="kernel-debug-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150471" comment="kernel-debug-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150472" comment="kernel-debug-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150473" comment="kernel-default-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150474" comment="kernel-default-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150475" comment="kernel-default-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150476" comment="kernel-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150477" comment="kernel-docs-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150478" comment="kernel-docs-html-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150479" comment="kernel-docs-pdf-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150480" comment="kernel-macros-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150481" comment="kernel-obs-build-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150482" comment="kernel-obs-qa-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150483" comment="kernel-source-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150484" comment="kernel-source-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150485" comment="kernel-syms-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150486" comment="kernel-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150487" comment="kernel-vanilla-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150488" comment="kernel-vanilla-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172615" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2615</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2615" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2615.html">CVE-2017-2615</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2615">SUSE bug 1023004</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149477" comment="xen-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149478" comment="xen-devel-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149479" comment="xen-doc-html-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149480" comment="xen-libs-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149481" comment="xen-libs-32bit-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149482" comment="xen-tools-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149483" comment="xen-tools-domU-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2616</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2616" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2616" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2616.html">CVE-2017-2616</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2616">SUSE bug 1023041</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149377" comment="libblkid-devel-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151786" comment="libblkid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149378" comment="libblkid-devel-32bit-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152861" comment="libblkid-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149379" comment="libblkid-devel-static-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152862" comment="libblkid-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149380" comment="libblkid1-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151787" comment="libblkid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149381" comment="libblkid1-32bit-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151788" comment="libblkid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149382" comment="libfdisk-devel-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154254" comment="libfdisk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149383" comment="libfdisk-devel-static-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154255" comment="libfdisk-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149384" comment="libfdisk1-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154114" comment="libfdisk1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149385" comment="libmount-devel-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152863" comment="libmount-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149386" comment="libmount-devel-32bit-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152864" comment="libmount-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149387" comment="libmount-devel-static-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152865" comment="libmount-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149388" comment="libmount1-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151789" comment="libmount1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149389" comment="libmount1-32bit-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151790" comment="libmount1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149390" comment="libsmartcols-devel-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152866" comment="libsmartcols-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149391" comment="libsmartcols-devel-static-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152867" comment="libsmartcols-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149392" comment="libsmartcols1-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151791" comment="libsmartcols1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149393" comment="libuuid-devel-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151792" comment="libuuid-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149394" comment="libuuid-devel-32bit-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152868" comment="libuuid-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149395" comment="libuuid-devel-static-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152869" comment="libuuid-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149396" comment="libuuid1-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151793" comment="libuuid1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149397" comment="libuuid1-32bit-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151794" comment="libuuid1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149398" comment="python-libmount-2.28-10.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152870" comment="python-libmount is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149399" comment="util-linux-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151795" comment="util-linux is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149400" comment="util-linux-lang-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151796" comment="util-linux-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149401" comment="util-linux-systemd-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151797" comment="util-linux-systemd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149402" comment="uuidd-2.28-10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152871" comment="uuidd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172619" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2619</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2619" source="CVE"/>
    <description>
    Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2619.html">CVE-2017-2619</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1036283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2619">SUSE bug 1027147</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150726" comment="ctdb-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150727" comment="ctdb-tests-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150728" comment="libdcerpc-binding0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150729" comment="libdcerpc-binding0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150730" comment="libdcerpc-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150731" comment="libdcerpc-samr-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150732" comment="libdcerpc-samr0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150733" comment="libdcerpc-samr0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150734" comment="libdcerpc0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150735" comment="libdcerpc0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150736" comment="libndr-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150737" comment="libndr-krb5pac-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150738" comment="libndr-krb5pac0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150739" comment="libndr-krb5pac0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150740" comment="libndr-nbt-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150741" comment="libndr-nbt0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150742" comment="libndr-nbt0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150743" comment="libndr-standard-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150744" comment="libndr-standard0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150745" comment="libndr-standard0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150746" comment="libndr0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150747" comment="libndr0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150748" comment="libnetapi-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150749" comment="libnetapi0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150750" comment="libnetapi0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150751" comment="libsamba-credentials-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150752" comment="libsamba-credentials0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150753" comment="libsamba-credentials0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150754" comment="libsamba-errors-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150755" comment="libsamba-errors0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150756" comment="libsamba-errors0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150757" comment="libsamba-hostconfig-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150758" comment="libsamba-hostconfig0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150759" comment="libsamba-hostconfig0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150760" comment="libsamba-passdb-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150761" comment="libsamba-passdb0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150762" comment="libsamba-passdb0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150763" comment="libsamba-policy-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150764" comment="libsamba-policy0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150765" comment="libsamba-policy0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150766" comment="libsamba-util-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150767" comment="libsamba-util0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150768" comment="libsamba-util0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150769" comment="libsamdb-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150770" comment="libsamdb0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150771" comment="libsamdb0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150772" comment="libsmbclient-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150773" comment="libsmbclient0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150774" comment="libsmbclient0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150775" comment="libsmbconf-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150776" comment="libsmbconf0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150777" comment="libsmbconf0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150778" comment="libsmbldap-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150779" comment="libsmbldap0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150780" comment="libsmbldap0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150781" comment="libtevent-util-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150782" comment="libtevent-util0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150783" comment="libtevent-util0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150784" comment="libwbclient-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150785" comment="libwbclient0-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150786" comment="libwbclient0-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150787" comment="samba-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150788" comment="samba-client-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150789" comment="samba-client-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150790" comment="samba-core-devel-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150791" comment="samba-doc-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150792" comment="samba-libs-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150793" comment="samba-libs-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150794" comment="samba-pidl-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152776" comment="samba-pidl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150795" comment="samba-python-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150796" comment="samba-test-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150797" comment="samba-winbind-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150798" comment="samba-winbind-32bit-4.4.2-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172620" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2620</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2620" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2620" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2620.html">CVE-2017-2620</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024834</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2620">SUSE bug 1024972</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149477" comment="xen-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149478" comment="xen-devel-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149479" comment="xen-doc-html-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149480" comment="xen-libs-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149481" comment="xen-libs-32bit-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149482" comment="xen-tools-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149483" comment="xen-tools-domU-4.7.1_06-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172624" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2624</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2624" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2624.html">CVE-2017-2624</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1035283</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2624">SUSE bug 1025029</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157095" comment="xorg-x11-server-7.6_1.18.3-12.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151420" comment="xorg-x11-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157096" comment="xorg-x11-server-extra-7.6_1.18.3-12.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151421" comment="xorg-x11-server-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157097" comment="xorg-x11-server-sdk-7.6_1.18.3-12.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151422" comment="xorg-x11-server-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157098" comment="xorg-x11-server-source-7.6_1.18.3-12.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157107" comment="xorg-x11-server-source is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172625" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2625</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2625" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2625.html">CVE-2017-2625</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 815650</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2625">SUSE bug 1025046</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158078" comment="libXdmcp-1.1.2-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158158" comment="libXdmcp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158079" comment="libXdmcp-devel-1.1.2-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158159" comment="libXdmcp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158080" comment="libXdmcp-devel-32bit-1.1.2-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158160" comment="libXdmcp-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158081" comment="libXdmcp6-1.1.2-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158161" comment="libXdmcp6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158082" comment="libXdmcp6-32bit-1.1.2-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158162" comment="libXdmcp6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172626" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2626</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2626" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2626.html">CVE-2017-2626</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1048274</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2626">SUSE bug 1025068</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158048" comment="libICE-1.0.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158163" comment="libICE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158049" comment="libICE-devel-1.0.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158164" comment="libICE-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158050" comment="libICE-devel-32bit-1.0.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158165" comment="libICE-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158051" comment="libICE6-1.0.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158166" comment="libICE6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158052" comment="libICE6-32bit-1.0.9-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158167" comment="libICE6-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2636</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2636" source="CVE"/>
    <description>
    Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2636.html">CVE-2017-2636</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1028372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2636">SUSE bug 1027565</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150470" comment="kernel-debug-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150471" comment="kernel-debug-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150472" comment="kernel-debug-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150473" comment="kernel-default-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150474" comment="kernel-default-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150475" comment="kernel-default-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150476" comment="kernel-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150477" comment="kernel-docs-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150478" comment="kernel-docs-html-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150479" comment="kernel-docs-pdf-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150480" comment="kernel-macros-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150481" comment="kernel-obs-build-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150482" comment="kernel-obs-qa-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150483" comment="kernel-source-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150484" comment="kernel-source-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150485" comment="kernel-syms-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150486" comment="kernel-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150487" comment="kernel-vanilla-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150488" comment="kernel-vanilla-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2640</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2640" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2640" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2640.html">CVE-2017-2640</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2640">SUSE bug 1028835</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150932" comment="finch-2.12.0-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152147" comment="finch is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150933" comment="finch-devel-2.12.0-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152148" comment="finch-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150934" comment="libpurple-2.12.0-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151335" comment="libpurple is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150935" comment="libpurple-branding-openSUSE-42.2-3.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154289" comment="libpurple-branding-openSUSE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150936" comment="libpurple-branding-upstream-2.12.0-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152149" comment="libpurple-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150937" comment="libpurple-devel-2.12.0-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152150" comment="libpurple-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150938" comment="libpurple-lang-2.12.0-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151336" comment="libpurple-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150412" comment="libpurple-meanwhile-2.10.11-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151337" comment="libpurple-meanwhile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150939" comment="libpurple-plugin-sametime-2.12.0-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154290" comment="libpurple-plugin-sametime is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150940" comment="libpurple-tcl-2.12.0-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151338" comment="libpurple-tcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150941" comment="pidgin-2.12.0-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151339" comment="pidgin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150942" comment="pidgin-branding-openSUSE-42.2-3.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154291" comment="pidgin-branding-openSUSE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150943" comment="pidgin-devel-2.12.0-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152151" comment="pidgin-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2668</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2668" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2668" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2668.html">CVE-2017-2668</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2668">SUSE bug 1069067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2668">SUSE bug 1069067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2668">SUSE bug 1069067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2668">SUSE bug 1069067</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2668">SUSE bug 1069067</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168665" comment="389-ds-1.3.4.5-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168666" comment="389-ds is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168667" comment="389-ds-devel-1.3.4.5-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168668" comment="389-ds-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172669" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2669</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2669" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2669.html">CVE-2017-2669</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2669">SUSE bug 1032248</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158066" comment="dovecot22-2.2.30.2-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153679" comment="dovecot22 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158067" comment="dovecot22-backend-mysql-2.2.30.2-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153680" comment="dovecot22-backend-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158068" comment="dovecot22-backend-pgsql-2.2.30.2-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153681" comment="dovecot22-backend-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158069" comment="dovecot22-backend-sqlite-2.2.30.2-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153682" comment="dovecot22-backend-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158070" comment="dovecot22-devel-2.2.30.2-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153683" comment="dovecot22-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158071" comment="dovecot22-fts-2.2.30.2-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153684" comment="dovecot22-fts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158072" comment="dovecot22-fts-lucene-2.2.30.2-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153685" comment="dovecot22-fts-lucene is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158073" comment="dovecot22-fts-solr-2.2.30.2-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153686" comment="dovecot22-fts-solr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158074" comment="dovecot22-fts-squat-2.2.30.2-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153687" comment="dovecot22-fts-squat is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172671" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2671</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2671" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2671" source="CVE"/>
    <description>
    The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2671.html">CVE-2017-2671</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2671">SUSE bug 1031003</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154884" comment="kernel-debug-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154885" comment="kernel-debug-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154886" comment="kernel-debug-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154887" comment="kernel-default-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154888" comment="kernel-default-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154889" comment="kernel-default-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154890" comment="kernel-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154891" comment="kernel-docs-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154892" comment="kernel-docs-html-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154893" comment="kernel-docs-pdf-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154894" comment="kernel-macros-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154895" comment="kernel-obs-build-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154896" comment="kernel-obs-qa-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154897" comment="kernel-source-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154898" comment="kernel-source-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154899" comment="kernel-syms-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154900" comment="kernel-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154901" comment="kernel-vanilla-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154902" comment="kernel-vanilla-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2784</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2784" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2784" source="CVE"/>
    <description>
    An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2784.html">CVE-2017-2784</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2784">SUSE bug 1029017</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2784">SUSE bug 1029017</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149835" comment="libmbedtls9-1.3.19-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152973" comment="libmbedtls9 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149836" comment="libmbedtls9-32bit-1.3.19-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152974" comment="libmbedtls9-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149837" comment="mbedtls-1.3.19-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152975" comment="mbedtls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149838" comment="mbedtls-devel-1.3.19-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152976" comment="mbedtls-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2810</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2810" source="CVE"/>
    <description>
    An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2810.html">CVE-2017-2810</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2810">SUSE bug 1044329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2810">SUSE bug 1044329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2810">SUSE bug 1044329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2810">SUSE bug 1044329</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157537" comment="python-tablib-0.10.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157578" comment="python-tablib is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2834</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2834" source="CVE"/>
    <description>
    An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2834.html">CVE-2017-2834</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2834">SUSE bug 1050714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2834">SUSE bug 1050714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2834">SUSE bug 1050714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2834">SUSE bug 1050714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2834">SUSE bug 1050714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2834">SUSE bug 1050714</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2834">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162959" comment="freerdp-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162960" comment="freerdp-devel-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151909" comment="freerdp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162961" comment="libfreerdp2-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2835" source="CVE"/>
    <description>
    An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2835.html">CVE-2017-2835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2835">SUSE bug 1050712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2835">SUSE bug 1050712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2835">SUSE bug 1050712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2835">SUSE bug 1050712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2835">SUSE bug 1050712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2835">SUSE bug 1050712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2835">SUSE bug 1050712</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2835">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162959" comment="freerdp-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162960" comment="freerdp-devel-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151909" comment="freerdp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162961" comment="libfreerdp2-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2836" source="CVE"/>
    <description>
    An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2836.html">CVE-2017-2836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2836">SUSE bug 1050699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2836">SUSE bug 1050699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2836">SUSE bug 1050699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2836">SUSE bug 1050699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2836">SUSE bug 1050699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2836">SUSE bug 1050699</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2836">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162959" comment="freerdp-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162960" comment="freerdp-devel-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151909" comment="freerdp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162961" comment="libfreerdp2-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2837" source="CVE"/>
    <description>
    An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2837.html">CVE-2017-2837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2837">SUSE bug 1050704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2837">SUSE bug 1050704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2837">SUSE bug 1050708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2837">SUSE bug 1050704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2837">SUSE bug 1050704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2837">SUSE bug 1050704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2837">SUSE bug 1050704</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2837">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162959" comment="freerdp-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162960" comment="freerdp-devel-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151909" comment="freerdp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162961" comment="libfreerdp2-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2838</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2838" source="CVE"/>
    <description>
    An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2838.html">CVE-2017-2838</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2838">SUSE bug 1050708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2838">SUSE bug 1050708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2838">SUSE bug 1050708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2838">SUSE bug 1050708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2838">SUSE bug 1050708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2838">SUSE bug 1050708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2838">SUSE bug 1050708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2838">SUSE bug 1050708</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2838">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162959" comment="freerdp-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162960" comment="freerdp-devel-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151909" comment="freerdp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162961" comment="libfreerdp2-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2839</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2839" source="CVE"/>
    <description>
    An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2839.html">CVE-2017-2839</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2839">SUSE bug 1050711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2839">SUSE bug 1050711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2839">SUSE bug 1050711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2839">SUSE bug 1050711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2839">SUSE bug 1050711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2839">SUSE bug 1050711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2839">SUSE bug 1050711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2839">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162959" comment="freerdp-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151908" comment="freerdp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162960" comment="freerdp-devel-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151909" comment="freerdp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162961" comment="libfreerdp2-2.0.0~git.1463131968.4e66df7-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154119" comment="libfreerdp2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2862</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2862" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2862" source="CVE"/>
    <description>
    An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2862.html">CVE-2017-2862</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2862">SUSE bug 1048289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2862">SUSE bug 1048289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2862">SUSE bug 1048289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2862">SUSE bug 1048289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2862">SUSE bug 1048289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2862">SUSE bug 1048289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2862">SUSE bug 1048289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2862">SUSE bug 1048289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2862">SUSE bug 1048289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2862">SUSE bug 1048289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2862">SUSE bug 1048289</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163471" comment="gdk-pixbuf-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153060" comment="gdk-pixbuf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163472" comment="gdk-pixbuf-devel-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151614" comment="gdk-pixbuf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163473" comment="gdk-pixbuf-devel-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153061" comment="gdk-pixbuf-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163474" comment="gdk-pixbuf-lang-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163475" comment="gdk-pixbuf-query-loaders-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163476" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151617" comment="gdk-pixbuf-query-loaders-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163477" comment="libgdk_pixbuf-2_0-0-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163478" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151619" comment="libgdk_pixbuf-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163479" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2870</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2870" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2870" source="CVE"/>
    <description>
    An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2870.html">CVE-2017-2870</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2870">SUSE bug 1048544</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163471" comment="gdk-pixbuf-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153060" comment="gdk-pixbuf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163472" comment="gdk-pixbuf-devel-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151614" comment="gdk-pixbuf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163473" comment="gdk-pixbuf-devel-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153061" comment="gdk-pixbuf-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163474" comment="gdk-pixbuf-lang-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163475" comment="gdk-pixbuf-query-loaders-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163476" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151617" comment="gdk-pixbuf-query-loaders-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163477" comment="libgdk_pixbuf-2_0-0-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163478" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151619" comment="libgdk_pixbuf-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163479" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172885" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2885</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2885" source="CVE"/>
    <description>
    An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2885.html">CVE-2017-2885</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2885">SUSE bug 1052916</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2885">SUSE bug 1052916</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2885">SUSE bug 1052916</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161888" comment="libsoup-2.54.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161889" comment="libsoup is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161890" comment="libsoup-2_4-1-2.54.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151596" comment="libsoup-2_4-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161891" comment="libsoup-2_4-1-32bit-2.54.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161892" comment="libsoup-2_4-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161893" comment="libsoup-devel-2.54.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151597" comment="libsoup-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161894" comment="libsoup-devel-32bit-2.54.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161895" comment="libsoup-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161896" comment="libsoup-lang-2.54.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151598" comment="libsoup-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161897" comment="typelib-1_0-Soup-2_4-2.54.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151599" comment="typelib-1_0-Soup-2_4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172888" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2888</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2888" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2888" source="CVE"/>
    <description>
    An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2888.html">CVE-2017-2888</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2888">SUSE bug 1062784</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166223" comment="SDL2-2.0.3-9.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166224" comment="SDL2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166225" comment="libSDL2-2_0-0-2.0.3-9.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166226" comment="libSDL2-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166227" comment="libSDL2-2_0-0-32bit-2.0.3-9.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166228" comment="libSDL2-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166229" comment="libSDL2-devel-2.0.3-9.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166230" comment="libSDL2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166231" comment="libSDL2-devel-32bit-2.0.3-9.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166232" comment="libSDL2-devel-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172923" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2923</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2923" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2923" source="CVE"/>
    <description>
    An exploitable heap based buffer overflow vulnerability exists in the 'read_biff_next_record function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2923.html">CVE-2017-2923</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2923">SUSE bug 1058431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2923">SUSE bug 1058431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2923">SUSE bug 1058431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2923">SUSE bug 1058431</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164715" comment="freexl-1.0.4-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164716" comment="freexl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164717" comment="freexl-devel-1.0.4-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164718" comment="freexl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164719" comment="libfreexl1-1.0.4-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164720" comment="libfreexl1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20172924" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-2924</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-2924" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2924" source="CVE"/>
    <description>
    An exploitable heap-based buffer overflow vulnerability exists in the read_legacy_biff function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-2924.html">CVE-2017-2924</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2924">SUSE bug 1058433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2924">SUSE bug 1058433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2924">SUSE bug 1058433</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-2924">SUSE bug 1058433</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164715" comment="freexl-1.0.4-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164716" comment="freexl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164717" comment="freexl-devel-1.0.4-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164718" comment="freexl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164719" comment="libfreexl1-1.0.4-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164720" comment="libfreexl1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173135" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3135</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3135" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3135" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3135.html">CVE-2017-3135</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3135">SUSE bug 1024130</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131135" comment="bind-9.9.9P1-46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131947" comment="bind-chrootenv-9.9.9P1-46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131806" comment="bind-devel-9.9.9P1-46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153102" comment="bind-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131948" comment="bind-doc-9.9.9P1-46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131136" comment="bind-libs-9.9.9P1-46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131137" comment="bind-libs-32bit-9.9.9P1-46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153103" comment="bind-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149237" comment="bind-lwresd-9.9.9P1-46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153104" comment="bind-lwresd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009131138" comment="bind-utils-9.9.9P1-46.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173136" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3136</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3136" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3136" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3136.html">CVE-2017-3136</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3136">SUSE bug 1033461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3136">SUSE bug 1033466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3136">SUSE bug 1033466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3136">SUSE bug 1033466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3136">SUSE bug 1033466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3136">SUSE bug 1033466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3136">SUSE bug 1033466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3136">SUSE bug 1033466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3136">SUSE bug 1033461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3136">SUSE bug 1033466</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3136">SUSE bug 1033466</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154515" comment="bind-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154516" comment="bind-chrootenv-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154517" comment="bind-devel-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153102" comment="bind-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154518" comment="bind-doc-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154519" comment="bind-libs-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154520" comment="bind-libs-32bit-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153103" comment="bind-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154521" comment="bind-lwresd-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153104" comment="bind-lwresd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154522" comment="bind-utils-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173137" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3137</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3137" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3137" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3137.html">CVE-2017-3137</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1034162</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1033467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3137">SUSE bug 1076118</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154515" comment="bind-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154516" comment="bind-chrootenv-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154517" comment="bind-devel-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153102" comment="bind-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154518" comment="bind-doc-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154519" comment="bind-libs-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154520" comment="bind-libs-32bit-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153103" comment="bind-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154521" comment="bind-lwresd-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153104" comment="bind-lwresd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154522" comment="bind-utils-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173138" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3138</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3138" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3138.html">CVE-2017-3138</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033461</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033468</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3138">SUSE bug 1033468</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154515" comment="bind-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154516" comment="bind-chrootenv-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154517" comment="bind-devel-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153102" comment="bind-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154518" comment="bind-doc-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154519" comment="bind-libs-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154520" comment="bind-libs-32bit-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153103" comment="bind-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154521" comment="bind-lwresd-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153104" comment="bind-lwresd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154522" comment="bind-utils-9.9.9P1-48.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3142" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3142.html">CVE-2017-3142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3142">SUSE bug 1046554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3142">SUSE bug 1046555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3142">SUSE bug 1046554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3142">SUSE bug 1046554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3142">SUSE bug 1046554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3142">SUSE bug 1046554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3142">SUSE bug 1046554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3142">SUSE bug 1046554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3142">SUSE bug 1046554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3142">SUSE bug 1046554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3142">SUSE bug 1046554</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158040" comment="bind-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158041" comment="bind-chrootenv-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158042" comment="bind-devel-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153102" comment="bind-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158043" comment="bind-doc-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158044" comment="bind-libs-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158045" comment="bind-libs-32bit-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153103" comment="bind-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158046" comment="bind-lwresd-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153104" comment="bind-lwresd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158047" comment="bind-utils-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3143" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3143.html">CVE-2017-3143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3143">SUSE bug 1046554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3143">SUSE bug 1046555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3143">SUSE bug 1046555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3143">SUSE bug 1046555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3143">SUSE bug 1046554</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3143">SUSE bug 1046555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3143">SUSE bug 1046555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3143">SUSE bug 1046555</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3143">SUSE bug 1046555</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158040" comment="bind-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151203" comment="bind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158041" comment="bind-chrootenv-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151204" comment="bind-chrootenv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158042" comment="bind-devel-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153102" comment="bind-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158043" comment="bind-doc-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151205" comment="bind-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158044" comment="bind-libs-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151206" comment="bind-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158045" comment="bind-libs-32bit-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153103" comment="bind-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158046" comment="bind-lwresd-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153104" comment="bind-lwresd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158047" comment="bind-utils-9.9.9P1-48.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151207" comment="bind-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173167" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3167</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3167" source="CVE"/>
    <description>
    In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3167.html">CVE-2017-3167</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1049674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1052635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1052635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1052635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1052635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1060041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1045065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3167">SUSE bug 1078450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158058" comment="apache2-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158059" comment="apache2-devel-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158060" comment="apache2-doc-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158061" comment="apache2-event-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153274" comment="apache2-event is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158062" comment="apache2-example-pages-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158063" comment="apache2-prefork-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158064" comment="apache2-utils-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158065" comment="apache2-worker-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153275" comment="apache2-worker is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173169" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3169</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3169" source="CVE"/>
    <description>
    In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3169.html">CVE-2017-3169</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1049674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1052635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1052635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1060041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1045062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3169">SUSE bug 1078450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158058" comment="apache2-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158059" comment="apache2-devel-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158060" comment="apache2-doc-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158061" comment="apache2-event-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153274" comment="apache2-event is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158062" comment="apache2-example-pages-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158063" comment="apache2-prefork-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158064" comment="apache2-utils-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158065" comment="apache2-worker-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153275" comment="apache2-worker is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173231" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3231</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3231" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3231" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3231.html">CVE-2017-3231</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3231">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3231">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3231">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3231">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3231">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3231">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173238" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3238</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3238" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3238.html">CVE-2017-3238</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3238">SUSE bug 1020882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3238">SUSE bug 1020882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3238">SUSE bug 1020882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3238">SUSE bug 1020882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3238">SUSE bug 1020882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3238">SUSE bug 1020882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3238">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3238">SUSE bug 1020882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3238">SUSE bug 1020882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3238">SUSE bug 1020882</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148484" comment="libmysqlclient-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148485" comment="libmysqlclient18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148486" comment="libmysqlclient18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148487" comment="libmysqlclient_r18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148488" comment="libmysqlclient_r18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148489" comment="libmysqld-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148490" comment="libmysqld18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148491" comment="mariadb-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148492" comment="mariadb-bench-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148493" comment="mariadb-client-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148494" comment="mariadb-errormessages-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148495" comment="mariadb-test-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148496" comment="mariadb-tools-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173241" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3241</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3241" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3241" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3241.html">CVE-2017-3241</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3241">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3241">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3241">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3241">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3241">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3241">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173243" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3243</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3243" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.4 (Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3243.html">CVE-2017-3243</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3243">SUSE bug 1020891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3243">SUSE bug 1020891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3243">SUSE bug 1020891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3243">SUSE bug 1020891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3243">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3243">SUSE bug 1020891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3243">SUSE bug 1020891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3243">SUSE bug 1020891</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148484" comment="libmysqlclient-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148485" comment="libmysqlclient18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148486" comment="libmysqlclient18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148487" comment="libmysqlclient_r18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148488" comment="libmysqlclient_r18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148489" comment="libmysqld-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148490" comment="libmysqld18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148491" comment="mariadb-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148492" comment="mariadb-bench-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148493" comment="mariadb-client-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148494" comment="mariadb-errormessages-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148495" comment="mariadb-test-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148496" comment="mariadb-tools-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173244" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3244</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3244" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3244.html">CVE-2017-3244</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3244">SUSE bug 1020877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3244">SUSE bug 1020877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3244">SUSE bug 1020877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3244">SUSE bug 1020877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3244">SUSE bug 1020877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3244">SUSE bug 1020877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3244">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3244">SUSE bug 1020877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3244">SUSE bug 1020877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3244">SUSE bug 1020877</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148484" comment="libmysqlclient-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148485" comment="libmysqlclient18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148486" comment="libmysqlclient18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148487" comment="libmysqlclient_r18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148488" comment="libmysqlclient_r18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148489" comment="libmysqld-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148490" comment="libmysqld18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148491" comment="mariadb-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148492" comment="mariadb-bench-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148493" comment="mariadb-client-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148494" comment="mariadb-errormessages-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148495" comment="mariadb-test-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148496" comment="mariadb-tools-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173252" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3252</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3252" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.8 (Integrity impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3252.html">CVE-2017-3252</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3252">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3252">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3252">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3252">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3252">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3252">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173253" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3253</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3253" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3253" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 7.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3253.html">CVE-2017-3253</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3253">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3253">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3253">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3253">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3253">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3253">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173257" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3257</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3257" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3257" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3257.html">CVE-2017-3257</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3257">SUSE bug 1020878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3257">SUSE bug 1020878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3257">SUSE bug 1020878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3257">SUSE bug 1020878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3257">SUSE bug 1020878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3257">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3257">SUSE bug 1020878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3257">SUSE bug 1020878</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148484" comment="libmysqlclient-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148485" comment="libmysqlclient18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148486" comment="libmysqlclient18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148487" comment="libmysqlclient_r18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148488" comment="libmysqlclient_r18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148489" comment="libmysqld-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148490" comment="libmysqld18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148491" comment="mariadb-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148492" comment="mariadb-bench-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148493" comment="mariadb-client-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148494" comment="mariadb-errormessages-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148495" comment="mariadb-test-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148496" comment="mariadb-tools-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173258" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3258</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3258" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3258.html">CVE-2017-3258</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3258">SUSE bug 1020875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3258">SUSE bug 1020875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3258">SUSE bug 1020875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3258">SUSE bug 1020875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3258">SUSE bug 1020875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3258">SUSE bug 1020875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3258">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3258">SUSE bug 1020875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3258">SUSE bug 1020875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3258">SUSE bug 1020875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148484" comment="libmysqlclient-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148485" comment="libmysqlclient18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148486" comment="libmysqlclient18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148487" comment="libmysqlclient_r18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148488" comment="libmysqlclient_r18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148489" comment="libmysqld-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148490" comment="libmysqld18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148491" comment="mariadb-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148492" comment="mariadb-bench-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148493" comment="mariadb-client-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148494" comment="mariadb-errormessages-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148495" comment="mariadb-test-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148496" comment="mariadb-tools-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173259" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3259</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3259" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3259" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 3.7 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3259.html">CVE-2017-3259</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3259">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3259">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3259">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3259">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3259">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3259">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173260" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3260</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3260" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3260.html">CVE-2017-3260</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3260">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3260">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3260">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3260">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3260">SUSE bug 1020905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3261</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3261" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3261.html">CVE-2017-3261</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3261">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3261">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3261">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3261">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3261">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3261">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173265" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3265</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3265" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 5.6 (Confidentiality and Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3265.html">CVE-2017-3265</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3265">SUSE bug 1020885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3265">SUSE bug 1020885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3265">SUSE bug 1020885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3265">SUSE bug 1020885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3265">SUSE bug 1020885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3265">SUSE bug 1020885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3265">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3265">SUSE bug 1020885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3265">SUSE bug 1020885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3265">SUSE bug 1020885</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148484" comment="libmysqlclient-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148485" comment="libmysqlclient18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148486" comment="libmysqlclient18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148487" comment="libmysqlclient_r18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148488" comment="libmysqlclient_r18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148489" comment="libmysqld-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148490" comment="libmysqld18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148491" comment="mariadb-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148492" comment="mariadb-bench-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148493" comment="mariadb-client-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148494" comment="mariadb-errormessages-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148495" comment="mariadb-test-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148496" comment="mariadb-tools-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173272" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3272</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3272" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3272" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3272.html">CVE-2017-3272</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3272">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3272">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3272">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3272">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3272">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3272">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148627" comment="java-1_7_0-openjdk-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148628" comment="java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148629" comment="java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148630" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148631" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148632" comment="java-1_7_0-openjdk-demo-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148633" comment="java-1_7_0-openjdk-devel-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148634" comment="java-1_7_0-openjdk-headless-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148635" comment="java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148636" comment="java-1_7_0-openjdk-src-1.7.0.131-40.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173273" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3273</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3273" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3273" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3273.html">CVE-2017-3273</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3273">SUSE bug 1020876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3273">SUSE bug 1020876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3273">SUSE bug 1020876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3273">SUSE bug 1020876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3273">SUSE bug 1020876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3273">SUSE bug 1020876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3273">SUSE bug 1020876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3273">SUSE bug 1020876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3273">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3273">SUSE bug 1020876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3273">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173289" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3289</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3289" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3289" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3289.html">CVE-2017-3289</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3289">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3289">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3289">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3289">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3289">SUSE bug 1020905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3289">SUSE bug 1024218</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156186" comment="java-1_7_0-openjdk-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156187" comment="java-1_7_0-openjdk-accessibility-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156188" comment="java-1_7_0-openjdk-bootstrap-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156189" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156190" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156191" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156192" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156193" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156194" comment="java-1_7_0-openjdk-javadoc-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156195" comment="java-1_7_0-openjdk-src-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148072" comment="java-1_8_0-openjdk-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148073" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148074" comment="java-1_8_0-openjdk-demo-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148075" comment="java-1_8_0-openjdk-devel-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148076" comment="java-1_8_0-openjdk-headless-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148077" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148078" comment="java-1_8_0-openjdk-src-1.8.0.121-6.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173290" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3290</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3290" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3290" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 7.9 (Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3290.html">CVE-2017-3290</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3290">SUSE bug 1020856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3290">SUSE bug 1020856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3290">SUSE bug 1020856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3290">SUSE bug 1020856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148086" comment="python-virtualbox-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148087" comment="virtualbox-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148088" comment="virtualbox-devel-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148089" comment="virtualbox-guest-desktop-icons-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148090" comment="virtualbox-guest-kmp-default-5.1.14_k4.4.36_8-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148091" comment="virtualbox-guest-tools-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148092" comment="virtualbox-guest-x11-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148093" comment="virtualbox-host-kmp-default-5.1.14_k4.4.36_8-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148094" comment="virtualbox-host-source-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148095" comment="virtualbox-qt-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148096" comment="virtualbox-websrv-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3291</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3291" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3291.html">CVE-2017-3291</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 1020884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 1020884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 1020884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 1020884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 1020884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 1020884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 1020884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 1020884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 1020884</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3291">SUSE bug 998309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148484" comment="libmysqlclient-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148485" comment="libmysqlclient18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148486" comment="libmysqlclient18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148487" comment="libmysqlclient_r18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148488" comment="libmysqlclient_r18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148489" comment="libmysqld-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148490" comment="libmysqld18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148491" comment="mariadb-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148492" comment="mariadb-bench-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148493" comment="mariadb-client-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148494" comment="mariadb-errormessages-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148495" comment="mariadb-test-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148496" comment="mariadb-tools-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3302</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3302" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3302" source="CVE"/>
    <description>
    Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3302.html">CVE-2017-3302</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1034911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1022428</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3302">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156354" comment="libmysqlclient-devel-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156355" comment="libmysqlclient18-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156356" comment="libmysqlclient18-32bit-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156357" comment="libmysqlclient_r18-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156358" comment="libmysqlclient_r18-32bit-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156359" comment="libmysqld-devel-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156360" comment="libmysqld18-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156361" comment="mariadb-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156362" comment="mariadb-bench-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156363" comment="mariadb-client-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156364" comment="mariadb-errormessages-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156365" comment="mariadb-test-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156366" comment="mariadb-tools-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173305" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3305</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3305" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3305" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). Supported versions that are affected are 5.5.55 and earlier and 5.6.35 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue allows man-in-the-middle attackers to hijack the authentication of users by leveraging incorrect ordering of security parameter verification in a client, aka, "The Riddle".
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3305.html">CVE-2017-3305</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 924663</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1037590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1029396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3305">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3308</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3308" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3308.html">CVE-2017-3308</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3308">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161701" comment="libmysqlclient-devel-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161702" comment="libmysqlclient18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161703" comment="libmysqlclient18-32bit-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161704" comment="libmysqlclient_r18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161705" comment="libmysqlclient_r18-32bit-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161706" comment="libmysqld-devel-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161707" comment="libmysqld18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161708" comment="mariadb-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161709" comment="mariadb-bench-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161710" comment="mariadb-client-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161711" comment="mariadb-errormessages-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161712" comment="mariadb-test-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161713" comment="mariadb-tools-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3309</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3309" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3309" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3309.html">CVE-2017-3309</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3309">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161701" comment="libmysqlclient-devel-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161702" comment="libmysqlclient18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161703" comment="libmysqlclient18-32bit-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161704" comment="libmysqlclient_r18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161705" comment="libmysqlclient_r18-32bit-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161706" comment="libmysqld-devel-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161707" comment="libmysqld18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161708" comment="mariadb-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161709" comment="mariadb-bench-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161710" comment="mariadb-client-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161711" comment="mariadb-errormessages-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161712" comment="mariadb-test-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161713" comment="mariadb-tools-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3312</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3312" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3312" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS v3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3312.html">CVE-2017-3312</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 1020873</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 998309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3312">SUSE bug 998309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148484" comment="libmysqlclient-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148485" comment="libmysqlclient18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148486" comment="libmysqlclient18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148487" comment="libmysqlclient_r18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148488" comment="libmysqlclient_r18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148489" comment="libmysqld-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148490" comment="libmysqld18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148491" comment="mariadb-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148492" comment="mariadb-bench-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148493" comment="mariadb-client-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148494" comment="mariadb-errormessages-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148495" comment="mariadb-test-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148496" comment="mariadb-tools-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3313</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3313" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3313.html">CVE-2017-3313</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1020890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1020890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1020890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1020890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1020890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1020890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1034911</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1020890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1020890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1020890</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3313">SUSE bug 1020890</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156354" comment="libmysqlclient-devel-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156355" comment="libmysqlclient18-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156356" comment="libmysqlclient18-32bit-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156357" comment="libmysqlclient_r18-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156358" comment="libmysqlclient_r18-32bit-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156359" comment="libmysqld-devel-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156360" comment="libmysqld18-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156361" comment="mariadb-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156362" comment="mariadb-bench-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156363" comment="mariadb-client-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156364" comment="mariadb-errormessages-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156365" comment="mariadb-test-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156366" comment="mariadb-tools-10.0.30-20.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173316" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3316</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3316" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3316" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS v3.0 Base Score 8.4 (Confidentiality, Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3316.html">CVE-2017-3316</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3316">SUSE bug 1020856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3316">SUSE bug 1020856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3316">SUSE bug 1020856</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3316">SUSE bug 1020856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148086" comment="python-virtualbox-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148087" comment="virtualbox-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148088" comment="virtualbox-devel-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148089" comment="virtualbox-guest-desktop-icons-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148090" comment="virtualbox-guest-kmp-default-5.1.14_k4.4.36_8-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148091" comment="virtualbox-guest-tools-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148092" comment="virtualbox-guest-x11-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148093" comment="virtualbox-host-kmp-default-5.1.14_k4.4.36_8-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148094" comment="virtualbox-host-source-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148095" comment="virtualbox-qt-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148096" comment="virtualbox-websrv-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3317</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3317" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 4.0 (Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3317.html">CVE-2017-3317</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3317">SUSE bug 1020894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3317">SUSE bug 1020894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3317">SUSE bug 1020894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3317">SUSE bug 1020894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3317">SUSE bug 1020894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3317">SUSE bug 1020894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3317">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3317">SUSE bug 1020894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3317">SUSE bug 1020894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3317">SUSE bug 1020894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148484" comment="libmysqlclient-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148485" comment="libmysqlclient18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148486" comment="libmysqlclient18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148487" comment="libmysqlclient_r18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148488" comment="libmysqlclient_r18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148489" comment="libmysqld-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148490" comment="libmysqld18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148491" comment="mariadb-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148492" comment="mariadb-bench-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148493" comment="mariadb-client-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148494" comment="mariadb-errormessages-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148495" comment="mariadb-test-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148496" comment="mariadb-tools-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173318" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3318</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3318" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3318" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.0 (Confidentiality impacts).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3318.html">CVE-2017-3318</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3318">SUSE bug 1020896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3318">SUSE bug 1020896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3318">SUSE bug 1020896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3318">SUSE bug 1020896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3318">SUSE bug 1020896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3318">SUSE bug 1020868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3318">SUSE bug 1020896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3318">SUSE bug 1020896</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3318">SUSE bug 1020896</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148497" comment="libmysql56client18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148498" comment="libmysql56client18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148499" comment="libmysql56client_r18-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148500" comment="libmysql56client_r18-32bit-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148484" comment="libmysqlclient-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148485" comment="libmysqlclient18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148486" comment="libmysqlclient18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148487" comment="libmysqlclient_r18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148488" comment="libmysqlclient_r18-32bit-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148489" comment="libmysqld-devel-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148490" comment="libmysqld18-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148491" comment="mariadb-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148492" comment="mariadb-bench-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148493" comment="mariadb-client-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148494" comment="mariadb-errormessages-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148495" comment="mariadb-test-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148496" comment="mariadb-tools-10.0.29-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148501" comment="mysql-community-server-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148502" comment="mysql-community-server-bench-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148503" comment="mysql-community-server-client-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148504" comment="mysql-community-server-errormessages-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148505" comment="mysql-community-server-test-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148506" comment="mysql-community-server-tools-5.6.35-22.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173329" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3329</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3329" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3329" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Thread Pooling). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3329.html">CVE-2017-3329</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3329">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3332</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3332" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3332" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: VirtualBox SVGA Emulation). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 8.4 (Integrity and Availability impacts).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3332.html">CVE-2017-3332</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3332">SUSE bug 1020856</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148086" comment="python-virtualbox-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148087" comment="virtualbox-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148088" comment="virtualbox-devel-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148089" comment="virtualbox-guest-desktop-icons-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148090" comment="virtualbox-guest-kmp-default-5.1.14_k4.4.36_8-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148091" comment="virtualbox-guest-tools-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148092" comment="virtualbox-guest-x11-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148093" comment="virtualbox-host-kmp-default-5.1.14_k4.4.36_8-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148094" comment="virtualbox-host-source-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148095" comment="virtualbox-qt-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148096" comment="virtualbox-websrv-5.1.14-9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173450" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3450</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3450" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3450" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3450.html">CVE-2017-3450</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3450">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173452" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3452</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3452" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3452" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.35 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3452.html">CVE-2017-3452</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3452">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173453" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3453</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3453" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3453" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3453.html">CVE-2017-3453</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3453">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161701" comment="libmysqlclient-devel-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161702" comment="libmysqlclient18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161703" comment="libmysqlclient18-32bit-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161704" comment="libmysqlclient_r18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161705" comment="libmysqlclient_r18-32bit-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161706" comment="libmysqld-devel-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161707" comment="libmysqld18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161708" comment="mariadb-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161709" comment="mariadb-bench-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161710" comment="mariadb-client-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161711" comment="mariadb-errormessages-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161712" comment="mariadb-test-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161713" comment="mariadb-tools-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173456" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3456</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3456" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3456.html">CVE-2017-3456</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3456">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161701" comment="libmysqlclient-devel-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161702" comment="libmysqlclient18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161703" comment="libmysqlclient18-32bit-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161704" comment="libmysqlclient_r18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161705" comment="libmysqlclient_r18-32bit-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161706" comment="libmysqld-devel-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161707" comment="libmysqld18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161708" comment="mariadb-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161709" comment="mariadb-bench-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161710" comment="mariadb-client-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161711" comment="mariadb-errormessages-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161712" comment="mariadb-test-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161713" comment="mariadb-tools-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3461</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3461" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3461.html">CVE-2017-3461</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3461">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3462</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3462" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3462.html">CVE-2017-3462</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3462">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3463</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3463" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3463.html">CVE-2017-3463</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3463">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3464</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3464" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3464.html">CVE-2017-3464</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3464">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161701" comment="libmysqlclient-devel-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161702" comment="libmysqlclient18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161703" comment="libmysqlclient18-32bit-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161704" comment="libmysqlclient_r18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161705" comment="libmysqlclient_r18-32bit-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161706" comment="libmysqld-devel-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161707" comment="libmysqld18-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161708" comment="mariadb-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161709" comment="mariadb-bench-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161710" comment="mariadb-client-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161711" comment="mariadb-errormessages-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161712" comment="mariadb-test-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161713" comment="mariadb-tools-10.0.31-20.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3469</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3469" source="CVE"/>
    <description>
    Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security : Encryption). Supported versions that are affected are 6.3.8 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Workbench. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Workbench accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3469.html">CVE-2017-3469</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3469">SUSE bug 1035195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3469">SUSE bug 1035195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3469">SUSE bug 1035195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3469">SUSE bug 1035195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3469">SUSE bug 1035195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3469">SUSE bug 1035195</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156752" comment="libmysqlcppconn-devel-1.1.8-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156756" comment="libmysqlcppconn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156753" comment="libmysqlcppconn7-1.1.8-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156757" comment="libmysqlcppconn7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156754" comment="mysql-connector-cpp-1.1.8-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156758" comment="mysql-connector-cpp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156755" comment="mysql-workbench-6.3.9-2.5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156759" comment="mysql-workbench is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173509" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3509</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3509" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3509" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3509.html">CVE-2017-3509</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3509">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3509">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3509">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3509">SUSE bug 1038505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3509">SUSE bug 1034849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156186" comment="java-1_7_0-openjdk-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156187" comment="java-1_7_0-openjdk-accessibility-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156188" comment="java-1_7_0-openjdk-bootstrap-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156189" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156190" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156191" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156192" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156193" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156194" comment="java-1_7_0-openjdk-javadoc-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156195" comment="java-1_7_0-openjdk-src-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156696" comment="java-1_8_0-openjdk-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156697" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156698" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156699" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156700" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156701" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156702" comment="java-1_8_0-openjdk-src-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3511</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3511" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3511.html">CVE-2017-3511</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3511">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3511">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3511">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3511">SUSE bug 1038505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3511">SUSE bug 1034849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156186" comment="java-1_7_0-openjdk-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156187" comment="java-1_7_0-openjdk-accessibility-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156188" comment="java-1_7_0-openjdk-bootstrap-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156189" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156190" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156191" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156192" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156193" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156194" comment="java-1_7_0-openjdk-javadoc-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156195" comment="java-1_7_0-openjdk-src-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156696" comment="java-1_8_0-openjdk-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156697" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156698" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156699" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156700" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156701" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156702" comment="java-1_8_0-openjdk-src-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3512</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3512" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3512.html">CVE-2017-3512</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3512">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3512">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3512">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3512">SUSE bug 1038505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3512">SUSE bug 1034849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156186" comment="java-1_7_0-openjdk-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156187" comment="java-1_7_0-openjdk-accessibility-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156188" comment="java-1_7_0-openjdk-bootstrap-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156189" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156190" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156191" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156192" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156193" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156194" comment="java-1_7_0-openjdk-javadoc-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156195" comment="java-1_7_0-openjdk-src-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156696" comment="java-1_8_0-openjdk-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156697" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156698" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156699" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156700" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156701" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156702" comment="java-1_8_0-openjdk-src-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173513" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3513</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3513" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3513.html">CVE-2017-3513</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3513">SUSE bug 1034854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154987" comment="python-virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154988" comment="virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154989" comment="virtualbox-devel-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154990" comment="virtualbox-guest-desktop-icons-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154991" comment="virtualbox-guest-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154992" comment="virtualbox-guest-tools-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154993" comment="virtualbox-guest-x11-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154994" comment="virtualbox-host-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154995" comment="virtualbox-host-source-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154996" comment="virtualbox-qt-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154997" comment="virtualbox-websrv-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173514" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3514</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3514" source="CVE"/>
    <description>
    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3514.html">CVE-2017-3514</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3514">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3514">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3514">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3514">SUSE bug 1038505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3514">SUSE bug 1034849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156186" comment="java-1_7_0-openjdk-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156187" comment="java-1_7_0-openjdk-accessibility-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156188" comment="java-1_7_0-openjdk-bootstrap-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156189" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156190" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156191" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156192" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156193" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156194" comment="java-1_7_0-openjdk-javadoc-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156195" comment="java-1_7_0-openjdk-src-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156696" comment="java-1_8_0-openjdk-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156697" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156698" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156699" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156700" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156701" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156702" comment="java-1_8_0-openjdk-src-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3526</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3526" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3526" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3526.html">CVE-2017-3526</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3526">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3526">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3526">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3526">SUSE bug 1034849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156186" comment="java-1_7_0-openjdk-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156187" comment="java-1_7_0-openjdk-accessibility-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156188" comment="java-1_7_0-openjdk-bootstrap-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156189" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156190" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156191" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156192" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156193" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156194" comment="java-1_7_0-openjdk-javadoc-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156195" comment="java-1_7_0-openjdk-src-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156696" comment="java-1_8_0-openjdk-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156697" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156698" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156699" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156700" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156701" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156702" comment="java-1_8_0-openjdk-src-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3533</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3533" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3533" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via FTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3533.html">CVE-2017-3533</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3533">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3533">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3533">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3533">SUSE bug 1038505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3533">SUSE bug 1034849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156186" comment="java-1_7_0-openjdk-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156187" comment="java-1_7_0-openjdk-accessibility-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156188" comment="java-1_7_0-openjdk-bootstrap-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156189" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156190" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156191" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156192" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156193" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156194" comment="java-1_7_0-openjdk-javadoc-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156195" comment="java-1_7_0-openjdk-src-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156696" comment="java-1_8_0-openjdk-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156697" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156698" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156699" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156700" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156701" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156702" comment="java-1_8_0-openjdk-src-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173538" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3538</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3538" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are Prior to 5.0.34 and Prior to 5.1.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3538.html">CVE-2017-3538</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3538">SUSE bug 1034854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154987" comment="python-virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154988" comment="virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154989" comment="virtualbox-devel-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154990" comment="virtualbox-guest-desktop-icons-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154991" comment="virtualbox-guest-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154992" comment="virtualbox-guest-tools-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154993" comment="virtualbox-guest-x11-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154994" comment="virtualbox-host-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154995" comment="virtualbox-host-source-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154996" comment="virtualbox-qt-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154997" comment="virtualbox-websrv-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173539" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3539</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3539" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3539.html">CVE-2017-3539</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3539">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3539">SUSE bug 1005522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3539">SUSE bug 1005522</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3539">SUSE bug 1038505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3539">SUSE bug 1005522</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156186" comment="java-1_7_0-openjdk-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156187" comment="java-1_7_0-openjdk-accessibility-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156188" comment="java-1_7_0-openjdk-bootstrap-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156189" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156190" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156191" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156192" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156193" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156194" comment="java-1_7_0-openjdk-javadoc-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156195" comment="java-1_7_0-openjdk-src-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156696" comment="java-1_8_0-openjdk-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156697" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156698" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156699" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156700" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156701" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156702" comment="java-1_8_0-openjdk-src-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3544</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3544" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3544" source="CVE"/>
    <description>
    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3544.html">CVE-2017-3544</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3544">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3544">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3544">SUSE bug 1034849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3544">SUSE bug 1038505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3544">SUSE bug 1034849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156186" comment="java-1_7_0-openjdk-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152825" comment="java-1_7_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156187" comment="java-1_7_0-openjdk-accessibility-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152826" comment="java-1_7_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156188" comment="java-1_7_0-openjdk-bootstrap-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152827" comment="java-1_7_0-openjdk-bootstrap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156189" comment="java-1_7_0-openjdk-bootstrap-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152828" comment="java-1_7_0-openjdk-bootstrap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156190" comment="java-1_7_0-openjdk-bootstrap-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152829" comment="java-1_7_0-openjdk-bootstrap-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156191" comment="java-1_7_0-openjdk-demo-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152830" comment="java-1_7_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156192" comment="java-1_7_0-openjdk-devel-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152831" comment="java-1_7_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156193" comment="java-1_7_0-openjdk-headless-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152832" comment="java-1_7_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156194" comment="java-1_7_0-openjdk-javadoc-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152833" comment="java-1_7_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156195" comment="java-1_7_0-openjdk-src-1.7.0.141-42.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152834" comment="java-1_7_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156696" comment="java-1_8_0-openjdk-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156697" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156698" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156699" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156700" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156701" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156702" comment="java-1_8_0-openjdk-src-1.8.0.131-10.8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173558" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3558</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3558" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3558" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3558.html">CVE-2017-3558</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3558">SUSE bug 1034854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154987" comment="python-virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154988" comment="virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154989" comment="virtualbox-devel-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154990" comment="virtualbox-guest-desktop-icons-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154991" comment="virtualbox-guest-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154992" comment="virtualbox-guest-tools-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154993" comment="virtualbox-guest-x11-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154994" comment="virtualbox-host-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154995" comment="virtualbox-host-source-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154996" comment="virtualbox-qt-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154997" comment="virtualbox-websrv-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173559" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3559</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3559" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3559" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 7.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3559.html">CVE-2017-3559</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3559">SUSE bug 1034854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154987" comment="python-virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154988" comment="virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154989" comment="virtualbox-devel-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154990" comment="virtualbox-guest-desktop-icons-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154991" comment="virtualbox-guest-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154992" comment="virtualbox-guest-tools-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154993" comment="virtualbox-guest-x11-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154994" comment="virtualbox-host-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154995" comment="virtualbox-host-source-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154996" comment="virtualbox-qt-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154997" comment="virtualbox-websrv-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173561" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3561</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3561" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3561" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3561.html">CVE-2017-3561</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3561">SUSE bug 1034854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154987" comment="python-virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154988" comment="virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154989" comment="virtualbox-devel-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154990" comment="virtualbox-guest-desktop-icons-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154991" comment="virtualbox-guest-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154992" comment="virtualbox-guest-tools-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154993" comment="virtualbox-guest-x11-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154994" comment="virtualbox-host-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154995" comment="virtualbox-host-source-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154996" comment="virtualbox-qt-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154997" comment="virtualbox-websrv-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173563" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3563</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3563" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3563.html">CVE-2017-3563</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3563">SUSE bug 1034854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154987" comment="python-virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154988" comment="virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154989" comment="virtualbox-devel-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154990" comment="virtualbox-guest-desktop-icons-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154991" comment="virtualbox-guest-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154992" comment="virtualbox-guest-tools-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154993" comment="virtualbox-guest-x11-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154994" comment="virtualbox-host-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154995" comment="virtualbox-host-source-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154996" comment="virtualbox-qt-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154997" comment="virtualbox-websrv-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173575" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3575</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3575" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3575" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3575.html">CVE-2017-3575</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3575">SUSE bug 1034854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154987" comment="python-virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154988" comment="virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154989" comment="virtualbox-devel-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154990" comment="virtualbox-guest-desktop-icons-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154991" comment="virtualbox-guest-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154992" comment="virtualbox-guest-tools-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154993" comment="virtualbox-guest-x11-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154994" comment="virtualbox-host-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154995" comment="virtualbox-host-source-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154996" comment="virtualbox-qt-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154997" comment="virtualbox-websrv-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3576</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3576" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3576" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3576.html">CVE-2017-3576</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3576">SUSE bug 1034854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154987" comment="python-virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154988" comment="virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154989" comment="virtualbox-devel-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154990" comment="virtualbox-guest-desktop-icons-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154991" comment="virtualbox-guest-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154992" comment="virtualbox-guest-tools-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154993" comment="virtualbox-guest-x11-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154994" comment="virtualbox-host-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154995" comment="virtualbox-host-source-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154996" comment="virtualbox-qt-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154997" comment="virtualbox-websrv-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173587" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3587</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3587" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3587.html">CVE-2017-3587</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3587">SUSE bug 1034854</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154987" comment="python-virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154988" comment="virtualbox-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154989" comment="virtualbox-devel-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154990" comment="virtualbox-guest-desktop-icons-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154991" comment="virtualbox-guest-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154992" comment="virtualbox-guest-tools-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154993" comment="virtualbox-guest-x11-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154994" comment="virtualbox-host-kmp-default-5.1.22_k4.4.57_18.3-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154995" comment="virtualbox-host-source-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154996" comment="virtualbox-qt-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154997" comment="virtualbox-websrv-5.1.22-19.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3599</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3599" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3599" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). NOTE: the previous information is from the April 2017 CPU. Oracle has not commented on third-party claims that this issue is an integer overflow in sql/auth/sql_authentication.cc which allows remote attackers to cause a denial of service via a crafted authentication packet.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3599.html">CVE-2017-3599</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3599">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3600" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. Note: CVE-2017-3600 is equivalent to CVE-2016-5483. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3600.html">CVE-2017-3600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1029014</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1034850</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1048715</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3600">SUSE bug 1034850</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155141" comment="libmysql56client18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155142" comment="libmysql56client18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155143" comment="libmysql56client_r18-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155144" comment="libmysql56client_r18-32bit-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155145" comment="mysql-community-server-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155146" comment="mysql-community-server-bench-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155147" comment="mysql-community-server-client-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155148" comment="mysql-community-server-errormessages-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155149" comment="mysql-community-server-test-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155150" comment="mysql-community-server-tools-5.6.36-24.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173633" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3633</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3633" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3633" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3633.html">CVE-2017-3633</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3633">SUSE bug 1049394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3633">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3633">SUSE bug 1049394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3633">SUSE bug 1049394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3633">SUSE bug 1049394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3633">SUSE bug 1049394</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3633">SUSE bug 1049422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173634" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3634</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3634" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3634" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3634.html">CVE-2017-3634</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3634">SUSE bug 1049396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3634">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3634">SUSE bug 1049396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3634">SUSE bug 1049396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3634">SUSE bug 1049396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3634">SUSE bug 1049396</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3634">SUSE bug 1049422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173635" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3635</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3635" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3635" source="CVE"/>
    <description>
    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/C). Supported versions that are affected are 6.1.10 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. Note: The documentation has also been updated for the correct way to use mysql_stmt_close(). Please see: https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-execute.html,  https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-fetch.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-close.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-error.html, https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-errno.html, and  https://dev.mysql.com/doc/refman/5.7/en/mysql-stmt-sqlstate.html. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3635.html">CVE-2017-3635</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3635">SUSE bug 1049397</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3635">SUSE bug 1049398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3635">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3635">SUSE bug 1049398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3635">SUSE bug 1049398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3635">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3635">SUSE bug 1049397</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173636" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3636</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3636" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3636.html">CVE-2017-3636</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3636">SUSE bug 1049399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3636">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3636">SUSE bug 1049399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3636">SUSE bug 1054591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3636">SUSE bug 1049399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3636">SUSE bug 1049399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3636">SUSE bug 1049399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3636">SUSE bug 1076506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3636">SUSE bug 1049399</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3636">SUSE bug 1049422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169746" comment="libmysqlclient-devel-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169747" comment="libmysqlclient18-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169748" comment="libmysqlclient18-32bit-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169749" comment="libmysqlclient_r18-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169750" comment="libmysqlclient_r18-32bit-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169751" comment="libmysqld-devel-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169752" comment="libmysqld18-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169753" comment="mariadb-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169754" comment="mariadb-bench-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169755" comment="mariadb-client-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169756" comment="mariadb-errormessages-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169757" comment="mariadb-test-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169758" comment="mariadb-tools-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173641" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3641</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3641" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3641.html">CVE-2017-3641</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3641">SUSE bug 1049404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3641">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3641">SUSE bug 1049404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3641">SUSE bug 1054591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3641">SUSE bug 1049404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3641">SUSE bug 1049404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3641">SUSE bug 1049404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3641">SUSE bug 1076506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3641">SUSE bug 1049404</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3641">SUSE bug 1049422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169746" comment="libmysqlclient-devel-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169747" comment="libmysqlclient18-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169748" comment="libmysqlclient18-32bit-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169749" comment="libmysqlclient_r18-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169750" comment="libmysqlclient_r18-32bit-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169751" comment="libmysqld-devel-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169752" comment="libmysqld18-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169753" comment="mariadb-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169754" comment="mariadb-bench-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169755" comment="mariadb-client-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169756" comment="mariadb-errormessages-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169757" comment="mariadb-test-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169758" comment="mariadb-tools-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3647</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3647" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3647" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3647.html">CVE-2017-3647</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3647">SUSE bug 1049410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3647">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3647">SUSE bug 1049410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3647">SUSE bug 1049410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3647">SUSE bug 1049410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3647">SUSE bug 1049410</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3647">SUSE bug 1049422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3648</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3648" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3648" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3648.html">CVE-2017-3648</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3648">SUSE bug 1049411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3648">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3648">SUSE bug 1049411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3648">SUSE bug 1049411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3648">SUSE bug 1049411</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3648">SUSE bug 1049422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173649" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3649</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3649" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3649" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3649.html">CVE-2017-3649</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3649">SUSE bug 1049412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3649">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3649">SUSE bug 1049412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3649">SUSE bug 1049412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3649">SUSE bug 1049412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3649">SUSE bug 1049412</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3649">SUSE bug 1049422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173651" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3651</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3651" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3651" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3651.html">CVE-2017-3651</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3651">SUSE bug 1049415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3651">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3651">SUSE bug 1049415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3651">SUSE bug 1049415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3651">SUSE bug 1049415</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3651">SUSE bug 1049422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173652" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3652</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3652" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3652.html">CVE-2017-3652</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3652">SUSE bug 1049416</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3652">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3652">SUSE bug 1049416</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3652">SUSE bug 1049416</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3652">SUSE bug 1049416</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3652">SUSE bug 1049422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173653" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3653</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3653" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3653" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3653.html">CVE-2017-3653</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3653">SUSE bug 1049417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3653">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3653">SUSE bug 1049417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3653">SUSE bug 1054591</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3653">SUSE bug 1049417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3653">SUSE bug 1049417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3653">SUSE bug 1049417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3653">SUSE bug 1076506</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3653">SUSE bug 1049417</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3653">SUSE bug 1049422</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169746" comment="libmysqlclient-devel-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151094" comment="libmysqlclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169747" comment="libmysqlclient18-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151095" comment="libmysqlclient18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169748" comment="libmysqlclient18-32bit-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151096" comment="libmysqlclient18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169749" comment="libmysqlclient_r18-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151097" comment="libmysqlclient_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169750" comment="libmysqlclient_r18-32bit-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152839" comment="libmysqlclient_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169751" comment="libmysqld-devel-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152840" comment="libmysqld-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169752" comment="libmysqld18-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151098" comment="libmysqld18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169753" comment="mariadb-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151099" comment="mariadb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169754" comment="mariadb-bench-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152841" comment="mariadb-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169755" comment="mariadb-client-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151100" comment="mariadb-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169756" comment="mariadb-errormessages-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151101" comment="mariadb-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169757" comment="mariadb-test-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152842" comment="mariadb-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169758" comment="mariadb-tools-10.0.32-20.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152843" comment="mariadb-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173731" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3731</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3731" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731" source="CVE"/>
    <description>
    If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3731.html">CVE-2017-3731</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1025347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1025347</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1021641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1064118</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1064118</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1064119</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1022085</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1064118</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3731">SUSE bug 1064119</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166199" comment="libmysql56client18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166200" comment="libmysql56client18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166201" comment="libmysql56client_r18-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166202" comment="libmysql56client_r18-32bit-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148529" comment="libopenssl-devel-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148530" comment="libopenssl-devel-32bit-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152703" comment="libopenssl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148531" comment="libopenssl1_0_0-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148532" comment="libopenssl1_0_0-32bit-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148533" comment="libopenssl1_0_0-hmac-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152704" comment="libopenssl1_0_0-hmac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148534" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152705" comment="libopenssl1_0_0-hmac-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166203" comment="mysql-community-server-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166204" comment="mysql-community-server-bench-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166205" comment="mysql-community-server-client-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166206" comment="mysql-community-server-errormessages-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166207" comment="mysql-community-server-test-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166208" comment="mysql-community-server-tools-5.6.38-24.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150799" comment="nodejs4-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154256" comment="nodejs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150800" comment="nodejs4-devel-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154257" comment="nodejs4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150801" comment="nodejs4-docs-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154258" comment="nodejs4-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150802" comment="npm4-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154259" comment="npm4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148535" comment="openssl-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148536" comment="openssl-doc-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152718" comment="openssl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173732" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3732</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3732" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3732" source="CVE"/>
    <description>
    There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3732.html">CVE-2017-3732</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1025354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1021641</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1049418</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1049421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1049421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1049421</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1049422</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 957814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3732">SUSE bug 1022086</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159589" comment="libmysql56client18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159590" comment="libmysql56client18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159591" comment="libmysql56client_r18-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159592" comment="libmysql56client_r18-32bit-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148529" comment="libopenssl-devel-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148530" comment="libopenssl-devel-32bit-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152703" comment="libopenssl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148531" comment="libopenssl1_0_0-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148532" comment="libopenssl1_0_0-32bit-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148533" comment="libopenssl1_0_0-hmac-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152704" comment="libopenssl1_0_0-hmac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148534" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152705" comment="libopenssl1_0_0-hmac-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159593" comment="mysql-community-server-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159594" comment="mysql-community-server-bench-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159595" comment="mysql-community-server-client-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159596" comment="mysql-community-server-errormessages-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159597" comment="mysql-community-server-test-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159598" comment="mysql-community-server-tools-5.6.37-24.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150799" comment="nodejs4-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154256" comment="nodejs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150800" comment="nodejs4-devel-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154257" comment="nodejs4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150801" comment="nodejs4-docs-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154258" comment="nodejs4-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150802" comment="npm4-4.7.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154259" comment="npm4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148535" comment="openssl-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148536" comment="openssl-doc-1.0.2j-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152718" comment="openssl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173735" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3735</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3735" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3735" source="CVE"/>
    <description>
    While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3735.html">CVE-2017-3735</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3735">SUSE bug 1056058</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167639" comment="libopenssl-devel-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167640" comment="libopenssl-devel-32bit-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152703" comment="libopenssl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167641" comment="libopenssl1_0_0-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167642" comment="libopenssl1_0_0-32bit-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167643" comment="libopenssl1_0_0-hmac-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152704" comment="libopenssl1_0_0-hmac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167644" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152705" comment="libopenssl1_0_0-hmac-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169246" comment="nodejs4-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154256" comment="nodejs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169247" comment="nodejs4-devel-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154257" comment="nodejs4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169248" comment="nodejs4-docs-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154258" comment="nodejs4-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169249" comment="npm4-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154259" comment="npm4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167645" comment="openssl-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167646" comment="openssl-cavs-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167647" comment="openssl-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167648" comment="openssl-doc-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152718" comment="openssl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173736" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3736</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3736" source="CVE"/>
    <description>
    There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3736.html">CVE-2017-3736</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 957814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3736">SUSE bug 1066242</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167639" comment="libopenssl-devel-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167640" comment="libopenssl-devel-32bit-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152703" comment="libopenssl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167641" comment="libopenssl1_0_0-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167642" comment="libopenssl1_0_0-32bit-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167643" comment="libopenssl1_0_0-hmac-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152704" comment="libopenssl1_0_0-hmac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167644" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152705" comment="libopenssl1_0_0-hmac-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169246" comment="nodejs4-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154256" comment="nodejs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169247" comment="nodejs4-devel-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154257" comment="nodejs4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169248" comment="nodejs4-docs-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154258" comment="nodejs4-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169249" comment="npm4-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154259" comment="npm4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167645" comment="openssl-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167646" comment="openssl-cavs-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167647" comment="openssl-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167648" comment="openssl-doc-1.0.2j-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152718" comment="openssl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173737" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3737</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3737" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3737" source="CVE"/>
    <description>
    OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3737.html">CVE-2017-3737</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1071905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1071905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1071905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1072322</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1089987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1089987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1089997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1089997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1089997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3737">SUSE bug 1089997</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168681" comment="libopenssl-devel-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168682" comment="libopenssl-devel-32bit-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152703" comment="libopenssl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168683" comment="libopenssl1_0_0-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168684" comment="libopenssl1_0_0-32bit-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168685" comment="libopenssl1_0_0-hmac-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152704" comment="libopenssl1_0_0-hmac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168686" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152705" comment="libopenssl1_0_0-hmac-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168687" comment="openssl-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168688" comment="openssl-cavs-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167647" comment="openssl-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168689" comment="openssl-doc-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152718" comment="openssl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20173738" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-3738</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-3738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3738" source="CVE"/>
    <description>
    There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-3738.html">CVE-2017-3738</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-3738">SUSE bug 1071906</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168681" comment="libopenssl-devel-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151064" comment="libopenssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168682" comment="libopenssl-devel-32bit-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152703" comment="libopenssl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168683" comment="libopenssl1_0_0-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151065" comment="libopenssl1_0_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168684" comment="libopenssl1_0_0-32bit-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151066" comment="libopenssl1_0_0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168685" comment="libopenssl1_0_0-hmac-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152704" comment="libopenssl1_0_0-hmac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168686" comment="libopenssl1_0_0-hmac-32bit-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152705" comment="libopenssl1_0_0-hmac-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169246" comment="nodejs4-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154256" comment="nodejs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169247" comment="nodejs4-devel-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154257" comment="nodejs4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169248" comment="nodejs4-docs-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154258" comment="nodejs4-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169249" comment="npm4-4.8.7-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154259" comment="npm4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168687" comment="openssl-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151067" comment="openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168688" comment="openssl-cavs-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167647" comment="openssl-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168689" comment="openssl-doc-1.0.2j-6.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152718" comment="openssl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175006" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5006</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5006" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5006" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5006.html">CVE-2017-5006</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5006">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5007</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5007" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5007.html">CVE-2017-5007</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5007">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175008" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5008</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5008" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5008.html">CVE-2017-5008</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5008">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5009</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5009" source="CVE"/>
    <description>
    WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5009.html">CVE-2017-5009</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5009">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5010</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5010" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5010.html">CVE-2017-5010</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5010">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5011</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5011" source="CVE"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5011.html">CVE-2017-5011</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5011">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175012" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5012</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5012" source="CVE"/>
    <description>
    A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5012.html">CVE-2017-5012</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5012">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175013" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5013</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5013" source="CVE"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5013.html">CVE-2017-5013</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5013">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175014" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5014</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5014" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5014" source="CVE"/>
    <description>
    Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5014.html">CVE-2017-5014</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5014">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175015" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5015</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5015" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5015" source="CVE"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5015.html">CVE-2017-5015</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5015">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175016" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5016</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5016" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5016" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5016.html">CVE-2017-5016</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5016">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175017" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5017</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5017" source="CVE"/>
    <description>
    Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5017.html">CVE-2017-5017</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5017">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5018</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5018" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5018" source="CVE"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5018.html">CVE-2017-5018</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5018">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175019" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5019</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5019" source="CVE"/>
    <description>
    A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5019.html">CVE-2017-5019</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5019">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175020" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5020</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5020" source="CVE"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5020.html">CVE-2017-5020</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5020">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175021" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5021</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5021" source="CVE"/>
    <description>
    A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5021.html">CVE-2017-5021</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5021">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175022" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5022</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5022" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5022.html">CVE-2017-5022</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5022">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175023" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5023</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5023" source="CVE"/>
    <description>
    Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5023.html">CVE-2017-5023</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5023">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175024" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5024</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5024" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5024" source="CVE"/>
    <description>
    FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5024.html">CVE-2017-5024</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5024">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175025" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5025</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5025" source="CVE"/>
    <description>
    FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5025.html">CVE-2017-5025</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5025">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175026" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5026</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5026" source="CVE"/>
    <description>
    Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5026.html">CVE-2017-5026</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5026">SUSE bug 1022049</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148572" comment="chromedriver-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148573" comment="chromium-56.0.2924.87-102.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148574" comment="ffmpeg3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153987" comment="ffmpeg3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148575" comment="harfbuzz-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153258" comment="harfbuzz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148576" comment="harfbuzz-devel-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153259" comment="harfbuzz-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148577" comment="harfbuzz-tools-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153260" comment="harfbuzz-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148578" comment="libavcodec-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148579" comment="libavcodec57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148580" comment="libavcodec57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148581" comment="libavdevice-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148582" comment="libavdevice57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148583" comment="libavdevice57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148584" comment="libavfilter-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148585" comment="libavfilter6-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148586" comment="libavfilter6-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148587" comment="libavformat-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148588" comment="libavformat57-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148589" comment="libavformat57-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148590" comment="libavresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148591" comment="libavresample3-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148592" comment="libavresample3-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148593" comment="libavutil-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148594" comment="libavutil55-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148595" comment="libavutil55-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148596" comment="libharfbuzz-icu0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153261" comment="libharfbuzz-icu0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148597" comment="libharfbuzz-icu0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153262" comment="libharfbuzz-icu0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148598" comment="libharfbuzz0-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153263" comment="libharfbuzz0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148599" comment="libharfbuzz0-32bit-1.4.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153264" comment="libharfbuzz0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148600" comment="libpostproc-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148601" comment="libpostproc54-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148602" comment="libpostproc54-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148603" comment="libswresample-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148604" comment="libswresample2-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148605" comment="libswresample2-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148606" comment="libswscale-devel-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148607" comment="libswscale4-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148608" comment="libswscale4-32bit-3.2.2-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175029" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5029</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5029" source="CVE"/>
    <description>
    The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5029.html">CVE-2017-5029</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1028875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5029">SUSE bug 1035905</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155736" comment="libxslt-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155743" comment="libxslt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155737" comment="libxslt-devel-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155744" comment="libxslt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155738" comment="libxslt-devel-32bit-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155745" comment="libxslt-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155739" comment="libxslt-python-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155746" comment="libxslt-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155740" comment="libxslt-tools-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155747" comment="libxslt-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155741" comment="libxslt1-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155748" comment="libxslt1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155742" comment="libxslt1-32bit-1.1.28-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155749" comment="libxslt1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5030</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5030" source="CVE"/>
    <description>
    Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5030.html">CVE-2017-5030</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5030">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5030">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5031</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5031" source="CVE"/>
    <description>
    A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5031.html">CVE-2017-5031</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5031">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5031">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175032" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5032</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5032" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5032" source="CVE"/>
    <description>
    PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5032.html">CVE-2017-5032</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5032">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5032">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175033" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5033</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5033" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5033" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5033.html">CVE-2017-5033</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5033">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5033">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5034</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5034" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5034" source="CVE"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5034.html">CVE-2017-5034</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5034">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5034">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175035" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5035</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5035" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5035" source="CVE"/>
    <description>
    Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5035.html">CVE-2017-5035</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5035">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5035">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175036" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5036</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5036" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5036" source="CVE"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5036.html">CVE-2017-5036</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5036">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5036">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5037</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5037" source="CVE"/>
    <description>
    An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5037.html">CVE-2017-5037</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5037">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5037">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5038</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5038" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5038" source="CVE"/>
    <description>
    Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5038.html">CVE-2017-5038</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5038">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5038">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5039</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5039" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5039" source="CVE"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5039.html">CVE-2017-5039</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5039">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5039">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5040</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5040" source="CVE"/>
    <description>
    V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5040.html">CVE-2017-5040</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5040">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5040">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5041</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5041" source="CVE"/>
    <description>
    Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5041.html">CVE-2017-5041</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5041">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5041">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5042</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5042" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5042" source="CVE"/>
    <description>
    Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5042.html">CVE-2017-5042</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5042">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5042">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5043</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5043" source="CVE"/>
    <description>
    Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5043.html">CVE-2017-5043</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5043">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5043">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5044</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5044" source="CVE"/>
    <description>
    Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5044.html">CVE-2017-5044</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5044">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5044">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175045" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5045</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5045" source="CVE"/>
    <description>
    XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5045.html">CVE-2017-5045</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5045">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5045">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5046</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5046" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5046" source="CVE"/>
    <description>
    V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5046.html">CVE-2017-5046</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5046">SUSE bug 1028848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5046">SUSE bug 1028875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149684" comment="chromedriver-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149685" comment="chromium-57.0.2987.98-105.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175052" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5052</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5052" source="CVE"/>
    <description>
    An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5052.html">CVE-2017-5052</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5052">SUSE bug 1031677</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150466" comment="chromedriver-57.0.2987.133-104.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150467" comment="chromium-57.0.2987.133-104.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175053" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5053</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5053" source="CVE"/>
    <description>
    An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5053.html">CVE-2017-5053</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5053">SUSE bug 1031677</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150466" comment="chromedriver-57.0.2987.133-104.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150467" comment="chromium-57.0.2987.133-104.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175054" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5054</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5054" source="CVE"/>
    <description>
    An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5054.html">CVE-2017-5054</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5054">SUSE bug 1031677</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150466" comment="chromedriver-57.0.2987.133-104.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150467" comment="chromium-57.0.2987.133-104.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5055</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5055" source="CVE"/>
    <description>
    A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5055.html">CVE-2017-5055</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5055">SUSE bug 1031677</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150466" comment="chromedriver-57.0.2987.133-104.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150467" comment="chromium-57.0.2987.133-104.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5056</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5056" source="CVE"/>
    <description>
    A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5056.html">CVE-2017-5056</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5056">SUSE bug 1031677</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150466" comment="chromedriver-57.0.2987.133-104.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150467" comment="chromium-57.0.2987.133-104.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175057" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5057</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5057" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5057" source="CVE"/>
    <description>
    Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5057.html">CVE-2017-5057</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5057">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175058" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5058</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5058" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5058" source="CVE"/>
    <description>
    A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5058.html">CVE-2017-5058</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5058">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175059" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5059</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5059" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5059" source="CVE"/>
    <description>
    Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code execution via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5059.html">CVE-2017-5059</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5059">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175060" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5060</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5060" source="CVE"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5060.html">CVE-2017-5060</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5060">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5061</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5061" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5061" source="CVE"/>
    <description>
    A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5061.html">CVE-2017-5061</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5061">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175062" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5062</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5062" source="CVE"/>
    <description>
    A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform out of bounds memory access via a crafted Chrome extension.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5062.html">CVE-2017-5062</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5062">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175063" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5063</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5063" source="CVE"/>
    <description>
    A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5063.html">CVE-2017-5063</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5063">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5064</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5064" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5064" source="CVE"/>
    <description>
    Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5064.html">CVE-2017-5064</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5064">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175065" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5065</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5065" source="CVE"/>
    <description>
    Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attacker to potentially confuse a user into making an incorrect security decision via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5065.html">CVE-2017-5065</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5065">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175066" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5066</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5066" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5066" source="CVE"/>
    <description>
    Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to incorrectly accept a badly formed X.509 certificate via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5066.html">CVE-2017-5066</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5066">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175067" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5067</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5067" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5067" source="CVE"/>
    <description>
    An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5067.html">CVE-2017-5067</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5067">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175068" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5068</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5068" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5068" source="CVE"/>
    <description>
    Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5068.html">CVE-2017-5068</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5068">SUSE bug 1037594</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5068">SUSE bug 1037594</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155076" comment="chromedriver-58.0.3029.96-104.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155077" comment="chromium-58.0.3029.96-104.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175069" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5069</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5069" source="CVE"/>
    <description>
    Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5069.html">CVE-2017-5069</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5069">SUSE bug 1035103</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154712" comment="chromedriver-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154713" comment="chromium-58.0.3029.81-104.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175070" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5070</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5070" source="CVE"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5070.html">CVE-2017-5070</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5070">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175071" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5071</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5071" source="CVE"/>
    <description>
    Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5071.html">CVE-2017-5071</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5071">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175072" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5072</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5072" source="CVE"/>
    <description>
    Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL characters via a crafted URL page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5072.html">CVE-2017-5072</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5072">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5073</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5073" source="CVE"/>
    <description>
    Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5073.html">CVE-2017-5073</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5073">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5074</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5074" source="CVE"/>
    <description>
    A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, related to Bluetooth.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5074.html">CVE-2017-5074</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5074">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5075</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5075" source="CVE"/>
    <description>
    Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5075.html">CVE-2017-5075</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5075">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5076</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5076" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5076" source="CVE"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5076.html">CVE-2017-5076</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5076">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5077</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5077" source="CVE"/>
    <description>
    Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5077.html">CVE-2017-5077</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5077">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175078" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5078</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5078" source="CVE"/>
    <description>
    Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5078.html">CVE-2017-5078</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5078">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175079" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5079</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5079" source="CVE"/>
    <description>
    Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5079.html">CVE-2017-5079</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5079">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175080" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5080</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5080" source="CVE"/>
    <description>
    A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5080.html">CVE-2017-5080</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5080">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175081" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5081</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5081" source="CVE"/>
    <description>
    Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5081.html">CVE-2017-5081</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5081">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175082" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5082</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5082" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5082" source="CVE"/>
    <description>
    Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5082.html">CVE-2017-5082</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5082">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175083" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5083</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5083" source="CVE"/>
    <description>
    Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5083.html">CVE-2017-5083</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5083">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175085" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5085</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5085" source="CVE"/>
    <description>
    Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform certain operations to run JavaScript on chrome:// pages via a crafted bookmark.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5085.html">CVE-2017-5085</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5085">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5086</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5086" source="CVE"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5086.html">CVE-2017-5086</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5086">SUSE bug 1042833</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156397" comment="chromedriver-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156398" comment="chromium-59.0.3071.86-104.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175087" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5087</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5087" source="CVE"/>
    <description>
    A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5087.html">CVE-2017-5087</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5087">SUSE bug 1044690</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156948" comment="chromedriver-59.0.3071.104-104.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156949" comment="chromium-59.0.3071.104-104.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175088" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5088</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5088" source="CVE"/>
    <description>
    Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5088.html">CVE-2017-5088</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5088">SUSE bug 1044690</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156948" comment="chromedriver-59.0.3071.104-104.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156949" comment="chromium-59.0.3071.104-104.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5089</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5089" source="CVE"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5089.html">CVE-2017-5089</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5089">SUSE bug 1044690</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156948" comment="chromedriver-59.0.3071.104-104.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156949" comment="chromium-59.0.3071.104-104.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5091</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5091" source="CVE"/>
    <description>
    A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5091.html">CVE-2017-5091</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5091">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175092" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5092</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5092" source="CVE"/>
    <description>
    Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5092.html">CVE-2017-5092</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5092">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175093" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5093</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5093" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5093" source="CVE"/>
    <description>
    Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5093.html">CVE-2017-5093</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5093">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175094" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5094</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5094" source="CVE"/>
    <description>
    Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5094.html">CVE-2017-5094</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5094">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5095</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5095" source="CVE"/>
    <description>
    Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5095.html">CVE-2017-5095</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5095">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5096</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5096" source="CVE"/>
    <description>
    Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remote attacker to perform cross origin content download via a crafted HTML page, related to intents.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5096.html">CVE-2017-5096</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5096">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5097</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5097" source="CVE"/>
    <description>
    Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5097.html">CVE-2017-5097</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5097">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5098</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5098" source="CVE"/>
    <description>
    A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5098.html">CVE-2017-5098</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5098">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5099</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5099" source="CVE"/>
    <description>
    Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5099.html">CVE-2017-5099</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5099">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175100" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5100</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5100" source="CVE"/>
    <description>
    A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5100.html">CVE-2017-5100</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5100">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175101" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5101</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5101" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5101" source="CVE"/>
    <description>
    Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5101.html">CVE-2017-5101</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5101">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5102</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5102" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5102" source="CVE"/>
    <description>
    Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5102.html">CVE-2017-5102</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5102">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5103</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5103" source="CVE"/>
    <description>
    Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5103.html">CVE-2017-5103</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5103">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5104</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5104" source="CVE"/>
    <description>
    Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5104.html">CVE-2017-5104</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5104">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175105" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5105</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5105" source="CVE"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5105.html">CVE-2017-5105</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5105">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175106" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5106</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5106" source="CVE"/>
    <description>
    Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5106.html">CVE-2017-5106</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5106">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175107" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5107</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5107" source="CVE"/>
    <description>
    A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5107.html">CVE-2017-5107</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5107">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5108</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5108" source="CVE"/>
    <description>
    Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5108.html">CVE-2017-5108</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5108">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175109" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5109</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5109" source="CVE"/>
    <description>
    Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5109.html">CVE-2017-5109</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5109">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175110" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5110</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5110" source="CVE"/>
    <description>
    Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5110.html">CVE-2017-5110</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5110">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175111" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5111</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5111" source="CVE"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5111.html">CVE-2017-5111</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5111">SUSE bug 1057364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164184" comment="chromedriver-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164185" comment="chromium-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5112</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5112" source="CVE"/>
    <description>
    Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5112.html">CVE-2017-5112</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5112">SUSE bug 1057364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164184" comment="chromedriver-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164185" comment="chromium-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175113" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5113</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5113" source="CVE"/>
    <description>
    Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5113.html">CVE-2017-5113</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5113">SUSE bug 1057364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164184" comment="chromedriver-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164185" comment="chromium-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5114</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5114" source="CVE"/>
    <description>
    Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5114.html">CVE-2017-5114</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5114">SUSE bug 1057364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164184" comment="chromedriver-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164185" comment="chromium-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175115" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5115</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5115" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5115" source="CVE"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5115.html">CVE-2017-5115</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5115">SUSE bug 1057364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164184" comment="chromedriver-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164185" comment="chromium-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175116" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5116</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5116" source="CVE"/>
    <description>
    Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5116.html">CVE-2017-5116</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5116">SUSE bug 1057364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164184" comment="chromedriver-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164185" comment="chromium-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5117</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5117" source="CVE"/>
    <description>
    Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5117.html">CVE-2017-5117</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5117">SUSE bug 1057364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164184" comment="chromedriver-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164185" comment="chromium-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175118" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5118</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5118" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5118" source="CVE"/>
    <description>
    Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5118.html">CVE-2017-5118</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5118">SUSE bug 1057364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164184" comment="chromedriver-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164185" comment="chromium-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175119" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5119</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5119" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5119" source="CVE"/>
    <description>
    Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5119.html">CVE-2017-5119</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5119">SUSE bug 1057364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164184" comment="chromedriver-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164185" comment="chromium-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175120" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5120</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5120" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5120" source="CVE"/>
    <description>
    Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial "www." substring).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5120.html">CVE-2017-5120</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5120">SUSE bug 1057364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164184" comment="chromedriver-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164185" comment="chromium-61.0.3163.79-104.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175121" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5121</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5121" source="CVE"/>
    <description>
    Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5121.html">CVE-2017-5121</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5121">SUSE bug 1060019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5121">SUSE bug 1060020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5121">SUSE bug 1060019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164741" comment="chromedriver-61.0.3163.100-104.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164742" comment="chromium-61.0.3163.100-104.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5122</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5122" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5122" source="CVE"/>
    <description>
    Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5122.html">CVE-2017-5122</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5122">SUSE bug 1060019</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5122">SUSE bug 1060020</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5122">SUSE bug 1060019</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164741" comment="chromedriver-61.0.3163.100-104.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164742" comment="chromium-61.0.3163.100-104.27.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5124</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5124" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5124" source="CVE"/>
    <description>
    Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5124.html">CVE-2017-5124</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5124">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5124">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5125</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5125" source="CVE"/>
    <description>
    Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5125.html">CVE-2017-5125</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5125">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5125">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5126</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5126" source="CVE"/>
    <description>
    A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5126.html">CVE-2017-5126</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5126">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5126">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5127</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5127" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5127" source="CVE"/>
    <description>
    Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5127.html">CVE-2017-5127</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5127">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5127">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5128</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5128" source="CVE"/>
    <description>
    Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5128.html">CVE-2017-5128</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5128">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5128">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175129" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5129</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5129" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5129" source="CVE"/>
    <description>
    A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5129.html">CVE-2017-5129</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5129">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5129">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175130" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5130</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5130" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5130" source="CVE"/>
    <description>
    An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5130.html">CVE-2017-5130</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1064089</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1064089</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1078806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1078806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1078806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1078806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1078806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1078806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1078806</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1064089</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5130">SUSE bug 1078806</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175131" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5131</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5131" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5131" source="CVE"/>
    <description>
    An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5131.html">CVE-2017-5131</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5131">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5131">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175132" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5132</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5132" source="CVE"/>
    <description>
    Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5132.html">CVE-2017-5132</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5132">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5132">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175133" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5133</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5133" source="CVE"/>
    <description>
    Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentiality execute code via a crafted PDF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5133.html">CVE-2017-5133</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5133">SUSE bug 1064066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5133">SUSE bug 1064089</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166396" comment="chromedriver-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166397" comment="chromium-62.0.3202.75-104.32.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175193" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5193</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5193" source="CVE"/>
    <description>
    The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message without a nick.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5193.html">CVE-2017-5193</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5193">SUSE bug 1018357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5193">SUSE bug 1018357</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146853" comment="irssi-0.8.21-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146854" comment="irssi-devel-0.8.21-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175194" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5194</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5194" source="CVE"/>
    <description>
    Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5194.html">CVE-2017-5194</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5194">SUSE bug 1018357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5194">SUSE bug 1018357</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146853" comment="irssi-0.8.21-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146854" comment="irssi-devel-0.8.21-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175195" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5195</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5195" source="CVE"/>
    <description>
    Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color code.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5195.html">CVE-2017-5195</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5195">SUSE bug 1018357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5195">SUSE bug 1018357</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146853" comment="irssi-0.8.21-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146854" comment="irssi-devel-0.8.21-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175196" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5196</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5196" source="CVE"/>
    <description>
    Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings that are not UTF8.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5196.html">CVE-2017-5196</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5196">SUSE bug 1018357</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5196">SUSE bug 1018357</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146853" comment="irssi-0.8.21-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009146854" comment="irssi-devel-0.8.21-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175202" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5202</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5202" source="CVE"/>
    <description>
    The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5202.html">CVE-2017-5202</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5202">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5202">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5202">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5202">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5202">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5202">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5202">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175203" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5203</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5203" source="CVE"/>
    <description>
    The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5203.html">CVE-2017-5203</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5203">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5203">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5203">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5203">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5203">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5203">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5203">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175204" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5204</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5204" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5204" source="CVE"/>
    <description>
    The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5204.html">CVE-2017-5204</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5204">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5204">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5204">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5204">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5204">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5204">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5204">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5205</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5205" source="CVE"/>
    <description>
    The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5205.html">CVE-2017-5205</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5205">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5205">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5205">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5205">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5205">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5205">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5205">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5208</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5208" source="CVE"/>
    <description>
    Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5208.html">CVE-2017-5208</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5208">SUSE bug 1018756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5208">SUSE bug 1018756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5208">SUSE bug 1018756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5208">SUSE bug 1019328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5208">SUSE bug 1018756</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147202" comment="icoutils-0.31.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154006" comment="icoutils is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5209</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5209" source="CVE"/>
    <description>
    The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5209.html">CVE-2017-5209</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1021610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5209">SUSE bug 1019531</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156177" comment="libplist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156178" comment="libplist++-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156179" comment="libplist++3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156180" comment="libplist++3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156181" comment="libplist-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156182" comment="libplist3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156183" comment="libplist3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156184" comment="plistutil-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156185" comment="python-plist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5225</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5225" source="CVE"/>
    <description>
    LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5225.html">CVE-2017-5225</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5225">SUSE bug 1019611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5225">SUSE bug 1019611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5225">SUSE bug 1019611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5225">SUSE bug 1019611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5225">SUSE bug 1019611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5225">SUSE bug 1019611</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148652" comment="libtiff-devel-4.0.7-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148653" comment="libtiff-devel-32bit-4.0.7-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148654" comment="libtiff5-4.0.7-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148655" comment="libtiff5-32bit-4.0.7-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148656" comment="tiff-4.0.7-15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5330</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5330" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5330" source="CVE"/>
    <description>
    ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5330.html">CVE-2017-5330</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5330">SUSE bug 1018648</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5330">SUSE bug 1018648</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147110" comment="ark-16.08.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154016" comment="ark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147111" comment="libkerfuffle15-15.12.3-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154017" comment="libkerfuffle15 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147112" comment="libkerfuffle16-16.08.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154292" comment="libkerfuffle16 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175331" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5331</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5331" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5331" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5331.html">CVE-2017-5331</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5331">SUSE bug 1018756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5331">SUSE bug 1019328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5331">SUSE bug 1018756</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147202" comment="icoutils-0.31.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154006" comment="icoutils is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175332" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5332</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5332" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5332" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5332.html">CVE-2017-5332</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5332">SUSE bug 1018756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5332">SUSE bug 1019328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5332">SUSE bug 1018756</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147202" comment="icoutils-0.31.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154006" comment="icoutils is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175333" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5333</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5333" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5333" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5333.html">CVE-2017-5333</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5333">SUSE bug 1018756</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5333">SUSE bug 1019328</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5333">SUSE bug 1018756</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009147202" comment="icoutils-0.31.1-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154006" comment="icoutils is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175335" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5335</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5335" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5335" source="CVE"/>
    <description>
    The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5335.html">CVE-2017-5335</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1021057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1021057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1021057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5335">SUSE bug 1021057</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148097" comment="gnutls-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148098" comment="libgnutls-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148099" comment="libgnutls-devel-32bit-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153803" comment="libgnutls-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148100" comment="libgnutls-openssl-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153804" comment="libgnutls-openssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148101" comment="libgnutls-openssl27-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148102" comment="libgnutls28-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148103" comment="libgnutls28-32bit-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148104" comment="libgnutlsxx-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153805" comment="libgnutlsxx-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148105" comment="libgnutlsxx28-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153806" comment="libgnutlsxx28 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5336</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5336" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5336" source="CVE"/>
    <description>
    Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5336.html">CVE-2017-5336</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1021057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1021057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1021057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5336">SUSE bug 1021057</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148097" comment="gnutls-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148098" comment="libgnutls-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148099" comment="libgnutls-devel-32bit-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153803" comment="libgnutls-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148100" comment="libgnutls-openssl-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153804" comment="libgnutls-openssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148101" comment="libgnutls-openssl27-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148102" comment="libgnutls28-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148103" comment="libgnutls28-32bit-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148104" comment="libgnutlsxx-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153805" comment="libgnutlsxx-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148105" comment="libgnutlsxx28-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153806" comment="libgnutlsxx28 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175337" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5337</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5337" source="CVE"/>
    <description>
    Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5337.html">CVE-2017-5337</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1021057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1021057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1021057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1018832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5337">SUSE bug 1021057</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148097" comment="gnutls-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148098" comment="libgnutls-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148099" comment="libgnutls-devel-32bit-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153803" comment="libgnutls-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148100" comment="libgnutls-openssl-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153804" comment="libgnutls-openssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148101" comment="libgnutls-openssl27-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148102" comment="libgnutls28-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148103" comment="libgnutls28-32bit-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148104" comment="libgnutlsxx-devel-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153805" comment="libgnutlsxx-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148105" comment="libgnutlsxx28-3.2.15-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153806" comment="libgnutlsxx28 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175338" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5338</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5338" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5338" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5338.html">CVE-2017-5338</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5338">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5338">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5338">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5338">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5338">SUSE bug 1019037</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148269" comment="libgit2-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153557" comment="libgit2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148270" comment="libgit2-24-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154200" comment="libgit2-24 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148537" comment="libgit2-24-32bit-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154201" comment="libgit2-24-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148538" comment="libgit2-devel-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153560" comment="libgit2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175339" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5339</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5339" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5339.html">CVE-2017-5339</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5339">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5339">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5339">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5339">SUSE bug 1019037</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5339">SUSE bug 1019037</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148269" comment="libgit2-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153557" comment="libgit2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148270" comment="libgit2-24-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154200" comment="libgit2-24 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148537" comment="libgit2-24-32bit-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154201" comment="libgit2-24-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148538" comment="libgit2-devel-0.24.1-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153560" comment="libgit2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175340" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5340</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5340" source="CVE"/>
    <description>
    Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5340.html">CVE-2017-5340</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5340">SUSE bug 1019570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5340">SUSE bug 1019570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5340">SUSE bug 1019570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5340">SUSE bug 1019570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5340">SUSE bug 1019570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5340">SUSE bug 1019570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5340">SUSE bug 1019570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5340">SUSE bug 1019570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5340">SUSE bug 1019570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5340">SUSE bug 1019570</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149320" comment="apache2-mod_php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149321" comment="php7-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149322" comment="php7-bcmath-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149323" comment="php7-bz2-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149324" comment="php7-calendar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149325" comment="php7-ctype-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149326" comment="php7-curl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149327" comment="php7-dba-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149328" comment="php7-devel-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149329" comment="php7-dom-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149330" comment="php7-enchant-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149331" comment="php7-exif-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149332" comment="php7-fastcgi-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149333" comment="php7-fileinfo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149334" comment="php7-firebird-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149335" comment="php7-fpm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149336" comment="php7-ftp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149337" comment="php7-gd-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149338" comment="php7-gettext-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149339" comment="php7-gmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149340" comment="php7-iconv-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149341" comment="php7-imap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149342" comment="php7-intl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149343" comment="php7-json-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149344" comment="php7-ldap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149345" comment="php7-mbstring-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149346" comment="php7-mcrypt-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149347" comment="php7-mysql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149348" comment="php7-odbc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149349" comment="php7-opcache-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149350" comment="php7-openssl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149351" comment="php7-pcntl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149352" comment="php7-pdo-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149353" comment="php7-pear-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149354" comment="php7-pear-Archive_Tar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149355" comment="php7-pgsql-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149356" comment="php7-phar-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149357" comment="php7-posix-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149358" comment="php7-pspell-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149359" comment="php7-readline-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149360" comment="php7-shmop-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149361" comment="php7-snmp-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149362" comment="php7-soap-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149363" comment="php7-sockets-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149364" comment="php7-sqlite-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149365" comment="php7-sysvmsg-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149366" comment="php7-sysvsem-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149367" comment="php7-sysvshm-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149368" comment="php7-tidy-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149369" comment="php7-tokenizer-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149370" comment="php7-wddx-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149371" comment="php7-xmlreader-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149372" comment="php7-xmlrpc-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149373" comment="php7-xmlwriter-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149374" comment="php7-xsl-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149375" comment="php7-zip-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149376" comment="php7-zlib-7.0.7-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175341" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5341</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5341" source="CVE"/>
    <description>
    The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5341.html">CVE-2017-5341</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5341">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5341">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5341">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5341">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5341">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5341">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5341">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175342" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5342</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5342" source="CVE"/>
    <description>
    In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5342.html">CVE-2017-5342</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5342">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5342">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5342">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5342">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5342">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5342">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5342">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5373</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5373" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5373.html">CVE-2017-5373</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5373">SUSE bug 1021824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5373">SUSE bug 1021824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5373">SUSE bug 1021824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5373">SUSE bug 1021824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5373">SUSE bug 1021824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5373">SUSE bug 1021824</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5373">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148018" comment="MozillaThunderbird-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148019" comment="MozillaThunderbird-buildsymbols-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148020" comment="MozillaThunderbird-devel-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148021" comment="MozillaThunderbird-translations-common-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148022" comment="MozillaThunderbird-translations-other-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5374</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5374" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5374.html">CVE-2017-5374</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5374">SUSE bug 1021841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5374">SUSE bug 1021841</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5374">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5375</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5375" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5375.html">CVE-2017-5375</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5375">SUSE bug 1021814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5375">SUSE bug 1021814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5375">SUSE bug 1021814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5375">SUSE bug 1021814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5375">SUSE bug 1021814</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5375">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148018" comment="MozillaThunderbird-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148019" comment="MozillaThunderbird-buildsymbols-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148020" comment="MozillaThunderbird-devel-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148021" comment="MozillaThunderbird-translations-common-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148022" comment="MozillaThunderbird-translations-other-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5376</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5376" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5376.html">CVE-2017-5376</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5376">SUSE bug 1021817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5376">SUSE bug 1021817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5376">SUSE bug 1021817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5376">SUSE bug 1021817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5376">SUSE bug 1021817</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5376">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148018" comment="MozillaThunderbird-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148019" comment="MozillaThunderbird-buildsymbols-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148020" comment="MozillaThunderbird-devel-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148021" comment="MozillaThunderbird-translations-common-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148022" comment="MozillaThunderbird-translations-other-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5377</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5377" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5377.html">CVE-2017-5377</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5377">SUSE bug 1021826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5377">SUSE bug 1021826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5377">SUSE bug 1021826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5377">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175378" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5378</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5378" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5378.html">CVE-2017-5378</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5378">SUSE bug 1021818</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5378">SUSE bug 1021818</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5378">SUSE bug 1021818</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5378">SUSE bug 1021818</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5378">SUSE bug 1021818</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5378">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148018" comment="MozillaThunderbird-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148019" comment="MozillaThunderbird-buildsymbols-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148020" comment="MozillaThunderbird-devel-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148021" comment="MozillaThunderbird-translations-common-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148022" comment="MozillaThunderbird-translations-other-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5379</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5379" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5379.html">CVE-2017-5379</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5379">SUSE bug 1021827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5379">SUSE bug 1021827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5379">SUSE bug 1021827</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5379">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5380</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5380" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5380.html">CVE-2017-5380</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5380">SUSE bug 1021819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5380">SUSE bug 1021819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5380">SUSE bug 1021819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5380">SUSE bug 1021819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5380">SUSE bug 1021819</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5380">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148018" comment="MozillaThunderbird-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148019" comment="MozillaThunderbird-buildsymbols-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148020" comment="MozillaThunderbird-devel-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148021" comment="MozillaThunderbird-translations-common-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148022" comment="MozillaThunderbird-translations-other-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175381" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5381</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5381" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5381.html">CVE-2017-5381</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5381">SUSE bug 1021830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5381">SUSE bug 1021830</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5381">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175382" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5382</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5382" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5382.html">CVE-2017-5382</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5382">SUSE bug 1021831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5382">SUSE bug 1021831</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5382">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175383" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5383</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5383" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5383.html">CVE-2017-5383</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5383">SUSE bug 1021822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5383">SUSE bug 1021822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5383">SUSE bug 1021822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5383">SUSE bug 1021822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5383">SUSE bug 1021822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5383">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148018" comment="MozillaThunderbird-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148019" comment="MozillaThunderbird-buildsymbols-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148020" comment="MozillaThunderbird-devel-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148021" comment="MozillaThunderbird-translations-common-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148022" comment="MozillaThunderbird-translations-other-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5384</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5384" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5384.html">CVE-2017-5384</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5384">SUSE bug 1021832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5384">SUSE bug 1021832</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5384">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175385" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5385</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5385" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5385.html">CVE-2017-5385</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5385">SUSE bug 1021833</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5385">SUSE bug 1021833</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5385">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5386</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5386" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5386.html">CVE-2017-5386</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5386">SUSE bug 1021823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5386">SUSE bug 1021823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5386">SUSE bug 1021991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5386">SUSE bug 1021823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5386">SUSE bug 1021823</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5386">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175387" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5387</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5387" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5387" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5387.html">CVE-2017-5387</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5387">SUSE bug 1021839</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5387">SUSE bug 1021839</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5387">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175388" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5388</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5388" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5388.html">CVE-2017-5388</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5388">SUSE bug 1021840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5388">SUSE bug 1021840</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5388">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175389" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5389</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5389" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5389.html">CVE-2017-5389</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5389">SUSE bug 1021828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5389">SUSE bug 1021828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5389">SUSE bug 1021828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5389">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175390" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5390</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5390" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5390" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5390.html">CVE-2017-5390</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5390">SUSE bug 1021820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5390">SUSE bug 1021820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5390">SUSE bug 1021820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5390">SUSE bug 1021820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5390">SUSE bug 1021820</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5390">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148018" comment="MozillaThunderbird-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148019" comment="MozillaThunderbird-buildsymbols-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148020" comment="MozillaThunderbird-devel-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148021" comment="MozillaThunderbird-translations-common-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148022" comment="MozillaThunderbird-translations-other-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175391" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5391</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5391" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5391" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5391.html">CVE-2017-5391</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5391">SUSE bug 1021835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5391">SUSE bug 1021835</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5391">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5392</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5392" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5392.html">CVE-2017-5392</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5392">SUSE bug 1021836</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5393</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5393" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5393.html">CVE-2017-5393</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5393">SUSE bug 1021837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5393">SUSE bug 1021837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5393">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5394</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5394" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5394" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5394.html">CVE-2017-5394</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5394">SUSE bug 1021834</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5395</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5395" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5395" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5395.html">CVE-2017-5395</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5395">SUSE bug 1021838</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5396</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5396" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5396.html">CVE-2017-5396</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5396">SUSE bug 1021821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5396">SUSE bug 1021821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5396">SUSE bug 1021821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5396">SUSE bug 1021821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5396">SUSE bug 1021821</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5396">SUSE bug 1021991</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148012" comment="MozillaFirefox-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148013" comment="MozillaFirefox-branding-upstream-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148014" comment="MozillaFirefox-buildsymbols-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148015" comment="MozillaFirefox-devel-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148016" comment="MozillaFirefox-translations-common-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148017" comment="MozillaFirefox-translations-other-51.0.1-50.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148018" comment="MozillaThunderbird-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148019" comment="MozillaThunderbird-buildsymbols-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148020" comment="MozillaThunderbird-devel-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148021" comment="MozillaThunderbird-translations-common-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148022" comment="MozillaThunderbird-translations-other-45.7.0-34.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5398</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5398" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5398" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5398.html">CVE-2017-5398</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5398">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5398">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5398">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5398">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5398">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5398">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5398">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175399" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5399</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5399" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5399" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5399.html">CVE-2017-5399</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5399">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5399">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5399">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5399">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5399">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5400</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5400" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5400.html">CVE-2017-5400</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5400">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5400">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5400">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5400">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5400">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5400">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5400">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5401</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5401" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5401" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5401.html">CVE-2017-5401</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5401">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5401">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5401">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5401">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5401">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5401">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5401">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175402" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5402</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5402" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5402" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5402.html">CVE-2017-5402</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5402">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5402">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5402">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5402">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5402">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5402">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5402">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5403</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5403" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5403" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5403.html">CVE-2017-5403</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5403">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5403">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5403">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5403">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5403">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175404" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5404</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5404" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5404.html">CVE-2017-5404</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5404">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5404">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5404">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5404">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5404">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5404">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5404">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175405" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5405</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5405" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5405.html">CVE-2017-5405</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5405">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5405">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5405">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5405">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5405">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5405">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5405">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5406</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5406" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5406.html">CVE-2017-5406</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5406">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5406">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5406">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5406">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5406">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5407</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5407" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5407" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5407.html">CVE-2017-5407</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5407">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5407">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5407">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5407">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5407">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5407">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5407">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5408</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5408" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5408" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5408.html">CVE-2017-5408</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5408">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5408">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5408">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5408">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5408">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5408">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5408">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5410</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5410" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5410.html">CVE-2017-5410</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5410">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5410">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5410">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5410">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5410">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5410">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5410">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175412" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5412</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5412" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5412.html">CVE-2017-5412</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5412">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5412">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5412">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5412">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5412">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175413" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5413</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5413" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5413" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5413.html">CVE-2017-5413</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5413">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5413">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5413">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175414" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5414</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5414" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5414" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5414.html">CVE-2017-5414</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5414">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5414">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5414">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5414">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5414">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175415" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5415</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5415" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5415" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5415.html">CVE-2017-5415</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5415">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5415">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5415">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5415">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5415">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175416" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5416</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5416" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5416" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5416.html">CVE-2017-5416</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5416">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5416">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5416">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5416">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5416">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175417" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5417</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5417" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5417.html">CVE-2017-5417</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5417">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5417">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5417">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5418</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5418" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5418.html">CVE-2017-5418</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5418">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5418">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5418">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5418">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5418">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175419" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5419</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5419" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5419" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5419.html">CVE-2017-5419</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5419">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5419">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5419">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5419">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5419">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175420" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5420</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5420" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5420.html">CVE-2017-5420</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5420">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5420">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5420">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5420">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5420">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5421</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5421" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5421" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5421.html">CVE-2017-5421</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5421">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5421">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5421">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5421">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5421">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5422</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5422" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5422" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5422.html">CVE-2017-5422</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5422">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5422">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5422">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5422">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5422">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175426" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5426</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5426" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5426" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5426.html">CVE-2017-5426</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5426">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5426">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5426">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5426">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5426">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5426">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5426">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175427" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5427</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5427" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5427.html">CVE-2017-5427</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5427">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5427">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5427">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5427">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5427">SUSE bug 1028393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5427">SUSE bug 1028391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5427">SUSE bug 1028393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149532" comment="MozillaFirefox-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149533" comment="MozillaFirefox-branding-upstream-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149534" comment="MozillaFirefox-buildsymbols-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149535" comment="MozillaFirefox-devel-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149536" comment="MozillaFirefox-translations-common-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149537" comment="MozillaFirefox-translations-other-52.0-55.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149538" comment="java-1_8_0-openjdk-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149539" comment="java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149540" comment="java-1_8_0-openjdk-demo-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149541" comment="java-1_8_0-openjdk-devel-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149542" comment="java-1_8_0-openjdk-headless-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149543" comment="java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149544" comment="java-1_8_0-openjdk-src-1.8.0.121-8.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149545" comment="libfreebl3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149546" comment="libfreebl3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149547" comment="libsoftokn3-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149548" comment="libsoftokn3-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149549" comment="mozilla-nss-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149550" comment="mozilla-nss-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149551" comment="mozilla-nss-certs-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149552" comment="mozilla-nss-certs-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149553" comment="mozilla-nss-devel-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149554" comment="mozilla-nss-sysinit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149555" comment="mozilla-nss-sysinit-32bit-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149556" comment="mozilla-nss-tools-3.28.3-38.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175428" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5428</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5428" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5428" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5428.html">CVE-2017-5428</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5428">SUSE bug 1029822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5428">SUSE bug 1029822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5428">SUSE bug 1029822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5428">SUSE bug 1029822</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149800" comment="MozillaFirefox-52.0.1-57.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149801" comment="MozillaFirefox-branding-upstream-52.0.1-57.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149802" comment="MozillaFirefox-buildsymbols-52.0.1-57.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149803" comment="MozillaFirefox-devel-52.0.1-57.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149804" comment="MozillaFirefox-translations-common-52.0.1-57.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149805" comment="MozillaFirefox-translations-other-52.0.1-57.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5429</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5429" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5429" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5429.html">CVE-2017-5429</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5429">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175430" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5430</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5430" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5430" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5430.html">CVE-2017-5430</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5430">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175432" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5432</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5432" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5432" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5432.html">CVE-2017-5432</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5432">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5433</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5433" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5433" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5433.html">CVE-2017-5433</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5433">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175434" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5434</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5434" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5434" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5434.html">CVE-2017-5434</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5434">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5435</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5435" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5435" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5435.html">CVE-2017-5435</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5435">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5436</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5436" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5436.html">CVE-2017-5436</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5436">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5436">SUSE bug 1035204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5436">SUSE bug 1035204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5436">SUSE bug 1035204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5436">SUSE bug 1035204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5436">SUSE bug 1035204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5436">SUSE bug 1035204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5436">SUSE bug 1035204</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5436">SUSE bug 1035204</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155455" comment="graphite2-1.3.1-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153576" comment="graphite2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155456" comment="graphite2-devel-1.3.1-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153577" comment="graphite2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155457" comment="libgraphite2-3-1.3.1-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153578" comment="libgraphite2-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155458" comment="libgraphite2-3-32bit-1.3.1-4.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153579" comment="libgraphite2-3-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5437</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5437" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5437" source="CVE"/>
    <description>
    ** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197.  Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197.  Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5437.html">CVE-2017-5437</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5437">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5438</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5438" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5438" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5438.html">CVE-2017-5438</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5438">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5439</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5439" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5439.html">CVE-2017-5439</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5439">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5440</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5440" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5440.html">CVE-2017-5440</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5440">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5441</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5441" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5441" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5441.html">CVE-2017-5441</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5441">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175442" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5442</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5442" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5442" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5442.html">CVE-2017-5442</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5442">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175443" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5443</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5443" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5443" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5443.html">CVE-2017-5443</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5443">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175444" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5444</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5444" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5444" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5444.html">CVE-2017-5444</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5444">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175445" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5445</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5445" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5445" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5445.html">CVE-2017-5445</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5445">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175446" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5446</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5446" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5446" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5446.html">CVE-2017-5446</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5446">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175447" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5447</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5447" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5447.html">CVE-2017-5447</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5447">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175448" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5448</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5448" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5448" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5448.html">CVE-2017-5448</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5448">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175449" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5449</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5449" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5449.html">CVE-2017-5449</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5449">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5451</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5451" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5451" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5451.html">CVE-2017-5451</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5451">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175454" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5454</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5454" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5454" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5454.html">CVE-2017-5454</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5454">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175459" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5459</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5459" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5459" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5459.html">CVE-2017-5459</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5459">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5460</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5460" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5460" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5460.html">CVE-2017-5460</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5460">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175461" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5461</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5461" source="CVE"/>
    <description>
    Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5461.html">CVE-2017-5461</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5461">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5462</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5462" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5462.html">CVE-2017-5462</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5462">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5464</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5464" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5464.html">CVE-2017-5464</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5464">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175465" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5465</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5465" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5465.html">CVE-2017-5465</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5465">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175466" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5466</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5466" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5466" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5466.html">CVE-2017-5466</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5466">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5467</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5467" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5467.html">CVE-2017-5467</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5467">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154714" comment="MozillaFirefox-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154715" comment="MozillaFirefox-branding-upstream-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154716" comment="MozillaFirefox-buildsymbols-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154717" comment="MozillaFirefox-devel-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154718" comment="MozillaFirefox-translations-common-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154719" comment="MozillaFirefox-translations-other-52.1.0-57.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5469</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5469" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5469.html">CVE-2017-5469</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035082</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5469">SUSE bug 1035209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155078" comment="MozillaThunderbird-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155079" comment="MozillaThunderbird-buildsymbols-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155080" comment="MozillaThunderbird-devel-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155081" comment="MozillaThunderbird-translations-common-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155082" comment="MozillaThunderbird-translations-other-52.1.0-41.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5470</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5470" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5470" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5470.html">CVE-2017-5470</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5470">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5470">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5470">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5470">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5470">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5470">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5470">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5472</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5472" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5472" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5472.html">CVE-2017-5472</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5472">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5472">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5472">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5472">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5472">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5472">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5472">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5482</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5482" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5482" source="CVE"/>
    <description>
    The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5482.html">CVE-2017-5482</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5482">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5482">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5482">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5482">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5482">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5482">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5482">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5483" source="CVE"/>
    <description>
    The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5483.html">CVE-2017-5483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5483">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5483">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5483">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5483">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5483">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5483">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5483">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5484</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5484" source="CVE"/>
    <description>
    The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5484.html">CVE-2017-5484</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5484">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5484">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5484">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5484">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5484">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5484">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5484">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5485</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5485" source="CVE"/>
    <description>
    The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5485.html">CVE-2017-5485</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5485">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5485">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5485">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5485">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5485">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5485">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5485">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5486</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5486" source="CVE"/>
    <description>
    The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5486.html">CVE-2017-5486</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5486">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5486">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5486">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5486">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5486">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5486">SUSE bug 1020940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5486">SUSE bug 1020940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155151" comment="libpcap-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155204" comment="libpcap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155152" comment="libpcap-devel-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155206" comment="libpcap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155153" comment="libpcap-devel-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155208" comment="libpcap-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155154" comment="libpcap-devel-static-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155210" comment="libpcap-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155155" comment="libpcap1-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155212" comment="libpcap1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155156" comment="libpcap1-32bit-1.8.1-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155214" comment="libpcap1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155157" comment="tcpdump-4.9.0-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152520" comment="tcpdump is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175495" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5495</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5495" source="CVE"/>
    <description>
    All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga daemons, or even the entire host. When Quagga daemons are configured with their telnet CLI enabled, anyone who can connect to the TCP ports can trigger this vulnerability, prior to authentication. Most distributions restrict the Quagga telnet interface to local access only by default. The Quagga telnet interface 'vty' input buffer grows automatically, without bound, so long as a newline is not entered. This allows an attacker to cause the Quagga daemon to allocate unbounded memory by sending very long strings without a newline. Eventually the daemon is terminated by the system, or the system itself runs out of memory. This is fixed in Quagga 1.1.1 and Free Range Routing (FRR) Protocol Suite 2017-01-10.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5495.html">CVE-2017-5495</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5495">SUSE bug 1021669</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155248" comment="libfpm_pb0-1.1.1-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155265" comment="libfpm_pb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155249" comment="libospf0-1.1.1-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155266" comment="libospf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155250" comment="libospfapiclient0-1.1.1-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155267" comment="libospfapiclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155251" comment="libquagga_pb0-1.1.1-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155268" comment="libquagga_pb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155252" comment="libzebra1-1.1.1-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155269" comment="libzebra1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155253" comment="quagga-1.1.1-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151418" comment="quagga is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155254" comment="quagga-devel-1.1.1-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153572" comment="quagga-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175498" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5498</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5498" source="CVE"/>
    <description>
    libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5498.html">CVE-2017-5498</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5498">SUSE bug 1020353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5498">SUSE bug 1020451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5498">SUSE bug 1020353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5498">SUSE bug 1020451</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5498">SUSE bug 1020353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5498">SUSE bug 1020353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5498">SUSE bug 1020353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5498">SUSE bug 1020353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5498">SUSE bug 1020353</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154502" comment="jasper-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154503" comment="libjasper-devel-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154504" comment="libjasper1-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154505" comment="libjasper1-32bit-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5506</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5506" source="CVE"/>
    <description>
    Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5506.html">CVE-2017-5506</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5506">SUSE bug 1020436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5506">SUSE bug 1020436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5506">SUSE bug 1020436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5506">SUSE bug 1020436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5506">SUSE bug 1020436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5506">SUSE bug 1020436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5506">SUSE bug 1020436</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5506">SUSE bug 1020436</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5507</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5507" source="CVE"/>
    <description>
    Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consumption) via vectors involving a pixel cache.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5507.html">CVE-2017-5507</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5507">SUSE bug 1020439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5507">SUSE bug 1020439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5507">SUSE bug 1020439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5507">SUSE bug 1020439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5507">SUSE bug 1020439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5507">SUSE bug 1020439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5507">SUSE bug 1020439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5507">SUSE bug 1020439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5507">SUSE bug 1020439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5507">SUSE bug 1020439</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5507">SUSE bug 1020439</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5508</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5508" source="CVE"/>
    <description>
    Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5508.html">CVE-2017-5508</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5508">SUSE bug 1020441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5508">SUSE bug 1020441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5508">SUSE bug 1020441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5508">SUSE bug 1020441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5508">SUSE bug 1020441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5508">SUSE bug 1020441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5508">SUSE bug 1020441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5508">SUSE bug 1020441</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5508">SUSE bug 1086782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5508">SUSE bug 1086782</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5508">SUSE bug 1086782</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175510" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5510</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5510" source="CVE"/>
    <description>
    coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5510.html">CVE-2017-5510</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5510">SUSE bug 1020446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5510">SUSE bug 1020446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5510">SUSE bug 1020446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5510">SUSE bug 1020446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5510">SUSE bug 1020446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5510">SUSE bug 1020446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5510">SUSE bug 1020446</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5510">SUSE bug 1020446</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5511</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5511" source="CVE"/>
    <description>
    coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5511.html">CVE-2017-5511</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5511">SUSE bug 1020448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5511">SUSE bug 1020448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5511">SUSE bug 1020448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5511">SUSE bug 1020448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5511">SUSE bug 1020448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5511">SUSE bug 1020448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5511">SUSE bug 1020448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5511">SUSE bug 1020448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5511">SUSE bug 1020448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5511">SUSE bug 1020448</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148189" comment="GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148190" comment="GraphicsMagick-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149144" comment="ImageMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149145" comment="ImageMagick-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149146" comment="ImageMagick-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149147" comment="ImageMagick-doc-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149148" comment="ImageMagick-extra-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148191" comment="libGraphicsMagick++-Q16-12-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148192" comment="libGraphicsMagick++-devel-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148193" comment="libGraphicsMagick-Q16-3-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148194" comment="libGraphicsMagick3-config-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148195" comment="libGraphicsMagickWand-Q16-2-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149149" comment="libMagick++-6_Q16-3-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149150" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149151" comment="libMagick++-devel-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149152" comment="libMagick++-devel-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149153" comment="libMagickCore-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149154" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149155" comment="libMagickWand-6_Q16-1-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149156" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148196" comment="perl-GraphicsMagick-1.3.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149157" comment="perl-PerlMagick-6.8.8.1-28.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175525" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5525</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5525" source="CVE"/>
    <description>
    Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5525.html">CVE-2017-5525</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5525">SUSE bug 1020491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5525">SUSE bug 1020491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5525">SUSE bug 1020491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5525">SUSE bug 1020491</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5525">SUSE bug 1020491</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5526</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5526" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5526" source="CVE"/>
    <description>
    Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5526.html">CVE-2017-5526</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1020589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1020589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1020589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1020589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1020589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5526">SUSE bug 1059777</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166441" comment="xen-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166442" comment="xen-devel-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166443" comment="xen-doc-html-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166444" comment="xen-libs-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166445" comment="xen-libs-32bit-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166446" comment="xen-tools-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166447" comment="xen-tools-domU-4.7.3_06-11.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175545" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5545</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5545" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5545" source="CVE"/>
    <description>
    The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5545.html">CVE-2017-5545</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5545">SUSE bug 1021610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5545">SUSE bug 1021610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5545">SUSE bug 1021610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5545">SUSE bug 1021610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5545">SUSE bug 1021610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5545">SUSE bug 1021610</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5545">SUSE bug 1021610</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156177" comment="libplist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156178" comment="libplist++-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156179" comment="libplist++3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156180" comment="libplist++3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156181" comment="libplist-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156182" comment="libplist3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156183" comment="libplist3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156184" comment="plistutil-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156185" comment="python-plist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5551</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5551" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5551" source="CVE"/>
    <description>
    The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5551.html">CVE-2017-5551</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 995968</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5551">SUSE bug 1021258</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148375" comment="kernel-debug-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148376" comment="kernel-debug-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148377" comment="kernel-debug-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148378" comment="kernel-default-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148379" comment="kernel-default-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148380" comment="kernel-default-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148381" comment="kernel-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148382" comment="kernel-docs-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148383" comment="kernel-docs-html-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148384" comment="kernel-docs-pdf-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148385" comment="kernel-macros-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148386" comment="kernel-obs-build-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148387" comment="kernel-obs-qa-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148388" comment="kernel-source-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148389" comment="kernel-source-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148390" comment="kernel-syms-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148391" comment="kernel-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148392" comment="kernel-vanilla-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148393" comment="kernel-vanilla-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175552" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5552</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5552" source="CVE"/>
    <description>
    Memory leak in the virgl_resource_attach_backing function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5552.html">CVE-2017-5552</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5552">SUSE bug 1021195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5552">SUSE bug 1021195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5552">SUSE bug 1021195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5552">SUSE bug 1021195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5552">SUSE bug 1021195</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5552">SUSE bug 1021195</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175576" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5576</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5576" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5576" source="CVE"/>
    <description>
    Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4_SUBMIT_CL ioctl call.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5576.html">CVE-2017-5576</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5576">SUSE bug 1021294</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148375" comment="kernel-debug-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148376" comment="kernel-debug-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148377" comment="kernel-debug-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148378" comment="kernel-default-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148379" comment="kernel-default-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148380" comment="kernel-default-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148381" comment="kernel-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148382" comment="kernel-docs-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148383" comment="kernel-docs-html-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148384" comment="kernel-docs-pdf-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148385" comment="kernel-macros-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148386" comment="kernel-obs-build-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148387" comment="kernel-obs-qa-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148388" comment="kernel-source-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148389" comment="kernel-source-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148390" comment="kernel-syms-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148391" comment="kernel-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148392" comment="kernel-vanilla-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148393" comment="kernel-vanilla-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175577" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5577</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5577" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5577" source="CVE"/>
    <description>
    The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) via inconsistent size values in a VC4_SUBMIT_CL ioctl call.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5577.html">CVE-2017-5577</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5577">SUSE bug 1021294</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148375" comment="kernel-debug-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148376" comment="kernel-debug-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148377" comment="kernel-debug-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148378" comment="kernel-default-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148379" comment="kernel-default-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148380" comment="kernel-default-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148381" comment="kernel-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148382" comment="kernel-docs-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148383" comment="kernel-docs-html-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148384" comment="kernel-docs-pdf-4.4.46-11.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148385" comment="kernel-macros-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148386" comment="kernel-obs-build-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148387" comment="kernel-obs-qa-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148388" comment="kernel-source-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148389" comment="kernel-source-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148390" comment="kernel-syms-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148391" comment="kernel-vanilla-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148392" comment="kernel-vanilla-base-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148393" comment="kernel-vanilla-devel-4.4.46-11.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175578" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5578</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5578" source="CVE"/>
    <description>
    Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5578.html">CVE-2017-5578</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5578">SUSE bug 1021481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5578">SUSE bug 1021481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5578">SUSE bug 1021481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5578">SUSE bug 1021481</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175579" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5579</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5579" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5579" source="CVE"/>
    <description>
    Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5579.html">CVE-2017-5579</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5579">SUSE bug 1021741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5579">SUSE bug 1021741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5579">SUSE bug 1022627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5579">SUSE bug 1022627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5579">SUSE bug 1021741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5579">SUSE bug 1021741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5579">SUSE bug 1021741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5579">SUSE bug 1021741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5579">SUSE bug 1021741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5579">SUSE bug 1021741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5579">SUSE bug 1022627</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175580" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5580</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5580" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5580" source="CVE"/>
    <description>
    The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and process crash) via a crafted texture instruction.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5580.html">CVE-2017-5580</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5580">SUSE bug 1021627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5580">SUSE bug 1021627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5580">SUSE bug 1021627</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5580">SUSE bug 1021627</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175589" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5589</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5589" source="CVE"/>
    <description>
    An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for yaxim and Bruno (0.8.6 - 0.8.8; Android).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5589.html">CVE-2017-5589</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5589">SUSE bug 1024687</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5589">SUSE bug 1024696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5589">SUSE bug 1024736</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148698" comment="mcabber-1.0.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154140" comment="mcabber is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148699" comment="mcabber-devel-1.0.5-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154141" comment="mcabber-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5592</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5592" source="CVE"/>
    <description>
    An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for profanity (0.4.7 - 0.5.0).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5592.html">CVE-2017-5592</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5592">SUSE bug 1024696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5592">SUSE bug 1024696</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148762" comment="profanity-0.5.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154018" comment="profanity is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148763" comment="profanity-mini-0.5.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154293" comment="profanity-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148764" comment="profanity-standard-0.5.0-4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154294" comment="profanity-standard is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5596</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5596" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5596" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5596.html">CVE-2017-5596</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5596">SUSE bug 1021739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5596">SUSE bug 1021739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5596">SUSE bug 1021739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5596">SUSE bug 1021739</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148041" comment="wireshark-2.2.4-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148042" comment="wireshark-devel-2.2.4-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148043" comment="wireshark-ui-gtk-2.2.4-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148044" comment="wireshark-ui-qt-2.2.4-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5597</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5597" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5597.html">CVE-2017-5597</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5597">SUSE bug 1021739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5597">SUSE bug 1021739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5597">SUSE bug 1021739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5597">SUSE bug 1021739</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148041" comment="wireshark-2.2.4-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148042" comment="wireshark-devel-2.2.4-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148043" comment="wireshark-ui-gtk-2.2.4-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148044" comment="wireshark-ui-qt-2.2.4-7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175627" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5627</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5627" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5627" source="CVE"/>
    <description>
    An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks a check for a negative array length. This leads to an integer overflow in the js_pushstring function in jsrun.c when parsing a specially crafted JS file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5627.html">CVE-2017-5627</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5627">SUSE bug 1022503</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5627">SUSE bug 1022503</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5627">SUSE bug 1022503</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5627">SUSE bug 1022503</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148570" comment="mupdf-1.10a-11.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148571" comment="mupdf-devel-static-1.10a-11.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175628" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5628</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5628" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5628" source="CVE"/>
    <description>
    An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JS file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5628.html">CVE-2017-5628</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5628">SUSE bug 1022504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5628">SUSE bug 1022504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5628">SUSE bug 1022504</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5628">SUSE bug 1022504</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148570" comment="mupdf-1.10a-11.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148571" comment="mupdf-devel-static-1.10a-11.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5647</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5647" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5647" source="CVE"/>
    <description>
    A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5647.html">CVE-2017-5647</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1036642</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1033448</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5647">SUSE bug 1036642</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155481" comment="tomcat-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155482" comment="tomcat-admin-webapps-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155483" comment="tomcat-docs-webapp-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155484" comment="tomcat-el-3_0-api-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155485" comment="tomcat-embed-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155486" comment="tomcat-javadoc-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155487" comment="tomcat-jsp-2_3-api-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155488" comment="tomcat-jsvc-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155489" comment="tomcat-lib-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155490" comment="tomcat-servlet-3_1-api-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155491" comment="tomcat-webapps-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175648" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5648</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5648" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5648" source="CVE"/>
    <description>
    While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to retain a reference to the request or response object and thereby access and/or modify information associated with another web application.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5648.html">CVE-2017-5648</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5648">SUSE bug 1033447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5648">SUSE bug 1033447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5648">SUSE bug 1033447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5648">SUSE bug 1033447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5648">SUSE bug 1033447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5648">SUSE bug 1033447</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5648">SUSE bug 1033447</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155481" comment="tomcat-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155482" comment="tomcat-admin-webapps-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155483" comment="tomcat-docs-webapp-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155484" comment="tomcat-el-3_0-api-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155485" comment="tomcat-embed-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155486" comment="tomcat-javadoc-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155487" comment="tomcat-jsp-2_3-api-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155488" comment="tomcat-jsvc-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155489" comment="tomcat-lib-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155490" comment="tomcat-servlet-3_1-api-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155491" comment="tomcat-webapps-8.0.43-6.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175664" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5664</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5664" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5664" source="CVE"/>
    <description>
    The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is presented to the error page with the original HTTP method. If the error page is a static file, expected behaviour is to serve content of the file as if processing a GET request, regardless of the actual HTTP method. The Default Servlet in Apache Tomcat 9.0.0.M1 to 9.0.0.M20, 8.5.0 to 8.5.14, 8.0.0.RC1 to 8.0.43 and 7.0.0 to 7.0.77 did not do this. Depending on the original request this could lead to unexpected and undesirable results for static error pages including, if the DefaultServlet is configured to permit writes, the replacement or removal of the custom error page. Notes for other user provided error pages: (1) Unless explicitly coded otherwise, JSPs ignore the HTTP method. JSPs used as error pages must must ensure that they handle any error dispatch as a GET request, regardless of the actual method. (2) By default, the response generated by a Servlet does depend on the HTTP method. Custom Servlets used as error pages must ensure that they handle any error dispatch as a GET request, regardless of the actual method.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5664.html">CVE-2017-5664</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5664">SUSE bug 1042910</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167063" comment="tomcat-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167064" comment="tomcat-admin-webapps-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167065" comment="tomcat-docs-webapp-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167066" comment="tomcat-el-3_0-api-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167067" comment="tomcat-embed-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167068" comment="tomcat-javadoc-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167069" comment="tomcat-jsp-2_3-api-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167070" comment="tomcat-jsvc-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167071" comment="tomcat-lib-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167072" comment="tomcat-servlet-3_1-api-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167073" comment="tomcat-webapps-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175667" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5667</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5667" source="CVE"/>
    <description>
    The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5667.html">CVE-2017-5667</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5667">SUSE bug 1022541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5667">SUSE bug 1022541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5667">SUSE bug 1022541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5667">SUSE bug 1022541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5667">SUSE bug 1022541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5667">SUSE bug 1022541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5667">SUSE bug 1022541</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5667">SUSE bug 1022541</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175715" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5715</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5715" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5715" source="CVE"/>
    <description>
    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5715.html">CVE-2017-5715</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1075007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1075419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1076115</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1076372</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1075262</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1078353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1078353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1080039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1075007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1075007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1075007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1075007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1075007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1075007</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5715">SUSE bug 1074701</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169190" comment="kernel-debug-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169191" comment="kernel-debug-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169192" comment="kernel-debug-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169193" comment="kernel-default-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169194" comment="kernel-default-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169195" comment="kernel-default-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169196" comment="kernel-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169197" comment="kernel-docs-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169198" comment="kernel-docs-html-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169199" comment="kernel-docs-pdf-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169230" comment="kernel-firmware-20170530-7.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167632" comment="kernel-firmware is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169200" comment="kernel-macros-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169201" comment="kernel-obs-build-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169202" comment="kernel-obs-qa-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169203" comment="kernel-source-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169204" comment="kernel-source-vanilla-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169205" comment="kernel-syms-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169206" comment="kernel-vanilla-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169207" comment="kernel-vanilla-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169208" comment="kernel-vanilla-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170020" comment="python-virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169459" comment="qemu-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169460" comment="qemu-arm-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169461" comment="qemu-block-curl-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169462" comment="qemu-block-dmg-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169463" comment="qemu-block-iscsi-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169464" comment="qemu-block-rbd-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169465" comment="qemu-block-ssh-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169466" comment="qemu-extra-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169467" comment="qemu-guest-agent-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169468" comment="qemu-ipxe-1.0.0-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169469" comment="qemu-kvm-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169470" comment="qemu-lang-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169471" comment="qemu-linux-user-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169472" comment="qemu-ppc-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169473" comment="qemu-s390-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169474" comment="qemu-seabios-1.9.1-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169475" comment="qemu-sgabios-8-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169476" comment="qemu-testsuite-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169477" comment="qemu-tools-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169478" comment="qemu-vgabios-1.9.1-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169479" comment="qemu-x86-2.6.2-31.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169231" comment="ucode-amd-20170530-7.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167634" comment="ucode-amd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170021" comment="virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170022" comment="virtualbox-devel-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170023" comment="virtualbox-guest-desktop-icons-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170024" comment="virtualbox-guest-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170025" comment="virtualbox-guest-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170026" comment="virtualbox-guest-tools-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170027" comment="virtualbox-guest-x11-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170028" comment="virtualbox-host-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170029" comment="virtualbox-host-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170030" comment="virtualbox-qt-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170031" comment="virtualbox-vnc-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170032" comment="virtualbox-websrv-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5753</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5753" source="CVE"/>
    <description>
    Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5753.html">CVE-2017-5753</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075419</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1080039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075748</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5753">SUSE bug 1075006</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169190" comment="kernel-debug-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169191" comment="kernel-debug-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169192" comment="kernel-debug-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169193" comment="kernel-default-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169194" comment="kernel-default-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169195" comment="kernel-default-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169196" comment="kernel-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169197" comment="kernel-docs-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169198" comment="kernel-docs-html-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169199" comment="kernel-docs-pdf-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169200" comment="kernel-macros-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169201" comment="kernel-obs-build-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169202" comment="kernel-obs-qa-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169203" comment="kernel-source-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169204" comment="kernel-source-vanilla-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169205" comment="kernel-syms-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169206" comment="kernel-vanilla-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169207" comment="kernel-vanilla-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169208" comment="kernel-vanilla-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5754</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5754" source="CVE"/>
    <description>
    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5754.html">CVE-2017-5754</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1075006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1075008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1068032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1075008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074562</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074701</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1074578</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1075008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1075008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5754">SUSE bug 1075008</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169190" comment="kernel-debug-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169191" comment="kernel-debug-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169192" comment="kernel-debug-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169193" comment="kernel-default-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169194" comment="kernel-default-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169195" comment="kernel-default-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169196" comment="kernel-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169197" comment="kernel-docs-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169198" comment="kernel-docs-html-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169199" comment="kernel-docs-pdf-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169200" comment="kernel-macros-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169201" comment="kernel-obs-build-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169202" comment="kernel-obs-qa-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169203" comment="kernel-source-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169204" comment="kernel-source-vanilla-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169205" comment="kernel-syms-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169206" comment="kernel-vanilla-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169207" comment="kernel-vanilla-base-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169208" comment="kernel-vanilla-devel-4.4.104-18.44.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5834</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5834" source="CVE"/>
    <description>
    The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5834.html">CVE-2017-5834</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5834">SUSE bug 1023848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5834">SUSE bug 1023848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5834">SUSE bug 1023848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5834">SUSE bug 1023848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5834">SUSE bug 1023848</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156177" comment="libplist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156178" comment="libplist++-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156179" comment="libplist++3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156180" comment="libplist++3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156181" comment="libplist-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156182" comment="libplist3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156183" comment="libplist3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156184" comment="plistutil-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156185" comment="python-plist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5835" source="CVE"/>
    <description>
    libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5835.html">CVE-2017-5835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5835">SUSE bug 1023822</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156177" comment="libplist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156178" comment="libplist++-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156179" comment="libplist++3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156180" comment="libplist++3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156181" comment="libplist-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156182" comment="libplist3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156183" comment="libplist3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156184" comment="plistutil-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156185" comment="python-plist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5836" source="CVE"/>
    <description>
    The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5836.html">CVE-2017-5836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023848</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5836">SUSE bug 1023807</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156177" comment="libplist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156178" comment="libplist++-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156179" comment="libplist++3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156180" comment="libplist++3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156181" comment="libplist-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156182" comment="libplist3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156183" comment="libplist3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156184" comment="plistutil-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156185" comment="python-plist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5837" source="CVE"/>
    <description>
    The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted video file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5837.html">CVE-2017-5837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5837">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5837">SUSE bug 1024076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5837">SUSE bug 1024079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5837">SUSE bug 1024076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5837">SUSE bug 1024076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5837">SUSE bug 1024076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5837">SUSE bug 1024076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5837">SUSE bug 1024076</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5837">SUSE bug 1024076</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154767" comment="gstreamer-plugins-base-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153927" comment="gstreamer-plugins-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154768" comment="gstreamer-plugins-base-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153928" comment="gstreamer-plugins-base-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154769" comment="gstreamer-plugins-base-devel-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153929" comment="gstreamer-plugins-base-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154770" comment="gstreamer-plugins-base-devel-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154283" comment="gstreamer-plugins-base-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154771" comment="gstreamer-plugins-base-doc-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153930" comment="gstreamer-plugins-base-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154772" comment="gstreamer-plugins-base-lang-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153931" comment="gstreamer-plugins-base-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154773" comment="libgstallocators-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153932" comment="libgstallocators-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154774" comment="libgstallocators-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153933" comment="libgstallocators-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154775" comment="libgstapp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153936" comment="libgstapp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154776" comment="libgstapp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153937" comment="libgstapp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154777" comment="libgstaudio-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153938" comment="libgstaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154778" comment="libgstaudio-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153939" comment="libgstaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154779" comment="libgstfft-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153940" comment="libgstfft-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154780" comment="libgstfft-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153941" comment="libgstfft-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154781" comment="libgstpbutils-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153944" comment="libgstpbutils-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154782" comment="libgstpbutils-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153945" comment="libgstpbutils-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154783" comment="libgstriff-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153946" comment="libgstriff-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154784" comment="libgstriff-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153947" comment="libgstriff-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154785" comment="libgstrtp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153948" comment="libgstrtp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154786" comment="libgstrtp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153949" comment="libgstrtp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154787" comment="libgstrtsp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153950" comment="libgstrtsp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154788" comment="libgstrtsp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153951" comment="libgstrtsp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154789" comment="libgstsdp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153952" comment="libgstsdp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154790" comment="libgstsdp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153953" comment="libgstsdp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154791" comment="libgsttag-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153954" comment="libgsttag-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154792" comment="libgsttag-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153955" comment="libgsttag-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154793" comment="libgstvideo-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153956" comment="libgstvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154794" comment="libgstvideo-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153957" comment="libgstvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154795" comment="typelib-1_0-GstAllocators-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153958" comment="typelib-1_0-GstAllocators-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154796" comment="typelib-1_0-GstApp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153960" comment="typelib-1_0-GstApp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154797" comment="typelib-1_0-GstAudio-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153961" comment="typelib-1_0-GstAudio-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154798" comment="typelib-1_0-GstFft-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153962" comment="typelib-1_0-GstFft-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154799" comment="typelib-1_0-GstPbutils-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153964" comment="typelib-1_0-GstPbutils-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154800" comment="typelib-1_0-GstRtp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153966" comment="typelib-1_0-GstRtp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154801" comment="typelib-1_0-GstRtsp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153967" comment="typelib-1_0-GstRtsp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154802" comment="typelib-1_0-GstSdp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153968" comment="typelib-1_0-GstSdp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154803" comment="typelib-1_0-GstTag-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153969" comment="typelib-1_0-GstTag-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154804" comment="typelib-1_0-GstVideo-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153970" comment="typelib-1_0-GstVideo-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5838</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5838" source="CVE"/>
    <description>
    The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5838.html">CVE-2017-5838</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5838">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5838">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5838">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5838">SUSE bug 1024051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5838">SUSE bug 1024051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5838">SUSE bug 1024051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5838">SUSE bug 1024051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5838">SUSE bug 1024051</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154588" comment="gstreamer-1.8.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154019" comment="gstreamer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154589" comment="gstreamer-32bit-1.8.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154020" comment="gstreamer-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154590" comment="gstreamer-devel-1.8.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154021" comment="gstreamer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154591" comment="gstreamer-doc-1.8.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154022" comment="gstreamer-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154592" comment="gstreamer-lang-1.8.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154023" comment="gstreamer-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154593" comment="gstreamer-utils-1.8.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154024" comment="gstreamer-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154594" comment="libgstreamer-1_0-0-1.8.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154025" comment="libgstreamer-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154595" comment="libgstreamer-1_0-0-32bit-1.8.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154026" comment="libgstreamer-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154596" comment="typelib-1_0-Gst-1_0-1.8.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154027" comment="typelib-1_0-Gst-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5839</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5839" source="CVE"/>
    <description>
    The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 does not properly limit recursion, which allows remote attackers to cause a denial of service (stack overflow and crash) via vectors involving nested WAVEFORMATEX.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5839.html">CVE-2017-5839</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5839">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5839">SUSE bug 1024047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5839">SUSE bug 1024047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5839">SUSE bug 1024047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5839">SUSE bug 1024047</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5839">SUSE bug 1024047</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154767" comment="gstreamer-plugins-base-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153927" comment="gstreamer-plugins-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154768" comment="gstreamer-plugins-base-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153928" comment="gstreamer-plugins-base-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154769" comment="gstreamer-plugins-base-devel-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153929" comment="gstreamer-plugins-base-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154770" comment="gstreamer-plugins-base-devel-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154283" comment="gstreamer-plugins-base-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154771" comment="gstreamer-plugins-base-doc-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153930" comment="gstreamer-plugins-base-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154772" comment="gstreamer-plugins-base-lang-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153931" comment="gstreamer-plugins-base-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154773" comment="libgstallocators-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153932" comment="libgstallocators-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154774" comment="libgstallocators-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153933" comment="libgstallocators-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154775" comment="libgstapp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153936" comment="libgstapp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154776" comment="libgstapp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153937" comment="libgstapp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154777" comment="libgstaudio-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153938" comment="libgstaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154778" comment="libgstaudio-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153939" comment="libgstaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154779" comment="libgstfft-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153940" comment="libgstfft-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154780" comment="libgstfft-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153941" comment="libgstfft-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154781" comment="libgstpbutils-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153944" comment="libgstpbutils-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154782" comment="libgstpbutils-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153945" comment="libgstpbutils-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154783" comment="libgstriff-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153946" comment="libgstriff-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154784" comment="libgstriff-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153947" comment="libgstriff-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154785" comment="libgstrtp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153948" comment="libgstrtp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154786" comment="libgstrtp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153949" comment="libgstrtp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154787" comment="libgstrtsp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153950" comment="libgstrtsp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154788" comment="libgstrtsp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153951" comment="libgstrtsp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154789" comment="libgstsdp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153952" comment="libgstsdp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154790" comment="libgstsdp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153953" comment="libgstsdp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154791" comment="libgsttag-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153954" comment="libgsttag-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154792" comment="libgsttag-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153955" comment="libgsttag-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154793" comment="libgstvideo-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153956" comment="libgstvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154794" comment="libgstvideo-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153957" comment="libgstvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154795" comment="typelib-1_0-GstAllocators-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153958" comment="typelib-1_0-GstAllocators-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154796" comment="typelib-1_0-GstApp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153960" comment="typelib-1_0-GstApp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154797" comment="typelib-1_0-GstAudio-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153961" comment="typelib-1_0-GstAudio-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154798" comment="typelib-1_0-GstFft-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153962" comment="typelib-1_0-GstFft-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154799" comment="typelib-1_0-GstPbutils-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153964" comment="typelib-1_0-GstPbutils-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154800" comment="typelib-1_0-GstRtp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153966" comment="typelib-1_0-GstRtp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154801" comment="typelib-1_0-GstRtsp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153967" comment="typelib-1_0-GstRtsp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154802" comment="typelib-1_0-GstSdp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153968" comment="typelib-1_0-GstSdp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154803" comment="typelib-1_0-GstTag-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153969" comment="typelib-1_0-GstTag-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154804" comment="typelib-1_0-GstVideo-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153970" comment="typelib-1_0-GstVideo-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175840" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5840</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5840" source="CVE"/>
    <description>
    The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving the current stts index.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5840.html">CVE-2017-5840</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5840">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5840">SUSE bug 1024034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5840">SUSE bug 1024034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5840">SUSE bug 1024034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5840">SUSE bug 1024034</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154600" comment="gstreamer-plugins-good-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154601" comment="gstreamer-plugins-good-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153916" comment="gstreamer-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154602" comment="gstreamer-plugins-good-doc-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153917" comment="gstreamer-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154603" comment="gstreamer-plugins-good-extra-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153918" comment="gstreamer-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154604" comment="gstreamer-plugins-good-extra-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153919" comment="gstreamer-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154605" comment="gstreamer-plugins-good-lang-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175841" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5841</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5841" source="CVE"/>
    <description>
    The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors involving ncdt tags.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5841.html">CVE-2017-5841</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5841">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5841">SUSE bug 1024030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5841">SUSE bug 1024062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5841">SUSE bug 1024030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5841">SUSE bug 1024030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5841">SUSE bug 1024030</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5841">SUSE bug 1024030</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154600" comment="gstreamer-plugins-good-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154601" comment="gstreamer-plugins-good-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153916" comment="gstreamer-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154602" comment="gstreamer-plugins-good-doc-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153917" comment="gstreamer-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154603" comment="gstreamer-plugins-good-extra-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153918" comment="gstreamer-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154604" comment="gstreamer-plugins-good-extra-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153919" comment="gstreamer-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154605" comment="gstreamer-plugins-good-lang-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175842" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5842</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5842" source="CVE"/>
    <description>
    The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted SMI file, as demonstrated by OneNote_Manager.smi.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5842.html">CVE-2017-5842</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5842">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5842">SUSE bug 1024041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5842">SUSE bug 1024041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5842">SUSE bug 1024041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5842">SUSE bug 1024041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5842">SUSE bug 1024041</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154767" comment="gstreamer-plugins-base-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153927" comment="gstreamer-plugins-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154768" comment="gstreamer-plugins-base-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153928" comment="gstreamer-plugins-base-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154769" comment="gstreamer-plugins-base-devel-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153929" comment="gstreamer-plugins-base-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154770" comment="gstreamer-plugins-base-devel-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154283" comment="gstreamer-plugins-base-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154771" comment="gstreamer-plugins-base-doc-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153930" comment="gstreamer-plugins-base-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154772" comment="gstreamer-plugins-base-lang-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153931" comment="gstreamer-plugins-base-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154773" comment="libgstallocators-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153932" comment="libgstallocators-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154774" comment="libgstallocators-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153933" comment="libgstallocators-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154775" comment="libgstapp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153936" comment="libgstapp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154776" comment="libgstapp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153937" comment="libgstapp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154777" comment="libgstaudio-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153938" comment="libgstaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154778" comment="libgstaudio-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153939" comment="libgstaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154779" comment="libgstfft-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153940" comment="libgstfft-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154780" comment="libgstfft-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153941" comment="libgstfft-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154781" comment="libgstpbutils-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153944" comment="libgstpbutils-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154782" comment="libgstpbutils-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153945" comment="libgstpbutils-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154783" comment="libgstriff-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153946" comment="libgstriff-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154784" comment="libgstriff-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153947" comment="libgstriff-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154785" comment="libgstrtp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153948" comment="libgstrtp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154786" comment="libgstrtp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153949" comment="libgstrtp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154787" comment="libgstrtsp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153950" comment="libgstrtsp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154788" comment="libgstrtsp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153951" comment="libgstrtsp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154789" comment="libgstsdp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153952" comment="libgstsdp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154790" comment="libgstsdp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153953" comment="libgstsdp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154791" comment="libgsttag-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153954" comment="libgsttag-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154792" comment="libgsttag-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153955" comment="libgsttag-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154793" comment="libgstvideo-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153956" comment="libgstvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154794" comment="libgstvideo-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153957" comment="libgstvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154795" comment="typelib-1_0-GstAllocators-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153958" comment="typelib-1_0-GstAllocators-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154796" comment="typelib-1_0-GstApp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153960" comment="typelib-1_0-GstApp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154797" comment="typelib-1_0-GstAudio-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153961" comment="typelib-1_0-GstAudio-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154798" comment="typelib-1_0-GstFft-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153962" comment="typelib-1_0-GstFft-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154799" comment="typelib-1_0-GstPbutils-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153964" comment="typelib-1_0-GstPbutils-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154800" comment="typelib-1_0-GstRtp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153966" comment="typelib-1_0-GstRtp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154801" comment="typelib-1_0-GstRtsp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153967" comment="typelib-1_0-GstRtsp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154802" comment="typelib-1_0-GstSdp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153968" comment="typelib-1_0-GstSdp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154803" comment="typelib-1_0-GstTag-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153969" comment="typelib-1_0-GstTag-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154804" comment="typelib-1_0-GstVideo-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153970" comment="typelib-1_0-GstVideo-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5843</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5843" source="CVE"/>
    <description>
    Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service (crash) via vectors involving stream tags, as demonstrated by 02785736.mxf.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5843.html">CVE-2017-5843</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5843">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5843">SUSE bug 1024044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5843">SUSE bug 1024044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5843">SUSE bug 1024044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5843">SUSE bug 1024044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5843">SUSE bug 1024044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5843">SUSE bug 1024044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154555" comment="gstreamer-plugins-bad-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153876" comment="gstreamer-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154556" comment="gstreamer-plugins-bad-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153877" comment="gstreamer-plugins-bad-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154557" comment="gstreamer-plugins-bad-devel-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153878" comment="gstreamer-plugins-bad-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154558" comment="gstreamer-plugins-bad-doc-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153879" comment="gstreamer-plugins-bad-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154559" comment="gstreamer-plugins-bad-lang-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153880" comment="gstreamer-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154560" comment="libgstadaptivedemux-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154275" comment="libgstadaptivedemux-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154561" comment="libgstadaptivedemux-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154276" comment="libgstadaptivedemux-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154562" comment="libgstbadaudio-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154277" comment="libgstbadaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154563" comment="libgstbadaudio-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154278" comment="libgstbadaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154564" comment="libgstbadbase-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153881" comment="libgstbadbase-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154565" comment="libgstbadbase-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153882" comment="libgstbadbase-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154566" comment="libgstbadvideo-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153883" comment="libgstbadvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154567" comment="libgstbadvideo-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153884" comment="libgstbadvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154568" comment="libgstbasecamerabinsrc-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153886" comment="libgstbasecamerabinsrc-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154569" comment="libgstbasecamerabinsrc-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153887" comment="libgstbasecamerabinsrc-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154570" comment="libgstcodecparsers-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153890" comment="libgstcodecparsers-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154571" comment="libgstcodecparsers-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153891" comment="libgstcodecparsers-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154572" comment="libgstgl-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153892" comment="libgstgl-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154573" comment="libgstgl-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153893" comment="libgstgl-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154574" comment="libgstinsertbin-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153894" comment="libgstinsertbin-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154575" comment="libgstinsertbin-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153895" comment="libgstinsertbin-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154576" comment="libgstmpegts-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153896" comment="libgstmpegts-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154577" comment="libgstmpegts-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153897" comment="libgstmpegts-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154578" comment="libgstphotography-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153899" comment="libgstphotography-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154579" comment="libgstphotography-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153900" comment="libgstphotography-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154580" comment="libgstplayer-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154279" comment="libgstplayer-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154581" comment="libgstplayer-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154280" comment="libgstplayer-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154582" comment="libgsturidownloader-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153902" comment="libgsturidownloader-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154583" comment="libgsturidownloader-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153903" comment="libgsturidownloader-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154584" comment="libgstvdpau-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154281" comment="libgstvdpau is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154585" comment="libgstvdpau-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154282" comment="libgstvdpau-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154586" comment="libgstwayland-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153905" comment="libgstwayland-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154587" comment="libgstwayland-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153906" comment="libgstwayland-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175844" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5844</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5844" source="CVE"/>
    <description>
    The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (floating point exception and crash) via a crafted ASF file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5844.html">CVE-2017-5844</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5844">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5844">SUSE bug 1024079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5844">SUSE bug 1024079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5844">SUSE bug 1024079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5844">SUSE bug 1024079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5844">SUSE bug 1024079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5844">SUSE bug 1024079</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5844">SUSE bug 1024079</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154767" comment="gstreamer-plugins-base-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153927" comment="gstreamer-plugins-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154768" comment="gstreamer-plugins-base-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153928" comment="gstreamer-plugins-base-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154769" comment="gstreamer-plugins-base-devel-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153929" comment="gstreamer-plugins-base-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154770" comment="gstreamer-plugins-base-devel-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154283" comment="gstreamer-plugins-base-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154771" comment="gstreamer-plugins-base-doc-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153930" comment="gstreamer-plugins-base-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154772" comment="gstreamer-plugins-base-lang-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153931" comment="gstreamer-plugins-base-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154773" comment="libgstallocators-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153932" comment="libgstallocators-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154774" comment="libgstallocators-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153933" comment="libgstallocators-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154775" comment="libgstapp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153936" comment="libgstapp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154776" comment="libgstapp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153937" comment="libgstapp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154777" comment="libgstaudio-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153938" comment="libgstaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154778" comment="libgstaudio-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153939" comment="libgstaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154779" comment="libgstfft-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153940" comment="libgstfft-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154780" comment="libgstfft-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153941" comment="libgstfft-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154781" comment="libgstpbutils-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153944" comment="libgstpbutils-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154782" comment="libgstpbutils-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153945" comment="libgstpbutils-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154783" comment="libgstriff-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153946" comment="libgstriff-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154784" comment="libgstriff-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153947" comment="libgstriff-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154785" comment="libgstrtp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153948" comment="libgstrtp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154786" comment="libgstrtp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153949" comment="libgstrtp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154787" comment="libgstrtsp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153950" comment="libgstrtsp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154788" comment="libgstrtsp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153951" comment="libgstrtsp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154789" comment="libgstsdp-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153952" comment="libgstsdp-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154790" comment="libgstsdp-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153953" comment="libgstsdp-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154791" comment="libgsttag-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153954" comment="libgsttag-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154792" comment="libgsttag-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153955" comment="libgsttag-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154793" comment="libgstvideo-1_0-0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153956" comment="libgstvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154794" comment="libgstvideo-1_0-0-32bit-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153957" comment="libgstvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154795" comment="typelib-1_0-GstAllocators-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153958" comment="typelib-1_0-GstAllocators-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154796" comment="typelib-1_0-GstApp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153960" comment="typelib-1_0-GstApp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154797" comment="typelib-1_0-GstAudio-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153961" comment="typelib-1_0-GstAudio-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154798" comment="typelib-1_0-GstFft-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153962" comment="typelib-1_0-GstFft-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154799" comment="typelib-1_0-GstPbutils-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153964" comment="typelib-1_0-GstPbutils-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154800" comment="typelib-1_0-GstRtp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153966" comment="typelib-1_0-GstRtp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154801" comment="typelib-1_0-GstRtsp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153967" comment="typelib-1_0-GstRtsp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154802" comment="typelib-1_0-GstSdp-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153968" comment="typelib-1_0-GstSdp-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154803" comment="typelib-1_0-GstTag-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153969" comment="typelib-1_0-GstTag-1_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154804" comment="typelib-1_0-GstVideo-1_0-1.8.3-5.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153970" comment="typelib-1_0-GstVideo-1_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175845" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5845</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5845" source="CVE"/>
    <description>
    The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a ncdt sub-tag that "goes behind" the surrounding tag.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5845.html">CVE-2017-5845</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5845">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5845">SUSE bug 1024062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5845">SUSE bug 1024062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5845">SUSE bug 1024062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5845">SUSE bug 1024062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5845">SUSE bug 1024062</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154600" comment="gstreamer-plugins-good-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153915" comment="gstreamer-plugins-good is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154601" comment="gstreamer-plugins-good-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153916" comment="gstreamer-plugins-good-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154602" comment="gstreamer-plugins-good-doc-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153917" comment="gstreamer-plugins-good-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154603" comment="gstreamer-plugins-good-extra-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153918" comment="gstreamer-plugins-good-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154604" comment="gstreamer-plugins-good-extra-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153919" comment="gstreamer-plugins-good-extra-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154605" comment="gstreamer-plugins-good-lang-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153920" comment="gstreamer-plugins-good-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5848</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5848" source="CVE"/>
    <description>
    The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5848.html">CVE-2017-5848</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5848">SUSE bug 1023259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5848">SUSE bug 1024068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5848">SUSE bug 1024068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5848">SUSE bug 1024068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5848">SUSE bug 1024068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5848">SUSE bug 1024068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5848">SUSE bug 1024068</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5848">SUSE bug 1024068</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154555" comment="gstreamer-plugins-bad-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153876" comment="gstreamer-plugins-bad is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154556" comment="gstreamer-plugins-bad-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153877" comment="gstreamer-plugins-bad-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154557" comment="gstreamer-plugins-bad-devel-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153878" comment="gstreamer-plugins-bad-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154558" comment="gstreamer-plugins-bad-doc-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153879" comment="gstreamer-plugins-bad-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154559" comment="gstreamer-plugins-bad-lang-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153880" comment="gstreamer-plugins-bad-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154560" comment="libgstadaptivedemux-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154275" comment="libgstadaptivedemux-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154561" comment="libgstadaptivedemux-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154276" comment="libgstadaptivedemux-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154562" comment="libgstbadaudio-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154277" comment="libgstbadaudio-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154563" comment="libgstbadaudio-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154278" comment="libgstbadaudio-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154564" comment="libgstbadbase-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153881" comment="libgstbadbase-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154565" comment="libgstbadbase-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153882" comment="libgstbadbase-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154566" comment="libgstbadvideo-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153883" comment="libgstbadvideo-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154567" comment="libgstbadvideo-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153884" comment="libgstbadvideo-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154568" comment="libgstbasecamerabinsrc-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153886" comment="libgstbasecamerabinsrc-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154569" comment="libgstbasecamerabinsrc-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153887" comment="libgstbasecamerabinsrc-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154570" comment="libgstcodecparsers-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153890" comment="libgstcodecparsers-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154571" comment="libgstcodecparsers-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153891" comment="libgstcodecparsers-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154572" comment="libgstgl-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153892" comment="libgstgl-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154573" comment="libgstgl-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153893" comment="libgstgl-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154574" comment="libgstinsertbin-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153894" comment="libgstinsertbin-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154575" comment="libgstinsertbin-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153895" comment="libgstinsertbin-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154576" comment="libgstmpegts-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153896" comment="libgstmpegts-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154577" comment="libgstmpegts-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153897" comment="libgstmpegts-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154578" comment="libgstphotography-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153899" comment="libgstphotography-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154579" comment="libgstphotography-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153900" comment="libgstphotography-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154580" comment="libgstplayer-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154279" comment="libgstplayer-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154581" comment="libgstplayer-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154280" comment="libgstplayer-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154582" comment="libgsturidownloader-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153902" comment="libgsturidownloader-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154583" comment="libgsturidownloader-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153903" comment="libgsturidownloader-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154584" comment="libgstvdpau-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154281" comment="libgstvdpau is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154585" comment="libgstvdpau-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154282" comment="libgstvdpau-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154586" comment="libgstwayland-1_0-0-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153905" comment="libgstwayland-1_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154587" comment="libgstwayland-1_0-0-32bit-1.8.3-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153906" comment="libgstwayland-1_0-0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175856" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5856</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5856" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5856" source="CVE"/>
    <description>
    Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5856.html">CVE-2017-5856</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5856">SUSE bug 1023053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5856">SUSE bug 1023053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5856">SUSE bug 1024186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5856">SUSE bug 1024186</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5856">SUSE bug 1023053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5856">SUSE bug 1023053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5856">SUSE bug 1023053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5856">SUSE bug 1023053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5856">SUSE bug 1023053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5856">SUSE bug 1024186</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175857" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5857</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5857" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5857" source="CVE"/>
    <description>
    Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_UNREF commands sent without detaching the backing storage beforehand.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5857.html">CVE-2017-5857</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5857">SUSE bug 1023073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5857">SUSE bug 1023073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5857">SUSE bug 1023073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5857">SUSE bug 1023073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5857">SUSE bug 1023073</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175896" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5896</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5896" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5896" source="CVE"/>
    <description>
    Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5896.html">CVE-2017-5896</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5896">SUSE bug 1024679</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5896">SUSE bug 1031053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5896">SUSE bug 1023761</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148570" comment="mupdf-1.10a-11.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148571" comment="mupdf-devel-static-1.10a-11.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175897" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5897</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5897" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5897" source="CVE"/>
    <description>
    The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5897.html">CVE-2017-5897</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1025039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1025039</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5897">SUSE bug 1023762</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148809" comment="kernel-debug-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148810" comment="kernel-debug-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148811" comment="kernel-debug-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148812" comment="kernel-default-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148813" comment="kernel-default-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148814" comment="kernel-default-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148815" comment="kernel-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148816" comment="kernel-docs-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148817" comment="kernel-docs-html-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148818" comment="kernel-docs-pdf-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148819" comment="kernel-macros-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148820" comment="kernel-obs-build-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148821" comment="kernel-obs-qa-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148822" comment="kernel-source-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148823" comment="kernel-source-vanilla-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148824" comment="kernel-syms-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148825" comment="kernel-vanilla-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148826" comment="kernel-vanilla-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148827" comment="kernel-vanilla-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175898" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5898</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5898" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5898" source="CVE"/>
    <description>
    Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5898.html">CVE-2017-5898</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1023907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1023907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1023907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1023907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1023907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1023907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1023907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5898">SUSE bug 1024307</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149598" comment="qemu-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149599" comment="qemu-arm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149600" comment="qemu-block-curl-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149601" comment="qemu-block-dmg-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149602" comment="qemu-block-iscsi-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149603" comment="qemu-block-rbd-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149604" comment="qemu-block-ssh-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149605" comment="qemu-extra-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149606" comment="qemu-guest-agent-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149607" comment="qemu-ipxe-1.0.0-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149608" comment="qemu-kvm-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149609" comment="qemu-lang-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149610" comment="qemu-linux-user-2.6.2-29.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149611" comment="qemu-ppc-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149612" comment="qemu-s390-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149613" comment="qemu-seabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149614" comment="qemu-sgabios-8-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149615" comment="qemu-testsuite-2.6.2-29.8 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149616" comment="qemu-tools-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149617" comment="qemu-vgabios-1.9.1-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149618" comment="qemu-x86-2.6.2-29.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175930" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5930</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5930" source="CVE"/>
    <description>
    The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5930.html">CVE-2017-5930</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5930">SUSE bug 1024211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5930">SUSE bug 1024211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5930">SUSE bug 1024211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5930">SUSE bug 1024211</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148517" comment="postfixadmin-3.0.2-3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154028" comment="postfixadmin is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175937" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5937</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5937" source="CVE"/>
    <description>
    The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5937.html">CVE-2017-5937</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1041089</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5937">SUSE bug 1024232</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175938" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5938</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5938" source="CVE"/>
    <description>
    Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web script or HTML via the nav_data name.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5938.html">CVE-2017-5938</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5938">SUSE bug 1024393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5938">SUSE bug 1024393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5938">SUSE bug 1024393</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5938">SUSE bug 1024393</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148609" comment="viewvc-1.1.26-6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151738" comment="viewvc is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175946" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5946</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5946" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5946" source="CVE"/>
    <description>
    The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5946.html">CVE-2017-5946</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5946">SUSE bug 1027050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5946">SUSE bug 1027050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5946">SUSE bug 1027050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5946">SUSE bug 1027050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5946">SUSE bug 1027050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5946">SUSE bug 1027050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161714" comment="ruby2.1-rubygem-rubyzip-1.1.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161715" comment="ruby2.1-rubygem-rubyzip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161716" comment="ruby2.1-rubygem-rubyzip-doc-1.1.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161717" comment="ruby2.1-rubygem-rubyzip-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161718" comment="ruby2.1-rubygem-rubyzip-testsuite-1.1.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161719" comment="ruby2.1-rubygem-rubyzip-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161720" comment="rubygem-rubyzip-1.1.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161721" comment="rubygem-rubyzip is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175951" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5951</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5951" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5951" source="CVE"/>
    <description>
    The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5951.html">CVE-2017-5951</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5951">SUSE bug 1032114</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155158" comment="ghostscript-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155159" comment="ghostscript-devel-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151934" comment="ghostscript-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155160" comment="ghostscript-mini-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151935" comment="ghostscript-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155161" comment="ghostscript-mini-devel-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151936" comment="ghostscript-mini-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155162" comment="ghostscript-x11-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175953" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5953</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5953" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5953" source="CVE"/>
    <description>
    vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5953.html">CVE-2017-5953</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5953">SUSE bug 1024724</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158075" comment="gvim-7.4.326-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151192" comment="gvim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158076" comment="vim-7.4.326-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158077" comment="vim-data-7.4.326-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175956" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5956</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5956" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5956" source="CVE"/>
    <description>
    The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors involving vertext_buffer_index.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5956.html">CVE-2017-5956</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5956">SUSE bug 1024992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5956">SUSE bug 1024992</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5956">SUSE bug 1024992</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175957" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5957</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5957" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5957" source="CVE"/>
    <description>
    Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the "nr_cbufs" argument.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5957.html">CVE-2017-5957</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5957">SUSE bug 1024993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5957">SUSE bug 1024993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5957">SUSE bug 1024993</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5969</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5969" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5969" source="CVE"/>
    <description>
    ** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document.  NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser."
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5969.html">CVE-2017-5969</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1049467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5969">SUSE bug 1024989</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157788" comment="libxml2-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157789" comment="libxml2-2-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157790" comment="libxml2-2-32bit-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157791" comment="libxml2-devel-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157792" comment="libxml2-devel-32bit-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157793" comment="libxml2-doc-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157794" comment="libxml2-tools-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157795" comment="python-libxml2-2.9.4-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175970" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5970</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5970" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5970" source="CVE"/>
    <description>
    The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service (system crash) via (1) an application that makes crafted system calls or possibly (2) IPv4 traffic with invalid IP options.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5970.html">CVE-2017-5970</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1024938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5970">SUSE bug 1025013</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148809" comment="kernel-debug-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148810" comment="kernel-debug-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148811" comment="kernel-debug-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148812" comment="kernel-default-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148813" comment="kernel-default-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148814" comment="kernel-default-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148815" comment="kernel-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148816" comment="kernel-docs-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148817" comment="kernel-docs-html-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148818" comment="kernel-docs-pdf-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148819" comment="kernel-macros-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148820" comment="kernel-obs-build-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148821" comment="kernel-obs-qa-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148822" comment="kernel-source-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148823" comment="kernel-source-vanilla-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148824" comment="kernel-syms-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148825" comment="kernel-vanilla-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148826" comment="kernel-vanilla-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148827" comment="kernel-vanilla-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175973" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5973</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5973" source="CVE"/>
    <description>
    The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5973.html">CVE-2017-5973</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5973">SUSE bug 1025109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5973">SUSE bug 1025109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5973">SUSE bug 1025188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5973">SUSE bug 1025188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5973">SUSE bug 1025109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5973">SUSE bug 1025109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5973">SUSE bug 1025109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5973">SUSE bug 1025188</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5973">SUSE bug 1025109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175974" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5974</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5974" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5974" source="CVE"/>
    <description>
    Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5974.html">CVE-2017-5974</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5974">SUSE bug 1024517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5974">SUSE bug 1024517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5974">SUSE bug 1024517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5974">SUSE bug 1024517</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5974">SUSE bug 1024517</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155136" comment="libzzip-0-13-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155239" comment="libzzip-0-13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155137" comment="libzzip-0-13-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155241" comment="libzzip-0-13-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155138" comment="zziplib-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155243" comment="zziplib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155139" comment="zziplib-devel-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155245" comment="zziplib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155140" comment="zziplib-devel-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155247" comment="zziplib-devel-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175975" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5975</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5975" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5975" source="CVE"/>
    <description>
    Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5975.html">CVE-2017-5975</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5975">SUSE bug 1024528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5975">SUSE bug 1024528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5975">SUSE bug 1024528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5975">SUSE bug 1024528</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5975">SUSE bug 1024528</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155136" comment="libzzip-0-13-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155239" comment="libzzip-0-13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155137" comment="libzzip-0-13-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155241" comment="libzzip-0-13-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155138" comment="zziplib-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155243" comment="zziplib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155139" comment="zziplib-devel-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155245" comment="zziplib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155140" comment="zziplib-devel-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155247" comment="zziplib-devel-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5976</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5976" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5976" source="CVE"/>
    <description>
    Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5976.html">CVE-2017-5976</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5976">SUSE bug 1024531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5976">SUSE bug 1024531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5976">SUSE bug 1024531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5976">SUSE bug 1024531</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5976">SUSE bug 1024531</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155136" comment="libzzip-0-13-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155239" comment="libzzip-0-13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155137" comment="libzzip-0-13-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155241" comment="libzzip-0-13-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155138" comment="zziplib-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155243" comment="zziplib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155139" comment="zziplib-devel-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155245" comment="zziplib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155140" comment="zziplib-devel-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155247" comment="zziplib-devel-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175977" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5977</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5977" source="CVE"/>
    <description>
    The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5977.html">CVE-2017-5977</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5977">SUSE bug 1024534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5977">SUSE bug 1024534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5977">SUSE bug 1024534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5977">SUSE bug 1024534</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5977">SUSE bug 1024534</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155136" comment="libzzip-0-13-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155239" comment="libzzip-0-13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155137" comment="libzzip-0-13-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155241" comment="libzzip-0-13-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155138" comment="zziplib-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155243" comment="zziplib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155139" comment="zziplib-devel-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155245" comment="zziplib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155140" comment="zziplib-devel-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155247" comment="zziplib-devel-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175978" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5978</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5978" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5978" source="CVE"/>
    <description>
    The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5978.html">CVE-2017-5978</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5978">SUSE bug 1024533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5978">SUSE bug 1024533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5978">SUSE bug 1024533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5978">SUSE bug 1024533</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5978">SUSE bug 1024533</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155136" comment="libzzip-0-13-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155239" comment="libzzip-0-13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155137" comment="libzzip-0-13-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155241" comment="libzzip-0-13-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155138" comment="zziplib-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155243" comment="zziplib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155139" comment="zziplib-devel-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155245" comment="zziplib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155140" comment="zziplib-devel-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155247" comment="zziplib-devel-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175979" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5979</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5979" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5979" source="CVE"/>
    <description>
    The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5979.html">CVE-2017-5979</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5979">SUSE bug 1024535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5979">SUSE bug 1024535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5979">SUSE bug 1024535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5979">SUSE bug 1024535</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5979">SUSE bug 1024535</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155136" comment="libzzip-0-13-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155239" comment="libzzip-0-13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155137" comment="libzzip-0-13-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155241" comment="libzzip-0-13-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155138" comment="zziplib-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155243" comment="zziplib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155139" comment="zziplib-devel-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155245" comment="zziplib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155140" comment="zziplib-devel-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155247" comment="zziplib-devel-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5980</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5980" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5980" source="CVE"/>
    <description>
    The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5980.html">CVE-2017-5980</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5980">SUSE bug 1024536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5980">SUSE bug 1024536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5980">SUSE bug 1024536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5980">SUSE bug 1024536</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5980">SUSE bug 1024536</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155136" comment="libzzip-0-13-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155239" comment="libzzip-0-13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155137" comment="libzzip-0-13-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155241" comment="libzzip-0-13-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155138" comment="zziplib-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155243" comment="zziplib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155139" comment="zziplib-devel-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155245" comment="zziplib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155140" comment="zziplib-devel-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155247" comment="zziplib-devel-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175981" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5981</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5981" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5981" source="CVE"/>
    <description>
    seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5981.html">CVE-2017-5981</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5981">SUSE bug 1024539</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5981">SUSE bug 1024539</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5981">SUSE bug 1024539</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5981">SUSE bug 1024539</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5981">SUSE bug 1024539</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155136" comment="libzzip-0-13-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155239" comment="libzzip-0-13 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155137" comment="libzzip-0-13-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155241" comment="libzzip-0-13-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155138" comment="zziplib-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155243" comment="zziplib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155139" comment="zziplib-devel-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155245" comment="zziplib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155140" comment="zziplib-devel-32bit-0.13.62-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155247" comment="zziplib-devel-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175985" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5985</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5985" source="CVE"/>
    <description>
    lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5985.html">CVE-2017-5985</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5985">SUSE bug 1028264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5985">SUSE bug 1028264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5985">SUSE bug 1028264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5985">SUSE bug 1028264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5985">SUSE bug 1028264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5985">SUSE bug 1028264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5985">SUSE bug 1028264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5985">SUSE bug 1028264</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5985">SUSE bug 1028264</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154079" comment="lxc-1.1.5-15.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153860" comment="lxc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154080" comment="lxc-devel-1.1.5-15.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153861" comment="lxc-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175986" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5986</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5986" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5986" source="CVE"/>
    <description>
    Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5986.html">CVE-2017-5986</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5986">SUSE bug 1025235</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148809" comment="kernel-debug-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148810" comment="kernel-debug-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148811" comment="kernel-debug-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148812" comment="kernel-default-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148813" comment="kernel-default-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148814" comment="kernel-default-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148815" comment="kernel-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148816" comment="kernel-docs-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148817" comment="kernel-docs-html-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148818" comment="kernel-docs-pdf-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148819" comment="kernel-macros-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148820" comment="kernel-obs-build-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148821" comment="kernel-obs-qa-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148822" comment="kernel-source-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148823" comment="kernel-source-vanilla-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148824" comment="kernel-syms-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148825" comment="kernel-vanilla-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148826" comment="kernel-vanilla-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148827" comment="kernel-vanilla-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175987" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5987</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5987" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5987" source="CVE"/>
    <description>
    The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5987.html">CVE-2017-5987</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5987">SUSE bug 1025311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5987">SUSE bug 1025311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5987">SUSE bug 1025311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5987">SUSE bug 1025311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5987">SUSE bug 1025311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5987">SUSE bug 1025311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5987">SUSE bug 1025311</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5987">SUSE bug 1025311</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175992" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5992</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5992" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5992" source="CVE"/>
    <description>
    Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5992.html">CVE-2017-5992</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5992">SUSE bug 1025592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5992">SUSE bug 1025592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5992">SUSE bug 1025592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5992">SUSE bug 1025592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5992">SUSE bug 1025592</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5992">SUSE bug 1025592</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169759" comment="python-openpyxl-2.2.2-4.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169760" comment="python-openpyxl is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175993" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5993</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5993" source="CVE"/>
    <description>
    Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_CCMD_BLIT commands.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5993.html">CVE-2017-5993</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5993">SUSE bug 1025505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5993">SUSE bug 1025505</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5993">SUSE bug 1025505</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20175994" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-5994</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-5994" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5994" source="CVE"/>
    <description>
    Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and crash) via the num_elements parameter.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-5994.html">CVE-2017-5994</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5994">SUSE bug 1025507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5994">SUSE bug 1025507</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-5994">SUSE bug 1025507</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176009" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6009</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6009" source="CVE"/>
    <description>
    An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "decode_ne_resource_id" function in the "restable.c" source file. This is happening because the "len" parameter for memcpy is not checked for size and thus becomes a negative integer in the process, resulting in a failed memcpy. This affects wrestool.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6009.html">CVE-2017-6009</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6009">SUSE bug 1025703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6009">SUSE bug 1025703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6009">SUSE bug 1025703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6009">SUSE bug 1025703</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6009">SUSE bug 1025703</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161471" comment="icoutils-0.31.3-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154006" comment="icoutils is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176010" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6010</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6010" source="CVE"/>
    <description>
    An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extract_icons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6010.html">CVE-2017-6010</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6010">SUSE bug 1025700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6010">SUSE bug 1025700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6010">SUSE bug 1025700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6010">SUSE bug 1025700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6010">SUSE bug 1025700</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161471" comment="icoutils-0.31.3-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154006" comment="icoutils is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176011" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6011</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6011" source="CVE"/>
    <description>
    An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the "simple_vec" function in the "extract.c" source file. This affects icotool.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6011.html">CVE-2017-6011</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6011">SUSE bug 1025700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6011">SUSE bug 1025700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6011">SUSE bug 1025700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6011">SUSE bug 1025700</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6011">SUSE bug 1025700</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161471" comment="icoutils-0.31.3-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154006" comment="icoutils is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6074</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6074" source="CVE"/>
    <description>
    The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6074.html">CVE-2017-6074</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1033287</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6074">SUSE bug 1026024</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148809" comment="kernel-debug-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148810" comment="kernel-debug-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148811" comment="kernel-debug-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148812" comment="kernel-default-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148813" comment="kernel-default-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148814" comment="kernel-default-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148815" comment="kernel-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148816" comment="kernel-docs-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148817" comment="kernel-docs-html-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148818" comment="kernel-docs-pdf-4.4.49-16.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148819" comment="kernel-macros-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148820" comment="kernel-obs-build-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148821" comment="kernel-obs-qa-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148822" comment="kernel-source-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148823" comment="kernel-source-vanilla-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148824" comment="kernel-syms-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148825" comment="kernel-vanilla-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148826" comment="kernel-vanilla-base-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009148827" comment="kernel-vanilla-devel-4.4.49-16.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176188" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6188</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6188" source="CVE"/>
    <description>
    Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET parameters allows overwriting any file accessible to the www-data user.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6188.html">CVE-2017-6188</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6188">SUSE bug 1026539</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6188">SUSE bug 1026539</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6188">SUSE bug 1026539</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6188">SUSE bug 1026539</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6188">SUSE bug 1026539</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6188">SUSE bug 1026539</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149235" comment="munin-2.0.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154029" comment="munin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149236" comment="munin-node-2.0.25-9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154030" comment="munin-node is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6209</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6209" source="CVE"/>
    <description>
    Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium driver in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to parsing properties.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6209.html">CVE-2017-6209</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6209">SUSE bug 1026723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6209">SUSE bug 1026723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6209">SUSE bug 1026723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6209">SUSE bug 1026723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6209">SUSE bug 1026723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6209">SUSE bug 1026723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6209">SUSE bug 1026723</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6209">SUSE bug 1026723</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6210" source="CVE"/>
    <description>
    The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointer dereference and QEMU process crash) by destroying context 0 (zero).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6210.html">CVE-2017-6210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6210">SUSE bug 1026725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6210">SUSE bug 1026725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6210">SUSE bug 1026725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6210">SUSE bug 1026725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6210">SUSE bug 1026725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6210">SUSE bug 1026725</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6210">SUSE bug 1026725</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176214" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6214</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6214" source="CVE"/>
    <description>
    The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6214.html">CVE-2017-6214</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6214">SUSE bug 1026722</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150470" comment="kernel-debug-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150471" comment="kernel-debug-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150472" comment="kernel-debug-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150473" comment="kernel-default-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150474" comment="kernel-default-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150475" comment="kernel-default-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150476" comment="kernel-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150477" comment="kernel-docs-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150478" comment="kernel-docs-html-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150479" comment="kernel-docs-pdf-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150480" comment="kernel-macros-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150481" comment="kernel-obs-build-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150482" comment="kernel-obs-qa-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150483" comment="kernel-source-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150484" comment="kernel-source-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150485" comment="kernel-syms-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150486" comment="kernel-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150487" comment="kernel-vanilla-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150488" comment="kernel-vanilla-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176312" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6312</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6312" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6312" source="CVE"/>
    <description>
    Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6312.html">CVE-2017-6312</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6312">SUSE bug 1027026</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163471" comment="gdk-pixbuf-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153060" comment="gdk-pixbuf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163472" comment="gdk-pixbuf-devel-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151614" comment="gdk-pixbuf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163473" comment="gdk-pixbuf-devel-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153061" comment="gdk-pixbuf-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163474" comment="gdk-pixbuf-lang-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163475" comment="gdk-pixbuf-query-loaders-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163476" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151617" comment="gdk-pixbuf-query-loaders-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163477" comment="libgdk_pixbuf-2_0-0-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163478" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151619" comment="libgdk_pixbuf-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163479" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176313" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6313</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6313" source="CVE"/>
    <description>
    Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6313.html">CVE-2017-6313</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6313">SUSE bug 1027024</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163471" comment="gdk-pixbuf-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153060" comment="gdk-pixbuf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163472" comment="gdk-pixbuf-devel-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151614" comment="gdk-pixbuf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163473" comment="gdk-pixbuf-devel-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153061" comment="gdk-pixbuf-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163474" comment="gdk-pixbuf-lang-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163475" comment="gdk-pixbuf-query-loaders-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163476" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151617" comment="gdk-pixbuf-query-loaders-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163477" comment="libgdk_pixbuf-2_0-0-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163478" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151619" comment="libgdk_pixbuf-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163479" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176314" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6314</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6314" source="CVE"/>
    <description>
    The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6314.html">CVE-2017-6314</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027024</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6314">SUSE bug 1027025</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163471" comment="gdk-pixbuf-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153060" comment="gdk-pixbuf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163472" comment="gdk-pixbuf-devel-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151614" comment="gdk-pixbuf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163473" comment="gdk-pixbuf-devel-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153061" comment="gdk-pixbuf-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163474" comment="gdk-pixbuf-lang-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151615" comment="gdk-pixbuf-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163475" comment="gdk-pixbuf-query-loaders-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151616" comment="gdk-pixbuf-query-loaders is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163476" comment="gdk-pixbuf-query-loaders-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151617" comment="gdk-pixbuf-query-loaders-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163477" comment="libgdk_pixbuf-2_0-0-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151618" comment="libgdk_pixbuf-2_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163478" comment="libgdk_pixbuf-2_0-0-32bit-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151619" comment="libgdk_pixbuf-2_0-0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163479" comment="typelib-1_0-GdkPixbuf-2_0-2.34.0-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151620" comment="typelib-1_0-GdkPixbuf-2_0 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176317" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6317</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6317" source="CVE"/>
    <description>
    Memory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via vectors involving the sprog variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6317.html">CVE-2017-6317</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6317">SUSE bug 1026922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6317">SUSE bug 1026922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6317">SUSE bug 1026922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6317">SUSE bug 1026922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6317">SUSE bug 1026922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6317">SUSE bug 1026922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6317">SUSE bug 1026922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6317">SUSE bug 1026922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6317">SUSE bug 1026922</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176335" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6335</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6335" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6335" source="CVE"/>
    <description>
    The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a small samples per pixel value in a CMYKA TIFF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6335.html">CVE-2017-6335</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6335">SUSE bug 1027255</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150416" comment="GraphicsMagick-1.3.25-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150417" comment="GraphicsMagick-devel-1.3.25-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150418" comment="libGraphicsMagick++-Q16-12-1.3.25-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150419" comment="libGraphicsMagick++-devel-1.3.25-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150420" comment="libGraphicsMagick-Q16-3-1.3.25-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150421" comment="libGraphicsMagick3-config-1.3.25-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150422" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150423" comment="perl-GraphicsMagick-1.3.25-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6345</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6345" source="CVE"/>
    <description>
    The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6345.html">CVE-2017-6345</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6345">SUSE bug 1027190</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150470" comment="kernel-debug-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150471" comment="kernel-debug-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150472" comment="kernel-debug-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150473" comment="kernel-default-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150474" comment="kernel-default-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150475" comment="kernel-default-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150476" comment="kernel-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150477" comment="kernel-docs-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150478" comment="kernel-docs-html-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150479" comment="kernel-docs-pdf-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150480" comment="kernel-macros-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150481" comment="kernel-obs-build-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150482" comment="kernel-obs-qa-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150483" comment="kernel-source-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150484" comment="kernel-source-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150485" comment="kernel-syms-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150486" comment="kernel-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150487" comment="kernel-vanilla-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150488" comment="kernel-vanilla-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6346</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6346" source="CVE"/>
    <description>
    Race condition in net/packet/af_packet.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that makes PACKET_FANOUT setsockopt system calls.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6346.html">CVE-2017-6346</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1027189</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1064388</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6346">SUSE bug 1064388</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150470" comment="kernel-debug-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150471" comment="kernel-debug-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150472" comment="kernel-debug-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150473" comment="kernel-default-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150474" comment="kernel-default-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150475" comment="kernel-default-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150476" comment="kernel-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150477" comment="kernel-docs-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150478" comment="kernel-docs-html-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150479" comment="kernel-docs-pdf-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150480" comment="kernel-macros-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150481" comment="kernel-obs-build-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150482" comment="kernel-obs-qa-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150483" comment="kernel-source-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150484" comment="kernel-source-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150485" comment="kernel-syms-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150486" comment="kernel-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150487" comment="kernel-vanilla-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150488" comment="kernel-vanilla-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6347</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6347" source="CVE"/>
    <description>
    The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted system calls, as demonstrated by use of the MSG_MORE flag in conjunction with loopback UDP transmission.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6347.html">CVE-2017-6347</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6347">SUSE bug 1027179</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150470" comment="kernel-debug-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150471" comment="kernel-debug-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150472" comment="kernel-debug-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150473" comment="kernel-default-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150474" comment="kernel-default-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150475" comment="kernel-default-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150476" comment="kernel-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150477" comment="kernel-docs-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150478" comment="kernel-docs-html-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150479" comment="kernel-docs-pdf-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150480" comment="kernel-macros-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150481" comment="kernel-obs-build-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150482" comment="kernel-obs-qa-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150483" comment="kernel-source-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150484" comment="kernel-source-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150485" comment="kernel-syms-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150486" comment="kernel-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150487" comment="kernel-vanilla-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150488" comment="kernel-vanilla-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6349</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6349" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6349" source="CVE"/>
    <description>
    An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6349.html">CVE-2017-6349</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6349">SUSE bug 1027057</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158075" comment="gvim-7.4.326-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151192" comment="gvim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158076" comment="vim-7.4.326-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158077" comment="vim-data-7.4.326-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6350</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6350" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6350" source="CVE"/>
    <description>
    An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6350.html">CVE-2017-6350</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6350">SUSE bug 1027053</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158075" comment="gvim-7.4.326-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151192" comment="gvim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158076" comment="vim-7.4.326-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151193" comment="vim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158077" comment="vim-data-7.4.326-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151194" comment="vim-data is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6353</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6353" source="CVE"/>
    <description>
    net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service (invalid unlock and double free) via a multithreaded application.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6353.html">CVE-2017-6353</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1025235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6353">SUSE bug 1027066</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150470" comment="kernel-debug-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150471" comment="kernel-debug-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150472" comment="kernel-debug-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150473" comment="kernel-default-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150474" comment="kernel-default-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150475" comment="kernel-default-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150476" comment="kernel-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150477" comment="kernel-docs-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150478" comment="kernel-docs-html-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150479" comment="kernel-docs-pdf-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150480" comment="kernel-macros-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150481" comment="kernel-obs-build-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150482" comment="kernel-obs-qa-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150483" comment="kernel-source-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150484" comment="kernel-source-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150485" comment="kernel-syms-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150486" comment="kernel-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150487" comment="kernel-vanilla-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150488" comment="kernel-vanilla-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6355</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6355" source="CVE"/>
    <description>
    Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6355.html">CVE-2017-6355</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6355">SUSE bug 1027108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6355">SUSE bug 1027108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6355">SUSE bug 1027108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6355">SUSE bug 1027108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6355">SUSE bug 1027108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6355">SUSE bug 1027108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6355">SUSE bug 1027108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6355">SUSE bug 1027108</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6355">SUSE bug 1027108</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6362</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6362" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6362" source="CVE"/>
    <description>
    Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6362.html">CVE-2017-6362</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6362">SUSE bug 1056993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6362">SUSE bug 1056993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6362">SUSE bug 1056993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6362">SUSE bug 1056993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6362">SUSE bug 1056993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6362">SUSE bug 1056993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6362">SUSE bug 1056993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6362">SUSE bug 1056993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6362">SUSE bug 1056993</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6362">SUSE bug 1056993</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169944" comment="gd-2.1.0-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152100" comment="gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169945" comment="gd-32bit-2.1.0-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152101" comment="gd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169946" comment="gd-devel-2.1.0-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153569" comment="gd-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176384" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6384</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6384" source="CVE"/>
    <description>
    Memory leak in the login_user function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This is fixed in 7.2.8.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6384.html">CVE-2017-6384</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6384">SUSE bug 1027614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6384">SUSE bug 1027614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6384">SUSE bug 1027614</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150922" comment="atheme-7.2.9-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152588" comment="atheme is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150923" comment="atheme-devel-7.2.9-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152589" comment="atheme-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150924" comment="libathemecore1-7.2.9-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152590" comment="libathemecore1 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6386</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6386" source="CVE"/>
    <description>
    Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRGL_OBJECT_VERTEX_ELEMENTS commands.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6386.html">CVE-2017-6386</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6386">SUSE bug 1027376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6386">SUSE bug 1027376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6386">SUSE bug 1027376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6386">SUSE bug 1027376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6386">SUSE bug 1027376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6386">SUSE bug 1027376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6386">SUSE bug 1027376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6386">SUSE bug 1027376</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150424" comment="libvirglrenderer0-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154205" comment="libvirglrenderer0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150425" comment="virglrenderer-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154206" comment="virglrenderer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150426" comment="virglrenderer-devel-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154207" comment="virglrenderer-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150427" comment="virglrenderer-test-server-0.5.0-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154208" comment="virglrenderer-test-server is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176410" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6410</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6410" source="CVE"/>
    <description>
    kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a query string, or PATH_INFO), which allows remote attackers to obtain sensitive information via a crafted PAC file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6410.html">CVE-2017-6410</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6410">SUSE bug 1027309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6410">SUSE bug 1027520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6410">SUSE bug 1027309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6410">SUSE bug 1027520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6410">SUSE bug 1027309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6410">SUSE bug 1027520</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6410">SUSE bug 1027520</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149485" comment="kdelibs4-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152123" comment="kdelibs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149486" comment="kdelibs4-apidocs-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154035" comment="kdelibs4-apidocs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149487" comment="kdelibs4-branding-upstream-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154036" comment="kdelibs4-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149488" comment="kdelibs4-core-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152124" comment="kdelibs4-core is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149489" comment="kdelibs4-doc-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152125" comment="kdelibs4-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149490" comment="kio-5.26.0-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154037" comment="kio is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149491" comment="kio-32bit-5.26.0-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154038" comment="kio-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149492" comment="kio-core-5.26.0-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154039" comment="kio-core is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149493" comment="kio-core-32bit-5.26.0-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154040" comment="kio-core-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149494" comment="kio-devel-5.26.0-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154041" comment="kio-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149495" comment="kio-devel-32bit-5.26.0-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154042" comment="kio-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149496" comment="kio-lang-5.26.0-6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154043" comment="kio-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149497" comment="libkde4-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152126" comment="libkde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149498" comment="libkde4-32bit-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154044" comment="libkde4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149499" comment="libkde4-devel-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152127" comment="libkde4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149500" comment="libkdecore4-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152128" comment="libkdecore4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149501" comment="libkdecore4-32bit-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154045" comment="libkdecore4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149502" comment="libkdecore4-devel-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152129" comment="libkdecore4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149503" comment="libksuseinstall-devel-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154046" comment="libksuseinstall-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149504" comment="libksuseinstall1-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152130" comment="libksuseinstall1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149505" comment="libksuseinstall1-32bit-4.14.25-5.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154047" comment="libksuseinstall1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176429" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6429</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6429" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6429" source="CVE"/>
    <description>
    Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6429.html">CVE-2017-6429</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6429">SUSE bug 1028234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6429">SUSE bug 1028234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6429">SUSE bug 1028234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6429">SUSE bug 1028234</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6429">SUSE bug 1028234</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149874" comment="tcpreplay-4.1.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154264" comment="tcpreplay is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6435</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6435" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6435" source="CVE"/>
    <description>
    The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6435.html">CVE-2017-6435</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6435">SUSE bug 1029639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6435">SUSE bug 1029639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6435">SUSE bug 1029639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6435">SUSE bug 1029639</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6435">SUSE bug 1029639</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162169" comment="libplist-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162170" comment="libplist++-devel-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162171" comment="libplist++3-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162172" comment="libplist++3-32bit-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162173" comment="libplist-devel-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162174" comment="libplist3-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162175" comment="libplist3-32bit-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162176" comment="plistutil-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162177" comment="python-plist-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6436</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6436" source="CVE"/>
    <description>
    The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6436.html">CVE-2017-6436</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6436">SUSE bug 1029751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6436">SUSE bug 1029751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6436">SUSE bug 1029751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6436">SUSE bug 1029751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6436">SUSE bug 1029751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6436">SUSE bug 1029751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6436">SUSE bug 1029751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6436">SUSE bug 1029751</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162169" comment="libplist-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162170" comment="libplist++-devel-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162171" comment="libplist++3-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162172" comment="libplist++3-32bit-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162173" comment="libplist-devel-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162174" comment="libplist3-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162175" comment="libplist3-32bit-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162176" comment="plistutil-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162177" comment="python-plist-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176437" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6437</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6437" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6437" source="CVE"/>
    <description>
    The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6437.html">CVE-2017-6437</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6437">SUSE bug 1029707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6437">SUSE bug 1029707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6437">SUSE bug 1029707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6437">SUSE bug 1029707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6437">SUSE bug 1029707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6437">SUSE bug 1029707</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6437">SUSE bug 1029707</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162169" comment="libplist-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162170" comment="libplist++-devel-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162171" comment="libplist++3-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162172" comment="libplist++3-32bit-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162173" comment="libplist-devel-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162174" comment="libplist3-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162175" comment="libplist3-32bit-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162176" comment="plistutil-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162177" comment="python-plist-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176438" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6438</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6438" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6438" source="CVE"/>
    <description>
    Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6438.html">CVE-2017-6438</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6438">SUSE bug 1029706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6438">SUSE bug 1029706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6438">SUSE bug 1029706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6438">SUSE bug 1029706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6438">SUSE bug 1029706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6438">SUSE bug 1029706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6438">SUSE bug 1029706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6438">SUSE bug 1029706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6438">SUSE bug 1029706</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162169" comment="libplist-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162170" comment="libplist++-devel-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162171" comment="libplist++3-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162172" comment="libplist++3-32bit-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162173" comment="libplist-devel-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162174" comment="libplist3-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162175" comment="libplist3-32bit-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162176" comment="plistutil-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162177" comment="python-plist-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6439</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6439" source="CVE"/>
    <description>
    Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6439.html">CVE-2017-6439</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6439">SUSE bug 1029638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6439">SUSE bug 1029638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6439">SUSE bug 1029638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6439">SUSE bug 1029638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6439">SUSE bug 1029638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6439">SUSE bug 1029638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6439">SUSE bug 1029638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6439">SUSE bug 1029638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6439">SUSE bug 1029638</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162169" comment="libplist-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162170" comment="libplist++-devel-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162171" comment="libplist++3-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162172" comment="libplist++3-32bit-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162173" comment="libplist-devel-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162174" comment="libplist3-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162175" comment="libplist3-32bit-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162176" comment="plistutil-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162177" comment="python-plist-1.12-7.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6440</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6440" source="CVE"/>
    <description>
    The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6440.html">CVE-2017-6440</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6440">SUSE bug 1029631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6440">SUSE bug 1029631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6440">SUSE bug 1029631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6440">SUSE bug 1029631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6440">SUSE bug 1029631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6440">SUSE bug 1029631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6440">SUSE bug 1029631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6440">SUSE bug 1029706</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6440">SUSE bug 1029631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6440">SUSE bug 1029631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156177" comment="libplist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156178" comment="libplist++-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156179" comment="libplist++3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156180" comment="libplist++3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156181" comment="libplist-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156182" comment="libplist3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156183" comment="libplist3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156184" comment="plistutil-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156185" comment="python-plist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176441" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6441</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6441" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6441" source="CVE"/>
    <description>
    ** DISPUTED ** The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted use of "declare(ticks=" in a PHP script. NOTE: the vendor disputes the classification of this as a vulnerability, stating "Please do not request CVEs for ordinary bugs. CVEs are relevant for security issues only."
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6441.html">CVE-2017-6441</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6441">SUSE bug 1032155</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6441">SUSE bug 1032155</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6441">SUSE bug 1032155</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6441">SUSE bug 1032155</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6441">SUSE bug 1032155</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6441">SUSE bug 1032155</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6441">SUSE bug 1032155</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158083" comment="apache2-mod_php7-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158084" comment="php7-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158085" comment="php7-bcmath-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158086" comment="php7-bz2-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158087" comment="php7-calendar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158088" comment="php7-ctype-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158089" comment="php7-curl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158090" comment="php7-dba-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158091" comment="php7-devel-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158092" comment="php7-dom-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158093" comment="php7-enchant-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158094" comment="php7-exif-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158095" comment="php7-fastcgi-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158096" comment="php7-fileinfo-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158097" comment="php7-firebird-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158098" comment="php7-fpm-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158099" comment="php7-ftp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158100" comment="php7-gd-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158101" comment="php7-gettext-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158102" comment="php7-gmp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158103" comment="php7-iconv-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158104" comment="php7-imap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158105" comment="php7-intl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158106" comment="php7-json-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158107" comment="php7-ldap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158108" comment="php7-mbstring-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158109" comment="php7-mcrypt-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158110" comment="php7-mysql-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158111" comment="php7-odbc-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158112" comment="php7-opcache-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158113" comment="php7-openssl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158114" comment="php7-pcntl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158115" comment="php7-pdo-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158116" comment="php7-pear-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158117" comment="php7-pear-Archive_Tar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158118" comment="php7-pgsql-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158119" comment="php7-phar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158120" comment="php7-posix-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158121" comment="php7-pspell-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158122" comment="php7-readline-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158123" comment="php7-shmop-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158124" comment="php7-snmp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158125" comment="php7-soap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158126" comment="php7-sockets-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158127" comment="php7-sqlite-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158128" comment="php7-sysvmsg-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158129" comment="php7-sysvsem-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158130" comment="php7-sysvshm-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158131" comment="php7-tidy-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158132" comment="php7-tokenizer-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158133" comment="php7-wddx-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158134" comment="php7-xmlreader-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158135" comment="php7-xmlrpc-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158136" comment="php7-xmlwriter-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158137" comment="php7-xsl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158138" comment="php7-zip-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158139" comment="php7-zlib-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176451" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6451</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6451" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6451" source="CVE"/>
    <description>
    The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6451.html">CVE-2017-6451</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6451">SUSE bug 1030050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6451">SUSE bug 1030050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154733" comment="ntp-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154734" comment="ntp-doc-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176458" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6458</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6458" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6458" source="CVE"/>
    <description>
    Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6458.html">CVE-2017-6458</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6458">SUSE bug 1030050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6458">SUSE bug 1030050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154733" comment="ntp-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154734" comment="ntp-doc-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176460" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6460</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6460" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6460" source="CVE"/>
    <description>
    Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6460.html">CVE-2017-6460</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6460">SUSE bug 1030050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6460">SUSE bug 1030050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154733" comment="ntp-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154734" comment="ntp-doc-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6462</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6462" source="CVE"/>
    <description>
    Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6462.html">CVE-2017-6462</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6462">SUSE bug 1030050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6462">SUSE bug 1030050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154733" comment="ntp-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154734" comment="ntp-doc-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176463" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6463</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6463" source="CVE"/>
    <description>
    NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6463.html">CVE-2017-6463</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6463">SUSE bug 1030050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6463">SUSE bug 1030050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154733" comment="ntp-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154734" comment="ntp-doc-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176464" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6464</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6464" source="CVE"/>
    <description>
    NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6464.html">CVE-2017-6464</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6464">SUSE bug 1030050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6464">SUSE bug 1030050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6464">SUSE bug 1030050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154733" comment="ntp-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151182" comment="ntp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154734" comment="ntp-doc-4.2.8p10-29.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151183" comment="ntp-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6467</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6467" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6467.html">CVE-2017-6467</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6467">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6467">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6467">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6467">SUSE bug 1027998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149473" comment="wireshark-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149474" comment="wireshark-devel-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149475" comment="wireshark-ui-gtk-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149476" comment="wireshark-ui-qt-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6468</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6468" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6468.html">CVE-2017-6468</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6468">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6468">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6468">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6468">SUSE bug 1027998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149473" comment="wireshark-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149474" comment="wireshark-devel-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149475" comment="wireshark-ui-gtk-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149476" comment="wireshark-ui-qt-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6469</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6469" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-ldss.c by ensuring that memory is allocated for a certain data structure.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6469.html">CVE-2017-6469</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6469">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6469">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6469">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6469">SUSE bug 1027998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149473" comment="wireshark-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149474" comment="wireshark-devel-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149475" comment="wireshark-ui-gtk-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149476" comment="wireshark-ui-qt-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176470" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6470</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6470" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6470" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet lateness.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6470.html">CVE-2017-6470</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6470">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6470">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6470">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6470">SUSE bug 1027998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149473" comment="wireshark-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149474" comment="wireshark-devel-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149475" comment="wireshark-ui-gtk-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149476" comment="wireshark-ui-qt-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6471</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6471" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6471" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6471.html">CVE-2017-6471</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6471">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6471">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6471">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6471">SUSE bug 1027998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149473" comment="wireshark-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149474" comment="wireshark-devel-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149475" comment="wireshark-ui-gtk-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149476" comment="wireshark-ui-qt-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176472" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6472</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6472" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6472" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6472.html">CVE-2017-6472</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6472">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6472">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6472">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6472">SUSE bug 1027998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149473" comment="wireshark-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149474" comment="wireshark-devel-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149475" comment="wireshark-ui-gtk-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149476" comment="wireshark-ui-qt-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176473" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6473</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6473" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6473" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6473.html">CVE-2017-6473</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6473">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6473">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6473">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6473">SUSE bug 1027998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149473" comment="wireshark-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149474" comment="wireshark-devel-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149475" comment="wireshark-ui-gtk-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149476" comment="wireshark-ui-qt-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176474" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6474</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6474" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6474" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6474.html">CVE-2017-6474</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6474">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6474">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6474">SUSE bug 1027998</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6474">SUSE bug 1027998</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149473" comment="wireshark-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149474" comment="wireshark-devel-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149475" comment="wireshark-ui-gtk-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149476" comment="wireshark-ui-qt-2.2.5-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176502" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6502</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6502" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6502" source="CVE"/>
    <description>
    An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS).
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6502.html">CVE-2017-6502</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6502">SUSE bug 1028075</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6503</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6503" source="CVE"/>
    <description>
    WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6503.html">CVE-2017-6503</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6503">SUSE bug 1028072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6503">SUSE bug 1028072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6503">SUSE bug 1028072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6503">SUSE bug 1028072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6503">SUSE bug 1028072</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149843" comment="qbittorrent-3.3.11-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154048" comment="qbittorrent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149844" comment="qbittorrent-nox-3.3.11-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154049" comment="qbittorrent-nox is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176504" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6504</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6504" source="CVE"/>
    <description>
    WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6504.html">CVE-2017-6504</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6504">SUSE bug 1028073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6504">SUSE bug 1028073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6504">SUSE bug 1028073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6504">SUSE bug 1028073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6504">SUSE bug 1028073</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149843" comment="qbittorrent-3.3.11-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154048" comment="qbittorrent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149844" comment="qbittorrent-nox-3.3.11-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154049" comment="qbittorrent-nox is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176505" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6505</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6505" source="CVE"/>
    <description>
    The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6505.html">CVE-2017-6505</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028235</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6505">SUSE bug 1028184</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154683" comment="xen-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154684" comment="xen-devel-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154685" comment="xen-doc-html-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154686" comment="xen-libs-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154687" comment="xen-libs-32bit-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154688" comment="xen-tools-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154689" comment="xen-tools-domU-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6507</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6507" source="CVE"/>
    <description>
    An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scripts, upstart jobs, and/or systemd unit files allows an attacker to possibly have increased attack surfaces of processes that were intended to be confined by AppArmor. This is due to the common logic to handle 'restart' operations removing AppArmor profiles that aren't found in the typical filesystem locations, such as /etc/apparmor.d/. Userspace projects that manage their own AppArmor profiles in atypical directories, such as what's done by LXD and Docker, are affected by this flaw in the AppArmor init script logic.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6507.html">CVE-2017-6507</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6507">SUSE bug 1029696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6507">SUSE bug 1029696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6507">SUSE bug 1029696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6507">SUSE bug 1029696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6507">SUSE bug 1029696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6507">SUSE bug 1029696</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150881" comment="apache2-mod_apparmor-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154050" comment="apache2-mod_apparmor is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150882" comment="apparmor-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154051" comment="apparmor is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150883" comment="apparmor-abstractions-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154052" comment="apparmor-abstractions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150884" comment="apparmor-docs-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154053" comment="apparmor-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150885" comment="apparmor-parser-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154054" comment="apparmor-parser is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150886" comment="apparmor-parser-lang-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154055" comment="apparmor-parser-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150887" comment="apparmor-profiles-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154056" comment="apparmor-profiles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150888" comment="apparmor-utils-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154057" comment="apparmor-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150889" comment="apparmor-utils-lang-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154058" comment="apparmor-utils-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150890" comment="libapparmor-devel-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154059" comment="libapparmor-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150891" comment="libapparmor1-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154060" comment="libapparmor1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150892" comment="libapparmor1-32bit-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154061" comment="libapparmor1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150893" comment="pam_apparmor-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154062" comment="pam_apparmor is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150894" comment="pam_apparmor-32bit-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154063" comment="pam_apparmor-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150895" comment="perl-apparmor-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154064" comment="perl-apparmor is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150896" comment="python3-apparmor-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154065" comment="python3-apparmor is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150897" comment="ruby-apparmor-2.10.2-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154066" comment="ruby-apparmor is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6508</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6508" source="CVE"/>
    <description>
    CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6508.html">CVE-2017-6508</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6508">SUSE bug 1028301</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150389" comment="wget-1.14-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151442" comment="wget is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176512" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6512</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6512" source="CVE"/>
    <description>
    Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logic.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6512.html">CVE-2017-6512</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6512">SUSE bug 1047178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6512">SUSE bug 1047178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6512">SUSE bug 1047178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6512">SUSE bug 1047178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6512">SUSE bug 1047178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6512">SUSE bug 1047178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6512">SUSE bug 1047178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6512">SUSE bug 1047178</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6512">SUSE bug 1047178</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167170" comment="perl-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151455" comment="perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167171" comment="perl-32bit-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151456" comment="perl-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167172" comment="perl-base-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151457" comment="perl-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167173" comment="perl-base-32bit-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153231" comment="perl-base-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167174" comment="perl-doc-5.18.2-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151458" comment="perl-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6542</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6542" source="CVE"/>
    <description>
    The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6542.html">CVE-2017-6542</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6542">SUSE bug 1029256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6542">SUSE bug 1029256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6542">SUSE bug 1029256</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6542">SUSE bug 1029256</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149686" comment="putty-0.68-12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152979" comment="putty is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6594</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6594" source="CVE"/>
    <description>
    The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6594.html">CVE-2017-6594</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6594">SUSE bug 1048278</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162038" comment="libheimdal-7.4.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162039" comment="libheimdal is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162040" comment="libheimdal-devel-7.4.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162041" comment="libheimdal-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6596</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6596" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6596" source="CVE"/>
    <description>
    partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to launch a 'Denial of Service attack' in the context of the user running the affected application.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6596.html">CVE-2017-6596</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6596">SUSE bug 1028904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6596">SUSE bug 1028904</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6596">SUSE bug 1028904</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149852" comment="partclone-0.3.5a-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154067" comment="partclone is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149853" comment="partclone-lang-0.3.5a-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154068" comment="partclone-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6820</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6820" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6820" source="CVE"/>
    <description>
    rcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets (CSS) token sequence within an SVG element.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6820.html">CVE-2017-6820</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6820">SUSE bug 1029035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6820">SUSE bug 1029035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6820">SUSE bug 1029035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6820">SUSE bug 1029035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6820">SUSE bug 1029035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6820">SUSE bug 1029035</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6820">SUSE bug 1029035</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009149687" comment="roundcubemail-1.1.8-18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152670" comment="roundcubemail is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176827" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6827</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6827" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6827" source="CVE"/>
    <description>
    Heap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted audio file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6827.html">CVE-2017-6827</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6827">SUSE bug 1026979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6827">SUSE bug 1026979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6827">SUSE bug 1026979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6827">SUSE bug 1026979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6827">SUSE bug 1026979</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6827">SUSE bug 1026979</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6828</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6828" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6828" source="CVE"/>
    <description>
    Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6828.html">CVE-2017-6828</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6828">SUSE bug 1026980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6828">SUSE bug 1026980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6828">SUSE bug 1026980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6828">SUSE bug 1026980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6828">SUSE bug 1026980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6828">SUSE bug 1026980</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6829</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6829" source="CVE"/>
    <description>
    The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6829.html">CVE-2017-6829</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6829">SUSE bug 1026981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6829">SUSE bug 1026981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6829">SUSE bug 1026981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6829">SUSE bug 1026981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6829">SUSE bug 1026981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6829">SUSE bug 1026981</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6830" source="CVE"/>
    <description>
    Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6830.html">CVE-2017-6830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6830">SUSE bug 1026982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6830">SUSE bug 1026982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6830">SUSE bug 1026982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6830">SUSE bug 1026982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6830">SUSE bug 1026982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6830">SUSE bug 1026982</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6831</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6831" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6831" source="CVE"/>
    <description>
    Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6831.html">CVE-2017-6831</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6831">SUSE bug 1026983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6831">SUSE bug 1026983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6831">SUSE bug 1026983</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176832" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6832</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6832" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6832" source="CVE"/>
    <description>
    Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6832.html">CVE-2017-6832</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6832">SUSE bug 1026984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6832">SUSE bug 1026984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6832">SUSE bug 1026984</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176833" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6833</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6833" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6833" source="CVE"/>
    <description>
    The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6833.html">CVE-2017-6833</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6833">SUSE bug 1026985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6833">SUSE bug 1026985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6833">SUSE bug 1026985</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176834" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6834</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6834" source="CVE"/>
    <description>
    Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6834.html">CVE-2017-6834</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6834">SUSE bug 1026986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6834">SUSE bug 1026986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6834">SUSE bug 1026986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6834">SUSE bug 1026986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6834">SUSE bug 1026986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6834">SUSE bug 1026986</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176835" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6835</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6835" source="CVE"/>
    <description>
    The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6835.html">CVE-2017-6835</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6835">SUSE bug 1026988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6835">SUSE bug 1026988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6835">SUSE bug 1026988</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176836" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6836</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6836" source="CVE"/>
    <description>
    Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6836.html">CVE-2017-6836</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6836">SUSE bug 1026987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6836">SUSE bug 1026987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6836">SUSE bug 1026987</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176837" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6837</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6837" source="CVE"/>
    <description>
    WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6837.html">CVE-2017-6837</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6837">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6837">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6837">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6837">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6837">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6837">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6837">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6837">SUSE bug 1026978</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176838" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6838</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6838" source="CVE"/>
    <description>
    Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6838.html">CVE-2017-6838</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6838">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6838">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6838">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6838">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6838">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6838">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6838">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6838">SUSE bug 1026978</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176839" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6839</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6839" source="CVE"/>
    <description>
    Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6839.html">CVE-2017-6839</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6839">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6839">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6839">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6839">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6839">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6839">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6839">SUSE bug 1026978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6839">SUSE bug 1026978</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154493" comment="audiofile-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153089" comment="audiofile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154494" comment="audiofile-devel-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153090" comment="audiofile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154495" comment="audiofile-devel-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153091" comment="audiofile-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154496" comment="audiofile-doc-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153092" comment="audiofile-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154497" comment="libaudiofile1-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153093" comment="libaudiofile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154498" comment="libaudiofile1-32bit-0.3.6-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153094" comment="libaudiofile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176850" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6850</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6850" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6850" source="CVE"/>
    <description>
    The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6850.html">CVE-2017-6850</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6850">SUSE bug 1021868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6850">SUSE bug 1021868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6850">SUSE bug 1021868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6850">SUSE bug 1021868</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6850">SUSE bug 1021868</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154502" comment="jasper-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151131" comment="jasper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154503" comment="libjasper-devel-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151132" comment="libjasper-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154504" comment="libjasper1-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151133" comment="libjasper1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154505" comment="libjasper1-32bit-1.900.14-175.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151134" comment="libjasper1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176886" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6886</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6886" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6886" source="CVE"/>
    <description>
    An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6886.html">CVE-2017-6886</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6886">SUSE bug 1039380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6886">SUSE bug 1039380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6886">SUSE bug 1039380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6886">SUSE bug 1039380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6886">SUSE bug 1039380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6886">SUSE bug 1039380</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6886">SUSE bug 1039380</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156336" comment="libraw-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153171" comment="libraw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156337" comment="libraw-devel-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151901" comment="libraw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156338" comment="libraw-devel-static-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153172" comment="libraw-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156339" comment="libraw-tools-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153173" comment="libraw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156340" comment="libraw15-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154115" comment="libraw15 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176887" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6887</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6887" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6887" source="CVE"/>
    <description>
    A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cause a memory corruption via e.g. a specially crafted KDC file with model set to "DSLR-A100" and containing multiple sequences of 0x100 and 0x14A TAGs.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6887.html">CVE-2017-6887</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6887">SUSE bug 1039379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6887">SUSE bug 1039379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6887">SUSE bug 1039379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6887">SUSE bug 1039379</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6887">SUSE bug 1039379</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156336" comment="libraw-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153171" comment="libraw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156337" comment="libraw-devel-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151901" comment="libraw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156338" comment="libraw-devel-static-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153172" comment="libraw-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156339" comment="libraw-tools-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153173" comment="libraw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156340" comment="libraw15-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154115" comment="libraw15 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176889" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6889</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6889" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6889" source="CVE"/>
    <description>
    An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6889.html">CVE-2017-6889</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6889">SUSE bug 1039210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6889">SUSE bug 1039210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6889">SUSE bug 1039210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6889">SUSE bug 1039210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6889">SUSE bug 1039210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6889">SUSE bug 1039210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6889">SUSE bug 1039210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6889">SUSE bug 1039210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6889">SUSE bug 1039210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6889">SUSE bug 1039210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6889">SUSE bug 1039210</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156336" comment="libraw-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153171" comment="libraw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156337" comment="libraw-devel-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151901" comment="libraw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156338" comment="libraw-devel-static-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153172" comment="libraw-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156339" comment="libraw-tools-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153173" comment="libraw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156340" comment="libraw15-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154115" comment="libraw15 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6890</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6890" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6890" source="CVE"/>
    <description>
    A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6890.html">CVE-2017-6890</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6890">SUSE bug 1039209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6890">SUSE bug 1039209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6890">SUSE bug 1039209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6890">SUSE bug 1039209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6890">SUSE bug 1039209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6890">SUSE bug 1039209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6890">SUSE bug 1039209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6890">SUSE bug 1039209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6890">SUSE bug 1039209</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6890">SUSE bug 1039209</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156336" comment="libraw-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153171" comment="libraw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156337" comment="libraw-devel-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151901" comment="libraw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156338" comment="libraw-devel-static-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153172" comment="libraw-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156339" comment="libraw-tools-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153173" comment="libraw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156340" comment="libraw15-0.17.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154115" comment="libraw15 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176965" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6965</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6965" source="CVE"/>
    <description>
    readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6965.html">CVE-2017-6965</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1030295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6965">SUSE bug 1029909</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176966" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6966</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6966" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6966" source="CVE"/>
    <description>
    readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6966.html">CVE-2017-6966</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1030295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6966">SUSE bug 1029908</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20176969" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-6969</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-6969" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6969" source="CVE"/>
    <description>
    readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-6969.html">CVE-2017-6969</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6969">SUSE bug 1029907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6969">SUSE bug 1029907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6969">SUSE bug 1030295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6969">SUSE bug 1029907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6969">SUSE bug 1029907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6969">SUSE bug 1029907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6969">SUSE bug 1029907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-6969">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177000" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7000</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7000" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7000.html">CVE-2017-7000</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7000">SUSE bug 1050537</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159550" comment="chromedriver-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152651" comment="chromedriver is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159551" comment="chromium-60.0.3112.78-104.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152652" comment="chromium is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177018" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7018</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7018" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7018" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7018.html">CVE-2017-7018</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7018">SUSE bug 1050469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7018">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177030" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7030</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7030" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7030.html">CVE-2017-7030</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7030">SUSE bug 1050469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7030">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177034" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7034</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7034" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7034" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7034.html">CVE-2017-7034</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7034">SUSE bug 1050469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7034">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177037" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7037</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7037" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7037.html">CVE-2017-7037</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7037">SUSE bug 1050469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7037">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7039</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7039" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7039" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7039.html">CVE-2017-7039</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7039">SUSE bug 1050469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7039">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177046" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7046</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7046" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7046" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7046.html">CVE-2017-7046</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7046">SUSE bug 1050469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7046">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7048</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7048" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7048.html">CVE-2017-7048</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7048">SUSE bug 1050469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7048">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177055" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7055</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7055" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7055.html">CVE-2017-7055</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7055">SUSE bug 1050469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7055">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177056" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7056</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7056" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7056.html">CVE-2017-7056</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7056">SUSE bug 1050469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7056">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177061" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7061</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7061" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7061" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7061.html">CVE-2017-7061</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7061">SUSE bug 1050469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7061">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177064" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7064</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7064" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7064" source="CVE"/>
    <description>
    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7064.html">CVE-2017-7064</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7064">SUSE bug 1050469</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7064">SUSE bug 1050469</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166842" comment="libjavascriptcoregtk-4_0-18-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152638" comment="libjavascriptcoregtk-4_0-18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166843" comment="libjavascriptcoregtk-4_0-18-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152639" comment="libjavascriptcoregtk-4_0-18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166844" comment="libwebkit2gtk-4_0-37-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152640" comment="libwebkit2gtk-4_0-37 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166845" comment="libwebkit2gtk-4_0-37-32bit-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152641" comment="libwebkit2gtk-4_0-37-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166846" comment="libwebkit2gtk3-lang-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152642" comment="libwebkit2gtk3-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166847" comment="typelib-1_0-JavaScriptCore-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152643" comment="typelib-1_0-JavaScriptCore-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166848" comment="typelib-1_0-WebKit2-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152644" comment="typelib-1_0-WebKit2-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166849" comment="typelib-1_0-WebKit2WebExtension-4_0-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152645" comment="typelib-1_0-WebKit2WebExtension-4_0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166850" comment="webkit-jsc-4-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152646" comment="webkit-jsc-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166851" comment="webkit2gtk-4_0-injected-bundles-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152647" comment="webkit2gtk-4_0-injected-bundles is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166852" comment="webkit2gtk3-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152648" comment="webkit2gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166853" comment="webkit2gtk3-devel-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152649" comment="webkit2gtk3-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166854" comment="webkit2gtk3-plugin-process-gtk2-2.18.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166855" comment="webkit2gtk3-plugin-process-gtk2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177178" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7178</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7178" source="CVE"/>
    <description>
    CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its __init__.py file and (2) causing the victim to download, install, and enable this plugin.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7178.html">CVE-2017-7178</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7178">SUSE bug 1039958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7178">SUSE bug 1039958</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156382" comment="deluge-1.3.15-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156394" comment="deluge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156383" comment="deluge-lang-1.3.15-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156395" comment="deluge-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177184" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7184</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7184" source="CVE"/>
    <description>
    The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7184.html">CVE-2017-7184</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030573</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7184">SUSE bug 1030575</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150470" comment="kernel-debug-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150471" comment="kernel-debug-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150472" comment="kernel-debug-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150473" comment="kernel-default-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150474" comment="kernel-default-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150475" comment="kernel-default-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150476" comment="kernel-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150477" comment="kernel-docs-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150478" comment="kernel-docs-html-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150479" comment="kernel-docs-pdf-4.4.57-18.3.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150480" comment="kernel-macros-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150481" comment="kernel-obs-build-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150482" comment="kernel-obs-qa-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150483" comment="kernel-source-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150484" comment="kernel-source-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150485" comment="kernel-syms-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150486" comment="kernel-vanilla-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150487" comment="kernel-vanilla-base-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009150488" comment="kernel-vanilla-devel-4.4.57-18.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177187" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7187</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7187" source="CVE"/>
    <description>
    The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7187.html">CVE-2017-7187</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7187">SUSE bug 1030213</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154884" comment="kernel-debug-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154885" comment="kernel-debug-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154886" comment="kernel-debug-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154887" comment="kernel-default-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154888" comment="kernel-default-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154889" comment="kernel-default-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154890" comment="kernel-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154891" comment="kernel-docs-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154892" comment="kernel-docs-html-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154893" comment="kernel-docs-pdf-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154894" comment="kernel-macros-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154895" comment="kernel-obs-build-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154896" comment="kernel-obs-qa-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154897" comment="kernel-source-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154898" comment="kernel-source-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154899" comment="kernel-syms-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154900" comment="kernel-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154901" comment="kernel-vanilla-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154902" comment="kernel-vanilla-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7207</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7207" source="CVE"/>
    <description>
    The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7207.html">CVE-2017-7207</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7207">SUSE bug 1030263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7207">SUSE bug 1030263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7207">SUSE bug 1030263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7207">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7207">SUSE bug 1030263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7207">SUSE bug 1030263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7207">SUSE bug 1030263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7207">SUSE bug 1030263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7207">SUSE bug 1030263</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7207">SUSE bug 1030263</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155158" comment="ghostscript-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155159" comment="ghostscript-devel-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151934" comment="ghostscript-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155160" comment="ghostscript-mini-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151935" comment="ghostscript-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155161" comment="ghostscript-mini-devel-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151936" comment="ghostscript-mini-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155162" comment="ghostscript-x11-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177209" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7209</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7209" source="CVE"/>
    <description>
    The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7209.html">CVE-2017-7209</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7209">SUSE bug 1030298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7209">SUSE bug 1030298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7209">SUSE bug 1030298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7209">SUSE bug 1030298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7209">SUSE bug 1030298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7209">SUSE bug 1030298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7209">SUSE bug 1030298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7209">SUSE bug 1030298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7209">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177210" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7210</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7210" source="CVE"/>
    <description>
    objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7210.html">CVE-2017-7210</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7210">SUSE bug 1030297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7210">SUSE bug 1030297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7210">SUSE bug 1030297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7210">SUSE bug 1030297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7210">SUSE bug 1030297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7210">SUSE bug 1030297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7210">SUSE bug 1030297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7210">SUSE bug 1030297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7210">SUSE bug 1030297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7210">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177223" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7223</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7223" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7223" source="CVE"/>
    <description>
    GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7223.html">CVE-2017-7223</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7223">SUSE bug 1030589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7223">SUSE bug 1030589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7223">SUSE bug 1030589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7223">SUSE bug 1030589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7223">SUSE bug 1030589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7223">SUSE bug 1030589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7223">SUSE bug 1030589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7223">SUSE bug 1030589</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7223">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7224</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7224" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7224" source="CVE"/>
    <description>
    The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7224.html">CVE-2017-7224</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7224">SUSE bug 1030588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7224">SUSE bug 1030588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7224">SUSE bug 1030588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7224">SUSE bug 1030588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7224">SUSE bug 1030588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7224">SUSE bug 1030588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7224">SUSE bug 1030588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7224">SUSE bug 1030588</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7224">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177225" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7225</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7225" source="CVE"/>
    <description>
    The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7225.html">CVE-2017-7225</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7225">SUSE bug 1030585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7225">SUSE bug 1030585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7225">SUSE bug 1030585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7225">SUSE bug 1030585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7225">SUSE bug 1030585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7225">SUSE bug 1030585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7225">SUSE bug 1030585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7225">SUSE bug 1030585</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7225">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7226</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7226" source="CVE"/>
    <description>
    The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2line, size, and strings. It could lead to information disclosure as well.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7226.html">CVE-2017-7226</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7226">SUSE bug 1030584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7226">SUSE bug 1030584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7226">SUSE bug 1030584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7226">SUSE bug 1030584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7226">SUSE bug 1030584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7226">SUSE bug 1030584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7226">SUSE bug 1030584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7226">SUSE bug 1030584</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7226">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7227</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7227" source="CVE"/>
    <description>
    GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7227.html">CVE-2017-7227</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7227">SUSE bug 1030583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7227">SUSE bug 1030583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7227">SUSE bug 1030583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7227">SUSE bug 1030583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7227">SUSE bug 1030583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7227">SUSE bug 1030583</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7227">SUSE bug 1030583</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7228</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7228" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7228" source="CVE"/>
    <description>
    An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The earlier XSA-29 fix introduced an insufficient check on XENMEM_exchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arrays.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7228.html">CVE-2017-7228</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7228">SUSE bug 1030442</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154683" comment="xen-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154684" comment="xen-devel-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154685" comment="xen-doc-html-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154686" comment="xen-libs-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154687" comment="xen-libs-32bit-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154688" comment="xen-tools-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154689" comment="xen-tools-domU-4.7.2_02-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7261</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7261" source="CVE"/>
    <description>
    The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.5 does not check for a zero value of certain levels data, which allows local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7261.html">CVE-2017-7261</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7261">SUSE bug 1031052</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154884" comment="kernel-debug-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154885" comment="kernel-debug-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154886" comment="kernel-debug-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154887" comment="kernel-default-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154888" comment="kernel-default-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154889" comment="kernel-default-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154890" comment="kernel-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154891" comment="kernel-docs-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154892" comment="kernel-docs-html-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154893" comment="kernel-docs-pdf-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154894" comment="kernel-macros-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154895" comment="kernel-obs-build-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154896" comment="kernel-obs-qa-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154897" comment="kernel-source-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154898" comment="kernel-source-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154899" comment="kernel-syms-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154900" comment="kernel-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154901" comment="kernel-vanilla-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154902" comment="kernel-vanilla-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177294" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7294</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7294" source="CVE"/>
    <description>
    The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data, which allows local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7294.html">CVE-2017-7294</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031440</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7294">SUSE bug 1031481</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154884" comment="kernel-debug-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154885" comment="kernel-debug-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154886" comment="kernel-debug-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154887" comment="kernel-default-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154888" comment="kernel-default-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154889" comment="kernel-default-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154890" comment="kernel-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154891" comment="kernel-docs-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154892" comment="kernel-docs-html-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154893" comment="kernel-docs-pdf-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154894" comment="kernel-macros-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154895" comment="kernel-obs-build-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154896" comment="kernel-obs-qa-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154897" comment="kernel-source-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154898" comment="kernel-source-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154899" comment="kernel-syms-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154900" comment="kernel-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154901" comment="kernel-vanilla-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154902" comment="kernel-vanilla-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177299" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7299</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7299" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7299" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7299.html">CVE-2017-7299</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7299">SUSE bug 1031644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7299">SUSE bug 1031644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7299">SUSE bug 1031644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7299">SUSE bug 1031644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7299">SUSE bug 1031644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7299">SUSE bug 1031644</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7299">SUSE bug 1030295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7299">SUSE bug 1031644</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7300</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7300" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based buffer over-read (off-by-one) because of an incomplete check for invalid string offsets while loading symbols, leading to a GNU linker (ld) program crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7300.html">CVE-2017-7300</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7300">SUSE bug 1031656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7300">SUSE bug 1031656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7300">SUSE bug 1031656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7300">SUSE bug 1031656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7300">SUSE bug 1031656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7300">SUSE bug 1031656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7300">SUSE bug 1031656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7300">SUSE bug 1031656</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7300">SUSE bug 1031656</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177301" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7301</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7301" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7301" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one vulnerability because it does not carefully check the string offset. The vulnerability could lead to a GNU linker (ld) program crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7301.html">CVE-2017-7301</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7301">SUSE bug 1031638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7301">SUSE bug 1031638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7301">SUSE bug 1031638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7301">SUSE bug 1031638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7301">SUSE bug 1031638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7301">SUSE bug 1031638</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7301">SUSE bug 1030295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7301">SUSE bug 1031638</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177302" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7302</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7302" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7302" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read (of size 4) because of missing checks for relocs that could not be recognised. This vulnerability causes Binutils utilities like strip to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7302.html">CVE-2017-7302</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7302">SUSE bug 1031595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7302">SUSE bug 1031595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7302">SUSE bug 1031595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7302">SUSE bug 1031595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7302">SUSE bug 1031595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7302">SUSE bug 1031595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7302">SUSE bug 1031595</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7302">SUSE bug 1031595</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177303" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7303</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7303" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of missing a check (in the find_link function) for null headers before attempting to match them. This vulnerability causes Binutils utilities like strip to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7303.html">CVE-2017-7303</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7303">SUSE bug 1031593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7303">SUSE bug 1031593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7303">SUSE bug 1031593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7303">SUSE bug 1031593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7303">SUSE bug 1031593</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7303">SUSE bug 1030295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7303">SUSE bug 1031593</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177304" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7304</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7304" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the copy_special_section_fields function) for an invalid sh_link field before attempting to follow it. This vulnerability causes Binutils utilities like strip to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7304.html">CVE-2017-7304</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7304">SUSE bug 1031590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7304">SUSE bug 1031590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7304">SUSE bug 1031590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7304">SUSE bug 1031590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7304">SUSE bug 1031590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7304">SUSE bug 1031590</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7304">SUSE bug 1030295</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7304">SUSE bug 1031590</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177308" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7308</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7308" source="CVE"/>
    <description>
    The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7308.html">CVE-2017-7308</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031579</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7308">SUSE bug 1031660</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154884" comment="kernel-debug-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154885" comment="kernel-debug-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154886" comment="kernel-debug-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154887" comment="kernel-default-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154888" comment="kernel-default-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154889" comment="kernel-default-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154890" comment="kernel-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154891" comment="kernel-docs-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154892" comment="kernel-docs-html-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154893" comment="kernel-docs-pdf-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154894" comment="kernel-macros-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154895" comment="kernel-obs-build-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154896" comment="kernel-obs-qa-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154897" comment="kernel-source-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154898" comment="kernel-source-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154899" comment="kernel-syms-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154900" comment="kernel-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154901" comment="kernel-vanilla-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154902" comment="kernel-vanilla-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7346</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7346" source="CVE"/>
    <description>
    The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.7 does not validate certain levels data, which allows local users to cause a denial of service (system hang) via a crafted ioctl call for a /dev/dri/renderD* device.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7346.html">CVE-2017-7346</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7346">SUSE bug 1031796</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157229" comment="kernel-debug-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157230" comment="kernel-debug-base-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157231" comment="kernel-debug-devel-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157232" comment="kernel-default-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157233" comment="kernel-default-base-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157234" comment="kernel-default-devel-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157235" comment="kernel-devel-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157236" comment="kernel-docs-4.4.72-18.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157237" comment="kernel-docs-html-4.4.72-18.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157238" comment="kernel-docs-pdf-4.4.72-18.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157239" comment="kernel-macros-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157240" comment="kernel-obs-build-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157241" comment="kernel-obs-qa-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157242" comment="kernel-source-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157243" comment="kernel-source-vanilla-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157244" comment="kernel-syms-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157245" comment="kernel-vanilla-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157246" comment="kernel-vanilla-base-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157247" comment="kernel-vanilla-devel-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7374</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7374" source="CVE"/>
    <description>
    Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be freed prematurely.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7374.html">CVE-2017-7374</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1032006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1032006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1032006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1032006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1032006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1032006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1027179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1032006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1032006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1032006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1032006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7374">SUSE bug 1032006</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154884" comment="kernel-debug-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154885" comment="kernel-debug-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154886" comment="kernel-debug-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154887" comment="kernel-default-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154888" comment="kernel-default-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154889" comment="kernel-default-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154890" comment="kernel-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154891" comment="kernel-docs-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154892" comment="kernel-docs-html-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154893" comment="kernel-docs-pdf-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154894" comment="kernel-macros-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154895" comment="kernel-obs-build-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154896" comment="kernel-obs-qa-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154897" comment="kernel-source-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154898" comment="kernel-source-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154899" comment="kernel-syms-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154900" comment="kernel-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154901" comment="kernel-vanilla-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154902" comment="kernel-vanilla-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7375</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7375" source="CVE"/>
    <description>
    A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes). Depending on the context, this may expose a higher-risk attack surface in libxml2 not usually reachable with default parser flags, and expose content from local files, HTTP, or FTP servers (which might be otherwise unreachable).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7375.html">CVE-2017-7375</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1049467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7375">SUSE bug 1044894</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158140" comment="libxml2-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158141" comment="libxml2-2-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158142" comment="libxml2-2-32bit-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158143" comment="libxml2-devel-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158144" comment="libxml2-devel-32bit-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158145" comment="libxml2-doc-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158146" comment="libxml2-tools-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158147" comment="python-libxml2-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177376" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7376</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376" source="CVE"/>
    <description>
    Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7376.html">CVE-2017-7376</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7376">SUSE bug 1044887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7376">SUSE bug 1044887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7376">SUSE bug 1044887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7376">SUSE bug 1044887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7376">SUSE bug 1044887</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7376">SUSE bug 1049467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7376">SUSE bug 1044887</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158140" comment="libxml2-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158141" comment="libxml2-2-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158142" comment="libxml2-2-32bit-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158143" comment="libxml2-devel-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158144" comment="libxml2-devel-32bit-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158145" comment="libxml2-doc-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158146" comment="libxml2-tools-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158147" comment="python-libxml2-2.9.4-5.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177377" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7377</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7377" source="CVE"/>
    <description>
    The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7377.html">CVE-2017-7377</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7377">SUSE bug 1032075</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7392</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7392" source="CVE"/>
    <description>
    In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7392.html">CVE-2017-7392</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7392">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7392">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7392">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7392">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7392">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7392">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7392">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7392">SUSE bug 1031886</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154489" comment="libXvnc-devel-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154213" comment="libXvnc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154490" comment="libXvnc1-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154491" comment="tigervnc-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154492" comment="xorg-x11-Xvnc-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7393</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7393" source="CVE"/>
    <description>
    In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7393.html">CVE-2017-7393</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7393">SUSE bug 1031875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7393">SUSE bug 1031875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7393">SUSE bug 1031875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7393">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7393">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7393">SUSE bug 1031875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7393">SUSE bug 1031875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7393">SUSE bug 1031875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7393">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7393">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7393">SUSE bug 1031875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154489" comment="libXvnc-devel-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154213" comment="libXvnc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154490" comment="libXvnc1-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154491" comment="tigervnc-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154492" comment="xorg-x11-Xvnc-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7394</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7394" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7394" source="CVE"/>
    <description>
    In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7394.html">CVE-2017-7394</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7394">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7394">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7394">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7394">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7394">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7394">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7394">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7394">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7394">SUSE bug 1031879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7394">SUSE bug 1031879</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154489" comment="libXvnc-devel-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154213" comment="libXvnc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154490" comment="libXvnc1-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154491" comment="tigervnc-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154492" comment="xorg-x11-Xvnc-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7395</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7395" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7395" source="CVE"/>
    <description>
    In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7395.html">CVE-2017-7395</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7395">SUSE bug 1031877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7395">SUSE bug 1031877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7395">SUSE bug 1031877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7395">SUSE bug 1031877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7395">SUSE bug 1031877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7395">SUSE bug 1031877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7395">SUSE bug 1031877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7395">SUSE bug 1031877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7395">SUSE bug 1031877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7395">SUSE bug 1031877</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154489" comment="libXvnc-devel-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154213" comment="libXvnc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154490" comment="libXvnc1-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154491" comment="tigervnc-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154492" comment="xorg-x11-Xvnc-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7396</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7396" source="CVE"/>
    <description>
    In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7396.html">CVE-2017-7396</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7396">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7396">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7396">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7396">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7396">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7396">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7396">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7396">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7396">SUSE bug 1031886</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7396">SUSE bug 1031886</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154489" comment="libXvnc-devel-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154213" comment="libXvnc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154490" comment="libXvnc1-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154118" comment="libXvnc1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154491" comment="tigervnc-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152053" comment="tigervnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154492" comment="xorg-x11-Xvnc-1.6.0-16.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152054" comment="xorg-x11-Xvnc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177407" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7407</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7407" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7407" source="CVE"/>
    <description>
    The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7407.html">CVE-2017-7407</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7407">SUSE bug 1032309</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154735" comment="curl-7.37.0-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154736" comment="libcurl-devel-7.37.0-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154737" comment="libcurl-devel-32bit-7.37.0-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153284" comment="libcurl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154738" comment="libcurl4-7.37.0-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154739" comment="libcurl4-32bit-7.37.0-16.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177418" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7418</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7418" source="CVE"/>
    <description>
    ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option, but checks only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link. The threat model includes an attacker who is not granted full filesystem access by a hosting provider, but can reconfigure the home directory of an FTP user.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7418.html">CVE-2017-7418</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7418">SUSE bug 1032443</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154506" comment="proftpd-1.3.5d-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153640" comment="proftpd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154507" comment="proftpd-devel-1.3.5d-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153641" comment="proftpd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154508" comment="proftpd-doc-1.3.5d-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153642" comment="proftpd-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154509" comment="proftpd-lang-1.3.5d-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153643" comment="proftpd-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154510" comment="proftpd-ldap-1.3.5d-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153644" comment="proftpd-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154511" comment="proftpd-mysql-1.3.5d-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153645" comment="proftpd-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154512" comment="proftpd-pgsql-1.3.5d-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153646" comment="proftpd-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154513" comment="proftpd-radius-1.3.5d-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153647" comment="proftpd-radius is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154514" comment="proftpd-sqlite-1.3.5d-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153648" comment="proftpd-sqlite is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177435" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7435</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7435" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7435" source="CVE"/>
    <description>
    In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead to man in the middle or malicious servers to inject malicious RPM packages into a users system.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7435.html">CVE-2017-7435</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1009127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1009127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7435">SUSE bug 1038984</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161657" comment="libzypp-16.15.2-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161722" comment="libzypp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161658" comment="libzypp-devel-16.15.2-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161723" comment="libzypp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161659" comment="libzypp-devel-doc-16.15.2-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161724" comment="libzypp-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161660" comment="zypper-1.13.30-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161725" comment="zypper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161661" comment="zypper-aptitude-1.13.30-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161726" comment="zypper-aptitude is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161662" comment="zypper-log-1.13.30-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161727" comment="zypper-log is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177436" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7436</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7436" source="CVE"/>
    <description>
    In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead to man in the middle or malicious servers to inject malicious RPM packages into a users system.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7436.html">CVE-2017-7436</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1009127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1009127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1008325</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7436">SUSE bug 1038984</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161657" comment="libzypp-16.15.2-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161722" comment="libzypp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161658" comment="libzypp-devel-16.15.2-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161723" comment="libzypp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161659" comment="libzypp-devel-doc-16.15.2-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161724" comment="libzypp-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161660" comment="zypper-1.13.30-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161725" comment="zypper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161661" comment="zypper-aptitude-1.13.30-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161726" comment="zypper-aptitude is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161662" comment="zypper-log-1.13.30-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161727" comment="zypper-log is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177467" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7467</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7467" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7467.html">CVE-2017-7467</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7467">SUSE bug 1033783</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162053" comment="minicom-2.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162054" comment="minicom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162055" comment="minicom-lang-2.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162056" comment="minicom-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177471" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7471</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7471" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7471" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7471.html">CVE-2017-7471</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7471">SUSE bug 1034866</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177475" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7475</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7475" source="CVE"/>
    <description>
    Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7475.html">CVE-2017-7475</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7475">SUSE bug 1036789</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158022" comment="cairo-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158148" comment="cairo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158023" comment="cairo-devel-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158149" comment="cairo-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158024" comment="cairo-devel-32bit-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158150" comment="cairo-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158025" comment="cairo-tools-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158151" comment="cairo-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158026" comment="libcairo-gobject2-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158152" comment="libcairo-gobject2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158027" comment="libcairo-gobject2-32bit-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158153" comment="libcairo-gobject2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158028" comment="libcairo-script-interpreter2-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158154" comment="libcairo-script-interpreter2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158029" comment="libcairo-script-interpreter2-32bit-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158155" comment="libcairo-script-interpreter2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158030" comment="libcairo2-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158156" comment="libcairo2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158031" comment="libcairo2-32bit-1.15.2-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158157" comment="libcairo2-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177478" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7478</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7478" source="CVE"/>
    <description>
    OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7478.html">CVE-2017-7478</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038713</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7478">SUSE bug 1038709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157248" comment="openvpn-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157249" comment="openvpn-auth-pam-plugin-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157252" comment="openvpn-auth-pam-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157250" comment="openvpn-devel-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157253" comment="openvpn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157251" comment="openvpn-down-root-plugin-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157254" comment="openvpn-down-root-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177479" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7479</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7479" source="CVE"/>
    <description>
    OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7479.html">CVE-2017-7479</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7479">SUSE bug 1038711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7479">SUSE bug 1038713</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7479">SUSE bug 1038711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7479">SUSE bug 1038711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7479">SUSE bug 1038711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7479">SUSE bug 1038711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7479">SUSE bug 1038711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7479">SUSE bug 1038711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7479">SUSE bug 1038711</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7479">SUSE bug 1038711</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157248" comment="openvpn-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157249" comment="openvpn-auth-pam-plugin-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157252" comment="openvpn-auth-pam-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157250" comment="openvpn-devel-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157253" comment="openvpn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157251" comment="openvpn-down-root-plugin-2.3.8-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157254" comment="openvpn-down-root-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177481" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7481</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7481" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7481" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7481.html">CVE-2017-7481</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7481">SUSE bug 1038785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7481">SUSE bug 1038785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7481">SUSE bug 1038785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7481">SUSE bug 1038785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7481">SUSE bug 1038785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7481">SUSE bug 1038785</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7481">SUSE bug 1038785</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166856" comment="ansible-2.4.1.0-2.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177482" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7482</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7482" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7482" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7482.html">CVE-2017-7482</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7482">SUSE bug 1046107</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177483" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7483</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7483" source="CVE"/>
    <description>
    Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7483.html">CVE-2017-7483</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7483">SUSE bug 1036456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7483">SUSE bug 1036456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7483">SUSE bug 1036456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7483">SUSE bug 1036456</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7483">SUSE bug 1036456</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156751" comment="rxvt-unicode-9.21-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151120" comment="rxvt-unicode is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177484" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7484</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7484" source="CVE"/>
    <description>
    It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pg_statistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to access.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7484.html">CVE-2017-7484</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1037603</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1051015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1051015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1051015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7484">SUSE bug 1051015</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156384" comment="postgresql93-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151074" comment="postgresql93 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156385" comment="postgresql93-contrib-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151075" comment="postgresql93-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156386" comment="postgresql93-devel-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151076" comment="postgresql93-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156387" comment="postgresql93-docs-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156388" comment="postgresql93-libs-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151078" comment="postgresql93-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156389" comment="postgresql93-plperl-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151079" comment="postgresql93-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156390" comment="postgresql93-plpython-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151080" comment="postgresql93-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156391" comment="postgresql93-pltcl-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151081" comment="postgresql93-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156392" comment="postgresql93-server-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151082" comment="postgresql93-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156393" comment="postgresql93-test-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151083" comment="postgresql93-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157967" comment="postgresql94-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157968" comment="postgresql94-contrib-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157969" comment="postgresql94-devel-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157970" comment="postgresql94-docs-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157971" comment="postgresql94-libs-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151088" comment="postgresql94-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157972" comment="postgresql94-plperl-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151089" comment="postgresql94-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157973" comment="postgresql94-plpython-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151090" comment="postgresql94-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157974" comment="postgresql94-pltcl-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151091" comment="postgresql94-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157975" comment="postgresql94-server-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157976" comment="postgresql94-test-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151093" comment="postgresql94-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177485" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7485</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7485" source="CVE"/>
    <description>
    In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An active Man-in-the-Middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7485.html">CVE-2017-7485</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1038293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1051015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1051015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1051015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7485">SUSE bug 1051015</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156384" comment="postgresql93-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151074" comment="postgresql93 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156385" comment="postgresql93-contrib-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151075" comment="postgresql93-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156386" comment="postgresql93-devel-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151076" comment="postgresql93-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156387" comment="postgresql93-docs-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156388" comment="postgresql93-libs-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151078" comment="postgresql93-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156389" comment="postgresql93-plperl-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151079" comment="postgresql93-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156390" comment="postgresql93-plpython-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151080" comment="postgresql93-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156391" comment="postgresql93-pltcl-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151081" comment="postgresql93-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156392" comment="postgresql93-server-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151082" comment="postgresql93-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156393" comment="postgresql93-test-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151083" comment="postgresql93-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157967" comment="postgresql94-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157968" comment="postgresql94-contrib-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157969" comment="postgresql94-devel-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157970" comment="postgresql94-docs-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157971" comment="postgresql94-libs-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151088" comment="postgresql94-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157972" comment="postgresql94-plperl-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151089" comment="postgresql94-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157973" comment="postgresql94-plpython-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151090" comment="postgresql94-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157974" comment="postgresql94-pltcl-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151091" comment="postgresql94-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157975" comment="postgresql94-server-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157976" comment="postgresql94-test-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151093" comment="postgresql94-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7486</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7486" source="CVE"/>
    <description>
    PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7486.html">CVE-2017-7486</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1037624</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1051015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1051015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1051015</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7486">SUSE bug 1051015</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156384" comment="postgresql93-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151074" comment="postgresql93 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156385" comment="postgresql93-contrib-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151075" comment="postgresql93-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156386" comment="postgresql93-devel-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151076" comment="postgresql93-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156387" comment="postgresql93-docs-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156388" comment="postgresql93-libs-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151078" comment="postgresql93-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156389" comment="postgresql93-plperl-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151079" comment="postgresql93-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156390" comment="postgresql93-plpython-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151080" comment="postgresql93-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156391" comment="postgresql93-pltcl-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151081" comment="postgresql93-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156392" comment="postgresql93-server-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151082" comment="postgresql93-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156393" comment="postgresql93-test-9.3.17-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151083" comment="postgresql93-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157967" comment="postgresql94-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157968" comment="postgresql94-contrib-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157969" comment="postgresql94-devel-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157970" comment="postgresql94-docs-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157971" comment="postgresql94-libs-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151088" comment="postgresql94-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157972" comment="postgresql94-plperl-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151089" comment="postgresql94-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157973" comment="postgresql94-plpython-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151090" comment="postgresql94-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157974" comment="postgresql94-pltcl-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151091" comment="postgresql94-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157975" comment="postgresql94-server-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157976" comment="postgresql94-test-9.4.12-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151093" comment="postgresql94-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177487" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7487</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7487" source="CVE"/>
    <description>
    The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7487.html">CVE-2017-7487</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 870618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 870618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7487">SUSE bug 1038879</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156721" comment="kernel-debug-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156722" comment="kernel-debug-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156723" comment="kernel-debug-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156724" comment="kernel-default-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156725" comment="kernel-default-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156726" comment="kernel-default-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156727" comment="kernel-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156728" comment="kernel-docs-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156729" comment="kernel-docs-html-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156730" comment="kernel-docs-pdf-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156731" comment="kernel-macros-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156732" comment="kernel-obs-build-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156733" comment="kernel-obs-qa-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156734" comment="kernel-source-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156735" comment="kernel-source-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156736" comment="kernel-syms-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156737" comment="kernel-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156738" comment="kernel-vanilla-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156739" comment="kernel-vanilla-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177493" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7493</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7493" source="CVE"/>
    <description>
    Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7493.html">CVE-2017-7493</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7493">SUSE bug 1039495</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177494" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7494</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7494" source="CVE"/>
    <description>
    Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7494.html">CVE-2017-7494</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1040816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1040816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1040816</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7494">SUSE bug 1038231</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155983" comment="ctdb-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152996" comment="ctdb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155984" comment="ctdb-tests-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152998" comment="ctdb-tests is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155985" comment="libdcerpc-binding0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151262" comment="libdcerpc-binding0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155986" comment="libdcerpc-binding0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151263" comment="libdcerpc-binding0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155987" comment="libdcerpc-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152727" comment="libdcerpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155988" comment="libdcerpc-samr-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152728" comment="libdcerpc-samr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155989" comment="libdcerpc-samr0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152729" comment="libdcerpc-samr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155990" comment="libdcerpc-samr0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152730" comment="libdcerpc-samr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155991" comment="libdcerpc0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151264" comment="libdcerpc0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155992" comment="libdcerpc0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151265" comment="libdcerpc0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155993" comment="libndr-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152735" comment="libndr-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155994" comment="libndr-krb5pac-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152736" comment="libndr-krb5pac-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155995" comment="libndr-krb5pac0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151268" comment="libndr-krb5pac0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155996" comment="libndr-krb5pac0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151269" comment="libndr-krb5pac0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155997" comment="libndr-nbt-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152737" comment="libndr-nbt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155998" comment="libndr-nbt0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151270" comment="libndr-nbt0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155999" comment="libndr-nbt0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151271" comment="libndr-nbt0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156000" comment="libndr-standard-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152738" comment="libndr-standard-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156001" comment="libndr-standard0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151272" comment="libndr-standard0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156002" comment="libndr-standard0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151273" comment="libndr-standard0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156003" comment="libndr0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151274" comment="libndr0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156004" comment="libndr0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151275" comment="libndr0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156005" comment="libnetapi-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152739" comment="libnetapi-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156006" comment="libnetapi0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151276" comment="libnetapi0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156007" comment="libnetapi0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151277" comment="libnetapi0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156008" comment="libsamba-credentials-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152742" comment="libsamba-credentials-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156009" comment="libsamba-credentials0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151279" comment="libsamba-credentials0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156010" comment="libsamba-credentials0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151280" comment="libsamba-credentials0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156011" comment="libsamba-errors-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154222" comment="libsamba-errors-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156012" comment="libsamba-errors0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154085" comment="libsamba-errors0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156013" comment="libsamba-errors0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154086" comment="libsamba-errors0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156014" comment="libsamba-hostconfig-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152743" comment="libsamba-hostconfig-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156015" comment="libsamba-hostconfig0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151281" comment="libsamba-hostconfig0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156016" comment="libsamba-hostconfig0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151282" comment="libsamba-hostconfig0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156017" comment="libsamba-passdb-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152744" comment="libsamba-passdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156018" comment="libsamba-passdb0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151283" comment="libsamba-passdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156019" comment="libsamba-passdb0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151284" comment="libsamba-passdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156020" comment="libsamba-policy-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152745" comment="libsamba-policy-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156021" comment="libsamba-policy0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152746" comment="libsamba-policy0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156022" comment="libsamba-policy0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152747" comment="libsamba-policy0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156023" comment="libsamba-util-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152748" comment="libsamba-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156024" comment="libsamba-util0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151285" comment="libsamba-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156025" comment="libsamba-util0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151286" comment="libsamba-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156026" comment="libsamdb-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152749" comment="libsamdb-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156027" comment="libsamdb0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151287" comment="libsamdb0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156028" comment="libsamdb0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151288" comment="libsamdb0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156029" comment="libsmbclient-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151289" comment="libsmbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156030" comment="libsmbclient0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151292" comment="libsmbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156031" comment="libsmbclient0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152751" comment="libsmbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156032" comment="libsmbconf-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152752" comment="libsmbconf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156033" comment="libsmbconf0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151293" comment="libsmbconf0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156034" comment="libsmbconf0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151294" comment="libsmbconf0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156035" comment="libsmbldap-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152753" comment="libsmbldap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156036" comment="libsmbldap0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151295" comment="libsmbldap0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156037" comment="libsmbldap0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151296" comment="libsmbldap0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156038" comment="libtevent-util-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152761" comment="libtevent-util-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156039" comment="libtevent-util0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151297" comment="libtevent-util0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156040" comment="libtevent-util0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151298" comment="libtevent-util0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156041" comment="libwbclient-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152764" comment="libwbclient-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156042" comment="libwbclient0-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151299" comment="libwbclient0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156043" comment="libwbclient0-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151300" comment="libwbclient0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156044" comment="samba-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151301" comment="samba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156045" comment="samba-client-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151303" comment="samba-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156046" comment="samba-client-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151304" comment="samba-client-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156047" comment="samba-core-devel-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152775" comment="samba-core-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156048" comment="samba-doc-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151305" comment="samba-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156049" comment="samba-libs-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151306" comment="samba-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156050" comment="samba-libs-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151307" comment="samba-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156051" comment="samba-pidl-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152776" comment="samba-pidl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156052" comment="samba-python-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152777" comment="samba-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156053" comment="samba-test-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152778" comment="samba-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156054" comment="samba-winbind-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151308" comment="samba-winbind is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156055" comment="samba-winbind-32bit-4.4.2-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151309" comment="samba-winbind-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177506" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7506</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7506" source="CVE"/>
    <description>
    spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7506.html">CVE-2017-7506</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7506">SUSE bug 1046779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7506">SUSE bug 1046779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7506">SUSE bug 1046779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7506">SUSE bug 1046779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7506">SUSE bug 1047730</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7506">SUSE bug 1046779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7506">SUSE bug 1046779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7506">SUSE bug 1046779</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7506">SUSE bug 1046779</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158455" comment="libspice-server-devel-0.12.7-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153281" comment="libspice-server-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158456" comment="libspice-server1-0.12.7-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151923" comment="libspice-server1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158457" comment="spice-0.12.7-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153282" comment="spice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158458" comment="spice-client-0.12.7-5.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153283" comment="spice-client is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177507" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7507</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7507" source="CVE"/>
    <description>
    GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7507.html">CVE-2017-7507</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7507">SUSE bug 1043398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7507">SUSE bug 1043398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7507">SUSE bug 1043398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7507">SUSE bug 1043398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7507">SUSE bug 1043398</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7507">SUSE bug 1043398</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158847" comment="gnutls-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158848" comment="libgnutls-devel-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158849" comment="libgnutls-devel-32bit-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153803" comment="libgnutls-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158850" comment="libgnutls-openssl-devel-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153804" comment="libgnutls-openssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158851" comment="libgnutls-openssl27-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158852" comment="libgnutls28-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158853" comment="libgnutls28-32bit-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158854" comment="libgnutlsxx-devel-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153805" comment="libgnutlsxx-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158855" comment="libgnutlsxx28-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153806" comment="libgnutlsxx28 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177508" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7508</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7508" source="CVE"/>
    <description>
    OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7508.html">CVE-2017-7508</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7508">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7508">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7508">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7508">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7508">SUSE bug 1044947</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157450" comment="openvpn-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157451" comment="openvpn-auth-pam-plugin-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157252" comment="openvpn-auth-pam-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157452" comment="openvpn-devel-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157253" comment="openvpn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157453" comment="openvpn-down-root-plugin-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157254" comment="openvpn-down-root-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177511" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7511</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7511" source="CVE"/>
    <description>
    poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7511.html">CVE-2017-7511</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7511">SUSE bug 1041783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7511">SUSE bug 1041783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7511">SUSE bug 1041783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7511">SUSE bug 1041783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7511">SUSE bug 1041783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7511">SUSE bug 1041783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7511">SUSE bug 1041783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7511">SUSE bug 1041783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7511">SUSE bug 1041783</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7511">SUSE bug 1041783</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161472" comment="libpoppler-cpp0-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161473" comment="libpoppler-cpp0-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161474" comment="libpoppler-cpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161475" comment="libpoppler-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161476" comment="libpoppler-glib-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153236" comment="libpoppler-glib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161477" comment="libpoppler-glib8-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161478" comment="libpoppler-glib8-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161479" comment="libpoppler-glib8-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161480" comment="libpoppler-qt4-4-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161481" comment="libpoppler-qt4-4-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161482" comment="libpoppler-qt4-4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161483" comment="libpoppler-qt4-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153237" comment="libpoppler-qt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161484" comment="libpoppler-qt5-1-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161485" comment="libpoppler-qt5-1-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161486" comment="libpoppler-qt5-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161487" comment="libpoppler-qt5-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161488" comment="libpoppler60-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161489" comment="libpoppler60-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161490" comment="libpoppler60-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161491" comment="poppler-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153240" comment="poppler is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161492" comment="poppler-qt-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153241" comment="poppler-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161493" comment="poppler-qt5-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153242" comment="poppler-qt5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161494" comment="poppler-tools-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161495" comment="typelib-1_0-Poppler-0_18-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153243" comment="typelib-1_0-Poppler-0_18 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177515" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7515</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7515" source="CVE"/>
    <description>
    poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7515.html">CVE-2017-7515</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7515">SUSE bug 1043088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7515">SUSE bug 1043088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7515">SUSE bug 1043088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7515">SUSE bug 1043088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7515">SUSE bug 1043088</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7515">SUSE bug 1043088</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161472" comment="libpoppler-cpp0-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161473" comment="libpoppler-cpp0-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161474" comment="libpoppler-cpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161475" comment="libpoppler-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161476" comment="libpoppler-glib-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153236" comment="libpoppler-glib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161477" comment="libpoppler-glib8-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161478" comment="libpoppler-glib8-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161479" comment="libpoppler-glib8-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161480" comment="libpoppler-qt4-4-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161481" comment="libpoppler-qt4-4-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161482" comment="libpoppler-qt4-4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161483" comment="libpoppler-qt4-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153237" comment="libpoppler-qt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161484" comment="libpoppler-qt5-1-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161485" comment="libpoppler-qt5-1-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161486" comment="libpoppler-qt5-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161487" comment="libpoppler-qt5-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161488" comment="libpoppler60-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161489" comment="libpoppler60-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161490" comment="libpoppler60-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161491" comment="poppler-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153240" comment="poppler is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161492" comment="poppler-qt-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153241" comment="poppler-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161493" comment="poppler-qt5-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153242" comment="poppler-qt5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161494" comment="poppler-tools-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161495" comment="typelib-1_0-Poppler-0_18-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153243" comment="typelib-1_0-Poppler-0_18 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177518" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7518</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7518" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7518" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7518.html">CVE-2017-7518</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7518">SUSE bug 1045922</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158398" comment="kernel-debug-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158399" comment="kernel-debug-base-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158400" comment="kernel-debug-devel-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158401" comment="kernel-default-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158402" comment="kernel-default-base-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158403" comment="kernel-default-devel-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158404" comment="kernel-devel-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158405" comment="kernel-docs-4.4.74-18.20.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158406" comment="kernel-docs-html-4.4.74-18.20.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158407" comment="kernel-docs-pdf-4.4.74-18.20.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158408" comment="kernel-macros-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158409" comment="kernel-obs-build-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158410" comment="kernel-obs-qa-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158411" comment="kernel-source-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158412" comment="kernel-source-vanilla-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158413" comment="kernel-syms-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158414" comment="kernel-vanilla-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158415" comment="kernel-vanilla-base-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158416" comment="kernel-vanilla-devel-4.4.74-18.20.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177520" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7520</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7520" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7520" source="CVE"/>
    <description>
    OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7520.html">CVE-2017-7520</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7520">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7520">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7520">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7520">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7520">SUSE bug 1044947</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157450" comment="openvpn-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157451" comment="openvpn-auth-pam-plugin-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157252" comment="openvpn-auth-pam-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157452" comment="openvpn-devel-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157253" comment="openvpn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157453" comment="openvpn-down-root-plugin-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157254" comment="openvpn-down-root-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177521" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7521</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7521" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7521" source="CVE"/>
    <description>
    OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7521.html">CVE-2017-7521</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7521">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7521">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7521">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7521">SUSE bug 1044947</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7521">SUSE bug 1044947</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157450" comment="openvpn-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152221" comment="openvpn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157451" comment="openvpn-auth-pam-plugin-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157252" comment="openvpn-auth-pam-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157452" comment="openvpn-devel-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157253" comment="openvpn-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157453" comment="openvpn-down-root-plugin-2.3.8-8.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157254" comment="openvpn-down-root-plugin is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7526</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7526" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7526" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7526.html">CVE-2017-7526</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1047462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1047462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1047462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1047462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1047462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1047462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1047462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1047462</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1046607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7526">SUSE bug 1047462</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158388" comment="libgcrypt-1.6.1-34.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153047" comment="libgcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158389" comment="libgcrypt-cavs-1.6.1-34.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153048" comment="libgcrypt-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158390" comment="libgcrypt-devel-1.6.1-34.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151920" comment="libgcrypt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158391" comment="libgcrypt-devel-32bit-1.6.1-34.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153049" comment="libgcrypt-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158392" comment="libgcrypt20-1.6.1-34.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158393" comment="libgcrypt20-32bit-1.6.1-34.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158394" comment="libgcrypt20-hmac-1.6.1-34.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153050" comment="libgcrypt20-hmac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158395" comment="libgcrypt20-hmac-32bit-1.6.1-34.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153051" comment="libgcrypt20-hmac-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177529" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7529</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7529" source="CVE"/>
    <description>
    Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7529.html">CVE-2017-7529</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7529">SUSE bug 1048265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7529">SUSE bug 1048265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7529">SUSE bug 1048265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7529">SUSE bug 1048265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7529">SUSE bug 1048265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7529">SUSE bug 1048265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7529">SUSE bug 1048265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7529">SUSE bug 1048265</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7529">SUSE bug 1048265</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159570" comment="nginx-1.8.1-10.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153280" comment="nginx is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177533" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7533</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7533" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7533" source="CVE"/>
    <description>
    Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7533.html">CVE-2017-7533</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1053919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050677</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1050751</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7533">SUSE bug 1049483</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161638" comment="kernel-debug-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161639" comment="kernel-debug-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161640" comment="kernel-debug-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161641" comment="kernel-default-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161642" comment="kernel-default-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161643" comment="kernel-default-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161644" comment="kernel-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161645" comment="kernel-docs-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161646" comment="kernel-docs-html-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161647" comment="kernel-docs-pdf-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161648" comment="kernel-macros-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161649" comment="kernel-obs-build-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161650" comment="kernel-obs-qa-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161651" comment="kernel-source-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161652" comment="kernel-source-vanilla-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161653" comment="kernel-syms-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161654" comment="kernel-vanilla-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161655" comment="kernel-vanilla-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161656" comment="kernel-vanilla-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177541" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7541</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7541" source="CVE"/>
    <description>
    The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.12.3 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211_CMD_FRAME Netlink packet.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7541.html">CVE-2017-7541</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7541">SUSE bug 1049645</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161638" comment="kernel-debug-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161639" comment="kernel-debug-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161640" comment="kernel-debug-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161641" comment="kernel-default-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161642" comment="kernel-default-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161643" comment="kernel-default-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161644" comment="kernel-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161645" comment="kernel-docs-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161646" comment="kernel-docs-html-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161647" comment="kernel-docs-pdf-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161648" comment="kernel-macros-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161649" comment="kernel-obs-build-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161650" comment="kernel-obs-qa-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161651" comment="kernel-source-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161652" comment="kernel-source-vanilla-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161653" comment="kernel-syms-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161654" comment="kernel-vanilla-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161655" comment="kernel-vanilla-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161656" comment="kernel-vanilla-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177542" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7542</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7542" source="CVE"/>
    <description>
    The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7542.html">CVE-2017-7542</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1061936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7542">SUSE bug 1049882</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161638" comment="kernel-debug-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161639" comment="kernel-debug-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161640" comment="kernel-debug-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161641" comment="kernel-default-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161642" comment="kernel-default-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161643" comment="kernel-default-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161644" comment="kernel-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161645" comment="kernel-docs-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161646" comment="kernel-docs-html-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161647" comment="kernel-docs-pdf-4.4.79-18.23.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161648" comment="kernel-macros-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161649" comment="kernel-obs-build-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161650" comment="kernel-obs-qa-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161651" comment="kernel-source-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161652" comment="kernel-source-vanilla-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161653" comment="kernel-syms-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161654" comment="kernel-vanilla-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161655" comment="kernel-vanilla-base-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161656" comment="kernel-vanilla-devel-4.4.79-18.23.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177544" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7544</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7544" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7544" source="CVE"/>
    <description>
    libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7544.html">CVE-2017-7544</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7544">SUSE bug 1059893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7544">SUSE bug 1059893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7544">SUSE bug 1059893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7544">SUSE bug 1059893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7544">SUSE bug 1059893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7544">SUSE bug 1059893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7544">SUSE bug 1059893</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7544">SUSE bug 1059893</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170194" comment="libexif-0.6.21-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009170195" comment="libexif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170196" comment="libexif-devel-0.6.21-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151729" comment="libexif-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170197" comment="libexif12-0.6.21-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151730" comment="libexif12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170198" comment="libexif12-32bit-0.6.21-12.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151731" comment="libexif12-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177546" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7546</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7546" source="CVE"/>
    <description>
    PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7546.html">CVE-2017-7546</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1054365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1054365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7546">SUSE bug 1051684</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163480" comment="libecpg6-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163481" comment="libecpg6-32bit-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151070" comment="libecpg6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163482" comment="libpq5-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163483" comment="libpq5-32bit-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151072" comment="libpq5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162560" comment="postgresql93-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151074" comment="postgresql93 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162561" comment="postgresql93-contrib-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151075" comment="postgresql93-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162562" comment="postgresql93-devel-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151076" comment="postgresql93-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162563" comment="postgresql93-docs-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162564" comment="postgresql93-libs-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151078" comment="postgresql93-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162565" comment="postgresql93-plperl-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151079" comment="postgresql93-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162566" comment="postgresql93-plpython-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151080" comment="postgresql93-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162567" comment="postgresql93-pltcl-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151081" comment="postgresql93-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162568" comment="postgresql93-server-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151082" comment="postgresql93-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162569" comment="postgresql93-test-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151083" comment="postgresql93-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163484" comment="postgresql94-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163485" comment="postgresql94-contrib-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163486" comment="postgresql94-devel-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163487" comment="postgresql94-docs-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163488" comment="postgresql94-libs-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151088" comment="postgresql94-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163489" comment="postgresql94-plperl-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151089" comment="postgresql94-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163490" comment="postgresql94-plpython-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151090" comment="postgresql94-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163491" comment="postgresql94-pltcl-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151091" comment="postgresql94-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163492" comment="postgresql94-server-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163493" comment="postgresql94-test-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151093" comment="postgresql94-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163494" comment="postgresql96-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161265" comment="postgresql96 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163495" comment="postgresql96-contrib-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161266" comment="postgresql96-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163496" comment="postgresql96-devel-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161267" comment="postgresql96-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163497" comment="postgresql96-docs-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161268" comment="postgresql96-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163498" comment="postgresql96-libs-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163499" comment="postgresql96-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163500" comment="postgresql96-plperl-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163501" comment="postgresql96-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163502" comment="postgresql96-plpython-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163503" comment="postgresql96-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163504" comment="postgresql96-pltcl-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163505" comment="postgresql96-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163506" comment="postgresql96-server-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161269" comment="postgresql96-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163507" comment="postgresql96-test-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163508" comment="postgresql96-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177547" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7547</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7547" source="CVE"/>
    <description>
    PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7547.html">CVE-2017-7547</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1054365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1054365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7547">SUSE bug 1051685</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163480" comment="libecpg6-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163481" comment="libecpg6-32bit-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151070" comment="libecpg6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163482" comment="libpq5-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163483" comment="libpq5-32bit-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151072" comment="libpq5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162560" comment="postgresql93-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151074" comment="postgresql93 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162561" comment="postgresql93-contrib-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151075" comment="postgresql93-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162562" comment="postgresql93-devel-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151076" comment="postgresql93-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162563" comment="postgresql93-docs-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162564" comment="postgresql93-libs-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151078" comment="postgresql93-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162565" comment="postgresql93-plperl-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151079" comment="postgresql93-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162566" comment="postgresql93-plpython-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151080" comment="postgresql93-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162567" comment="postgresql93-pltcl-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151081" comment="postgresql93-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162568" comment="postgresql93-server-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151082" comment="postgresql93-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162569" comment="postgresql93-test-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151083" comment="postgresql93-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163484" comment="postgresql94-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163485" comment="postgresql94-contrib-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163486" comment="postgresql94-devel-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163487" comment="postgresql94-docs-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163488" comment="postgresql94-libs-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151088" comment="postgresql94-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163489" comment="postgresql94-plperl-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151089" comment="postgresql94-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163490" comment="postgresql94-plpython-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151090" comment="postgresql94-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163491" comment="postgresql94-pltcl-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151091" comment="postgresql94-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163492" comment="postgresql94-server-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163493" comment="postgresql94-test-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151093" comment="postgresql94-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163494" comment="postgresql96-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161265" comment="postgresql96 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163495" comment="postgresql96-contrib-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161266" comment="postgresql96-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163496" comment="postgresql96-devel-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161267" comment="postgresql96-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163497" comment="postgresql96-docs-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161268" comment="postgresql96-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163498" comment="postgresql96-libs-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163499" comment="postgresql96-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163500" comment="postgresql96-plperl-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163501" comment="postgresql96-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163502" comment="postgresql96-plpython-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163503" comment="postgresql96-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163504" comment="postgresql96-pltcl-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163505" comment="postgresql96-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163506" comment="postgresql96-server-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161269" comment="postgresql96-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163507" comment="postgresql96-test-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163508" comment="postgresql96-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177548" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7548</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7548" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7548" source="CVE"/>
    <description>
    PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7548.html">CVE-2017-7548</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1054365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1054365</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7548">SUSE bug 1053259</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163480" comment="libecpg6-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151069" comment="libecpg6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163481" comment="libecpg6-32bit-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151070" comment="libecpg6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163482" comment="libpq5-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151071" comment="libpq5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163483" comment="libpq5-32bit-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151072" comment="libpq5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162560" comment="postgresql93-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151074" comment="postgresql93 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162561" comment="postgresql93-contrib-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151075" comment="postgresql93-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162562" comment="postgresql93-devel-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151076" comment="postgresql93-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162563" comment="postgresql93-docs-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151077" comment="postgresql93-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162564" comment="postgresql93-libs-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151078" comment="postgresql93-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162565" comment="postgresql93-plperl-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151079" comment="postgresql93-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162566" comment="postgresql93-plpython-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151080" comment="postgresql93-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162567" comment="postgresql93-pltcl-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151081" comment="postgresql93-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162568" comment="postgresql93-server-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151082" comment="postgresql93-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162569" comment="postgresql93-test-9.3.18-5.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151083" comment="postgresql93-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163484" comment="postgresql94-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151084" comment="postgresql94 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163485" comment="postgresql94-contrib-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151085" comment="postgresql94-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163486" comment="postgresql94-devel-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151086" comment="postgresql94-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163487" comment="postgresql94-docs-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151087" comment="postgresql94-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163488" comment="postgresql94-libs-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151088" comment="postgresql94-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163489" comment="postgresql94-plperl-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151089" comment="postgresql94-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163490" comment="postgresql94-plpython-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151090" comment="postgresql94-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163491" comment="postgresql94-pltcl-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151091" comment="postgresql94-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163492" comment="postgresql94-server-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151092" comment="postgresql94-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163493" comment="postgresql94-test-9.4.13-9.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151093" comment="postgresql94-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163494" comment="postgresql96-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161265" comment="postgresql96 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163495" comment="postgresql96-contrib-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161266" comment="postgresql96-contrib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163496" comment="postgresql96-devel-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161267" comment="postgresql96-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163497" comment="postgresql96-docs-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161268" comment="postgresql96-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163498" comment="postgresql96-libs-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163499" comment="postgresql96-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163500" comment="postgresql96-plperl-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163501" comment="postgresql96-plperl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163502" comment="postgresql96-plpython-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163503" comment="postgresql96-plpython is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163504" comment="postgresql96-pltcl-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163505" comment="postgresql96-pltcl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163506" comment="postgresql96-server-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161269" comment="postgresql96-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163507" comment="postgresql96-test-9.6.4-5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009163508" comment="postgresql96-test is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177550" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7550</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7550" source="CVE"/>
    <description>
    A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7550.html">CVE-2017-7550</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1035124</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7550">SUSE bug 1065872</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166856" comment="ansible-2.4.1.0-2.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166857" comment="ansible is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177551" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7551</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7551" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7551" source="CVE"/>
    <description>
    389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7551.html">CVE-2017-7551</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7551">SUSE bug 1051997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7551">SUSE bug 1051997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7551">SUSE bug 1051997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7551">SUSE bug 1051997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7551">SUSE bug 1051997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7551">SUSE bug 1051997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7551">SUSE bug 1051997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7551">SUSE bug 1051997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7551">SUSE bug 1051997</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168665" comment="389-ds-1.3.4.5-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168666" comment="389-ds is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168667" comment="389-ds-devel-1.3.4.5-5.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168668" comment="389-ds-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177572" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7572</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7572" source="CVE"/>
    <description>
    The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization method (unix-process) that is subject to a race condition (time of check, time of use). With this authorization method, the owner of a process requesting a polkit operation is checked by polkitd via /proc/&lt;pid&gt;/status, by which time the requesting process may have been replaced by a different process with the same PID that has different privileges then the original requester.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7572.html">CVE-2017-7572</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7572">SUSE bug 1032717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7572">SUSE bug 1032717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7572">SUSE bug 1032717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7572">SUSE bug 1032717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7572">SUSE bug 1032717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7572">SUSE bug 1032717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7572">SUSE bug 1032717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7572">SUSE bug 1032717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7572">SUSE bug 1032717</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7572">SUSE bug 1032717</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154821" comment="backintime-1.1.20-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154848" comment="backintime is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154822" comment="backintime-lang-1.1.20-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154850" comment="backintime-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154823" comment="backintime-qt4-1.1.20-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154852" comment="backintime-qt4 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177585" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7585</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7585" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7585" source="CVE"/>
    <description>
    In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7585.html">CVE-2017-7585</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7585">SUSE bug 1033054</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156172" comment="libsndfile-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152564" comment="libsndfile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156173" comment="libsndfile-devel-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156174" comment="libsndfile-progs-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152565" comment="libsndfile-progs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156175" comment="libsndfile1-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156176" comment="libsndfile1-32bit-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177586" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7586</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7586" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7586" source="CVE"/>
    <description>
    In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7586.html">CVE-2017-7586</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7586">SUSE bug 1033053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7586">SUSE bug 1033053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7586">SUSE bug 1033053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7586">SUSE bug 1033053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7586">SUSE bug 1033053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7586">SUSE bug 1033053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7586">SUSE bug 1033053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7586">SUSE bug 1033053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7586">SUSE bug 1033053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7586">SUSE bug 1033053</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7586">SUSE bug 1033053</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154740" comment="libsndfile-1.0.25-26.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152564" comment="libsndfile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154741" comment="libsndfile-devel-1.0.25-26.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154742" comment="libsndfile-progs-1.0.25-26.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152565" comment="libsndfile-progs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154743" comment="libsndfile1-1.0.25-26.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154744" comment="libsndfile1-32bit-1.0.25-26.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177592" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7592</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7592" source="CVE"/>
    <description>
    The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7592.html">CVE-2017-7592</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7592">SUSE bug 1033131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7592">SUSE bug 1033131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7592">SUSE bug 1033131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7592">SUSE bug 1033131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7592">SUSE bug 1033131</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7592">SUSE bug 1033131</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177593" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7593</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7593" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7593" source="CVE"/>
    <description>
    tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7593.html">CVE-2017-7593</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7593">SUSE bug 1033129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7593">SUSE bug 1033129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7593">SUSE bug 1033129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7593">SUSE bug 1033129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7593">SUSE bug 1033129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7593">SUSE bug 1033129</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7593">SUSE bug 1033129</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177594" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7594</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7594" source="CVE"/>
    <description>
    The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7594.html">CVE-2017-7594</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7594">SUSE bug 1033128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7594">SUSE bug 1033128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7594">SUSE bug 1033128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7594">SUSE bug 1033128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7594">SUSE bug 1033128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7594">SUSE bug 1033128</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7594">SUSE bug 1033128</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177595" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7595</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7595" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7595" source="CVE"/>
    <description>
    The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7595.html">CVE-2017-7595</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7595">SUSE bug 1033127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7595">SUSE bug 1033127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7595">SUSE bug 1033127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7595">SUSE bug 1033127</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7595">SUSE bug 1033127</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177596" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7596</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7596" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7596" source="CVE"/>
    <description>
    LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7596.html">CVE-2017-7596</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7596">SUSE bug 1033126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7596">SUSE bug 1033126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7596">SUSE bug 1033126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7596">SUSE bug 1033126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7596">SUSE bug 1033126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7596">SUSE bug 1033126</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7596">SUSE bug 1033126</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177597" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7597</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7597" source="CVE"/>
    <description>
    tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7597.html">CVE-2017-7597</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7597">SUSE bug 1033120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7597">SUSE bug 1033120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7597">SUSE bug 1033120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7597">SUSE bug 1033120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7597">SUSE bug 1033120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7597">SUSE bug 1033120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7597">SUSE bug 1033120</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7597">SUSE bug 1033120</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177598" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7598</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7598" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7598" source="CVE"/>
    <description>
    tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7598.html">CVE-2017-7598</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7598">SUSE bug 1033118</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7598">SUSE bug 1033118</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7598">SUSE bug 1033118</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7598">SUSE bug 1033118</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7598">SUSE bug 1033118</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7598">SUSE bug 1033118</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177599" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7599</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7599" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7599" source="CVE"/>
    <description>
    LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7599.html">CVE-2017-7599</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7599">SUSE bug 1033113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7599">SUSE bug 1033113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7599">SUSE bug 1033113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7599">SUSE bug 1033113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7599">SUSE bug 1033113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7599">SUSE bug 1033113</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7599">SUSE bug 1033113</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177600" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7600</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7600" source="CVE"/>
    <description>
    LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7600.html">CVE-2017-7600</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7600">SUSE bug 1033112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7600">SUSE bug 1033112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7600">SUSE bug 1033112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7600">SUSE bug 1033112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7600">SUSE bug 1033112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7600">SUSE bug 1033112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7600">SUSE bug 1033112</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7600">SUSE bug 1033112</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177601" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7601</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7601" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7601" source="CVE"/>
    <description>
    LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7601.html">CVE-2017-7601</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7601">SUSE bug 1033111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7601">SUSE bug 1033111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7601">SUSE bug 1033111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7601">SUSE bug 1033111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7601">SUSE bug 1033111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7601">SUSE bug 1033111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7601">SUSE bug 1033111</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7601">SUSE bug 1033111</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177602" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7602</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7602" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7602" source="CVE"/>
    <description>
    LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7602.html">CVE-2017-7602</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7602">SUSE bug 1033109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7602">SUSE bug 1033109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7602">SUSE bug 1033109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7602">SUSE bug 1033109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7602">SUSE bug 1033109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7602">SUSE bug 1033109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7602">SUSE bug 1033109</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7602">SUSE bug 1033109</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177606" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7606</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7606" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7606" source="CVE"/>
    <description>
    coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7606.html">CVE-2017-7606</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7606">SUSE bug 1033091</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177614" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7614</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7614" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7614" source="CVE"/>
    <description>
    elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an "int main() {return 0;}" program.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7614.html">CVE-2017-7614</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7614">SUSE bug 1033122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7614">SUSE bug 1033122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7614">SUSE bug 1033122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7614">SUSE bug 1033122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7614">SUSE bug 1033122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7614">SUSE bug 1033122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7614">SUSE bug 1033122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7614">SUSE bug 1033122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7614">SUSE bug 1033122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7614">SUSE bug 1033122</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177616" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7616</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7616" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7616" source="CVE"/>
    <description>
    Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7616.html">CVE-2017-7616</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7616">SUSE bug 1033336</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154884" comment="kernel-debug-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154885" comment="kernel-debug-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154886" comment="kernel-debug-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154887" comment="kernel-default-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154888" comment="kernel-default-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154889" comment="kernel-default-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154890" comment="kernel-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154891" comment="kernel-docs-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154892" comment="kernel-docs-html-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154893" comment="kernel-docs-pdf-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154894" comment="kernel-macros-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154895" comment="kernel-obs-build-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154896" comment="kernel-obs-qa-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154897" comment="kernel-source-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154898" comment="kernel-source-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154899" comment="kernel-syms-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154900" comment="kernel-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154901" comment="kernel-vanilla-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154902" comment="kernel-vanilla-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177618" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7618</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7618" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7618" source="CVE"/>
    <description>
    crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7618.html">CVE-2017-7618</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7618">SUSE bug 1033340</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154884" comment="kernel-debug-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154885" comment="kernel-debug-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154886" comment="kernel-debug-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154887" comment="kernel-default-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154888" comment="kernel-default-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154889" comment="kernel-default-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154890" comment="kernel-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154891" comment="kernel-docs-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154892" comment="kernel-docs-html-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154893" comment="kernel-docs-pdf-4.4.62-18.6.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154894" comment="kernel-macros-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154895" comment="kernel-obs-build-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154896" comment="kernel-obs-qa-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154897" comment="kernel-source-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154898" comment="kernel-source-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154899" comment="kernel-syms-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154900" comment="kernel-vanilla-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154901" comment="kernel-vanilla-base-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154902" comment="kernel-vanilla-devel-4.4.62-18.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7645</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7645" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7645" source="CVE"/>
    <description>
    The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7645.html">CVE-2017-7645</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1036741</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1034670</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1046191</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7645">SUSE bug 1036741</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156721" comment="kernel-debug-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156722" comment="kernel-debug-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156723" comment="kernel-debug-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156724" comment="kernel-default-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156725" comment="kernel-default-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156726" comment="kernel-default-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156727" comment="kernel-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156728" comment="kernel-docs-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156729" comment="kernel-docs-html-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156730" comment="kernel-docs-pdf-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156731" comment="kernel-macros-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156732" comment="kernel-obs-build-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156733" comment="kernel-obs-qa-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156734" comment="kernel-source-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156735" comment="kernel-source-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156736" comment="kernel-syms-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156737" comment="kernel-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156738" comment="kernel-vanilla-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156739" comment="kernel-vanilla-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177674" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7674</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7674" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7674" source="CVE"/>
    <description>
    The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7674.html">CVE-2017-7674</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7674">SUSE bug 1053352</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167063" comment="tomcat-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152844" comment="tomcat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167064" comment="tomcat-admin-webapps-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152845" comment="tomcat-admin-webapps is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167065" comment="tomcat-docs-webapp-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152846" comment="tomcat-docs-webapp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167066" comment="tomcat-el-3_0-api-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152847" comment="tomcat-el-3_0-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167067" comment="tomcat-embed-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152848" comment="tomcat-embed is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167068" comment="tomcat-javadoc-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152849" comment="tomcat-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167069" comment="tomcat-jsp-2_3-api-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152850" comment="tomcat-jsp-2_3-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167070" comment="tomcat-jsvc-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152851" comment="tomcat-jsvc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167071" comment="tomcat-lib-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152852" comment="tomcat-lib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167072" comment="tomcat-servlet-3_1-api-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152853" comment="tomcat-servlet-3_1-api is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167073" comment="tomcat-webapps-8.0.43-6.13.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152854" comment="tomcat-webapps is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177679" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7679</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7679" source="CVE"/>
    <description>
    In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7679.html">CVE-2017-7679</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1049674</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1052635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1052635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1057861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1057861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1057861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1057861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1060041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1057861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1057861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1045060</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1057861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1057861</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7679">SUSE bug 1078450</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158058" comment="apache2-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158059" comment="apache2-devel-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158060" comment="apache2-doc-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158061" comment="apache2-event-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153274" comment="apache2-event is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158062" comment="apache2-example-pages-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158063" comment="apache2-prefork-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158064" comment="apache2-utils-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158065" comment="apache2-worker-2.4.23-8.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153275" comment="apache2-worker is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177700" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7700</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7700" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7700" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7700.html">CVE-2017-7700</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7700">SUSE bug 1033936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7700">SUSE bug 1033936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7700">SUSE bug 1033936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7700">SUSE bug 1033936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7700">SUSE bug 1033936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7700">SUSE bug 1033936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7700">SUSE bug 1033936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7700">SUSE bug 1033936</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154690" comment="wireshark-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154691" comment="wireshark-devel-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154692" comment="wireshark-ui-gtk-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154693" comment="wireshark-ui-qt-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177701" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7701</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7701" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7701" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7701.html">CVE-2017-7701</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7701">SUSE bug 1033937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7701">SUSE bug 1033937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7701">SUSE bug 1033937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7701">SUSE bug 1033937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7701">SUSE bug 1033937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7701">SUSE bug 1033937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7701">SUSE bug 1033937</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7701">SUSE bug 1033937</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154690" comment="wireshark-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154691" comment="wireshark-devel-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154692" comment="wireshark-ui-gtk-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154693" comment="wireshark-ui-qt-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177702" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7702</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7702" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7702" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7702.html">CVE-2017-7702</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7702">SUSE bug 1033938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7702">SUSE bug 1033938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7702">SUSE bug 1033938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7702">SUSE bug 1033938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7702">SUSE bug 1033938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7702">SUSE bug 1033938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7702">SUSE bug 1033938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7702">SUSE bug 1033938</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7702">SUSE bug 1049255</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159468" comment="wireshark-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159469" comment="wireshark-devel-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159470" comment="wireshark-ui-gtk-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159471" comment="wireshark-ui-qt-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7703</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7703" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7703" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7703.html">CVE-2017-7703</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7703">SUSE bug 1033939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7703">SUSE bug 1033939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7703">SUSE bug 1033939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7703">SUSE bug 1033939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7703">SUSE bug 1033939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7703">SUSE bug 1033939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7703">SUSE bug 1033939</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7703">SUSE bug 1033939</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154690" comment="wireshark-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154691" comment="wireshark-devel-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154692" comment="wireshark-ui-gtk-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154693" comment="wireshark-ui-qt-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177704" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7704</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7704" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7704.html">CVE-2017-7704</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7704">SUSE bug 1033940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7704">SUSE bug 1033940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7704">SUSE bug 1033940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7704">SUSE bug 1033940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7704">SUSE bug 1033940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7704">SUSE bug 1033940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7704">SUSE bug 1033940</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7704">SUSE bug 1033940</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154690" comment="wireshark-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154691" comment="wireshark-devel-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154692" comment="wireshark-ui-gtk-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154693" comment="wireshark-ui-qt-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177705" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7705</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7705" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7705" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7705.html">CVE-2017-7705</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7705">SUSE bug 1033941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7705">SUSE bug 1033941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7705">SUSE bug 1033941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7705">SUSE bug 1033941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7705">SUSE bug 1033941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7705">SUSE bug 1033941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7705">SUSE bug 1033941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7705">SUSE bug 1033941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154690" comment="wireshark-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154691" comment="wireshark-devel-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154692" comment="wireshark-ui-gtk-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154693" comment="wireshark-ui-qt-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177718" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7718</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7718" source="CVE"/>
    <description>
    hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7718.html">CVE-2017-7718</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7718">SUSE bug 1034908</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155273" comment="xen-4.7.2_04-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155274" comment="xen-devel-4.7.2_04-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155275" comment="xen-doc-html-4.7.2_04-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155276" comment="xen-libs-4.7.2_04-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155277" comment="xen-libs-32bit-4.7.2_04-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155278" comment="xen-tools-4.7.2_04-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155279" comment="xen-tools-domU-4.7.2_04-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177741" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7741</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7741" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7741" source="CVE"/>
    <description>
    In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7741.html">CVE-2017-7741</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7741">SUSE bug 1033915</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156172" comment="libsndfile-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152564" comment="libsndfile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156173" comment="libsndfile-devel-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156174" comment="libsndfile-progs-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152565" comment="libsndfile-progs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156175" comment="libsndfile1-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156176" comment="libsndfile1-32bit-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177742" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7742</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7742" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7742" source="CVE"/>
    <description>
    In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7742.html">CVE-2017-7742</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033054</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033914</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7742">SUSE bug 1033914</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156172" comment="libsndfile-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152564" comment="libsndfile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156173" comment="libsndfile-devel-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156174" comment="libsndfile-progs-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152565" comment="libsndfile-progs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156175" comment="libsndfile1-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156176" comment="libsndfile1-32bit-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177745" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7745</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7745" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7745.html">CVE-2017-7745</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7745">SUSE bug 1033942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7745">SUSE bug 1033942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7745">SUSE bug 1033942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7745">SUSE bug 1033942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7745">SUSE bug 1033942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7745">SUSE bug 1033942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7745">SUSE bug 1033942</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7745">SUSE bug 1033942</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154690" comment="wireshark-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154691" comment="wireshark-devel-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154692" comment="wireshark-ui-gtk-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154693" comment="wireshark-ui-qt-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7746</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7746" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7746" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7746.html">CVE-2017-7746</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7746">SUSE bug 1033943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7746">SUSE bug 1033943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7746">SUSE bug 1033943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7746">SUSE bug 1033943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7746">SUSE bug 1033943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7746">SUSE bug 1033943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7746">SUSE bug 1033943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7746">SUSE bug 1033943</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154690" comment="wireshark-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154691" comment="wireshark-devel-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154692" comment="wireshark-ui-gtk-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154693" comment="wireshark-ui-qt-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7747</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7747" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7747" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7747.html">CVE-2017-7747</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7747">SUSE bug 1033944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7747">SUSE bug 1033944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7747">SUSE bug 1033944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7747">SUSE bug 1033944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7747">SUSE bug 1033944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7747">SUSE bug 1033944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7747">SUSE bug 1033944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7747">SUSE bug 1033944</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154690" comment="wireshark-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154691" comment="wireshark-devel-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154692" comment="wireshark-ui-gtk-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154693" comment="wireshark-ui-qt-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7748</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7748" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7748.html">CVE-2017-7748</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7748">SUSE bug 1033945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7748">SUSE bug 1033945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7748">SUSE bug 1033945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7748">SUSE bug 1033945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7748">SUSE bug 1033945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7748">SUSE bug 1033945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7748">SUSE bug 1033945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7748">SUSE bug 1033945</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154690" comment="wireshark-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154691" comment="wireshark-devel-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154692" comment="wireshark-ui-gtk-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154693" comment="wireshark-ui-qt-2.2.6-14.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177749" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7749</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7749" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7749.html">CVE-2017-7749</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7749">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7749">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7749">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7749">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7749">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7749">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7749">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7750</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7750" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7750" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7750.html">CVE-2017-7750</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7750">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7750">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7750">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7750">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7750">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7750">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7750">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177751" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7751</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7751" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7751.html">CVE-2017-7751</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7751">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7751">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7751">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7751">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7751">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7751">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7751">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177752" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7752</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7752" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7752.html">CVE-2017-7752</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7752">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7752">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7752">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7752">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7752">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7752">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7752">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177753" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7753</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7753" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7753.html">CVE-2017-7753</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7753">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7753">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177754" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7754</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7754" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7754.html">CVE-2017-7754</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7754">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7754">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7754">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7754">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7754">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7754">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7754">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7755</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7755" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7755" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7755.html">CVE-2017-7755</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7755">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7756</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7756" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7756" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7756.html">CVE-2017-7756</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7756">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7756">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7756">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7756">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7756">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7756">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7756">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177757" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7757</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7757" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7757" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7757.html">CVE-2017-7757</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7757">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7757">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7757">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7757">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7757">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7757">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7757">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177758" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7758</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7758" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7758" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7758.html">CVE-2017-7758</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7758">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7758">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7758">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7758">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7758">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7758">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7758">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177760" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7760</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7760" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7760" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7760.html">CVE-2017-7760</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7760">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177761" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7761</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7761" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7761" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7761.html">CVE-2017-7761</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7761">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177764" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7764</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7764" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7764" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7764.html">CVE-2017-7764</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7764">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7764">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7764">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7764">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7764">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7764">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7764">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7765</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7765" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7765" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7765.html">CVE-2017-7765</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7765">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177766" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7766</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7766" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7766" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7766.html">CVE-2017-7766</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7766">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177767" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7767</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7767" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7767.html">CVE-2017-7767</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7767">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177768" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7768</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7768" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7768" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7768.html">CVE-2017-7768</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7768">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177771" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7771</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7771" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7771.html">CVE-2017-7771</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7771">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7771">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7771">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7771">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7771">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7771">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7771">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177772" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7772</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7772" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7772.html">CVE-2017-7772</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7772">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7772">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7772">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7772">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7772">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7772">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7772">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177773" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7773</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7773" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7773" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7773.html">CVE-2017-7773</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7773">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7773">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7773">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7773">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7773">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7773">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7773">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177774" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7774</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7774" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7774" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7774.html">CVE-2017-7774</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7774">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7774">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7774">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7774">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7774">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7774">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7774">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7775</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7775" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7775.html">CVE-2017-7775</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7775">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7775">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7775">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7775">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7775">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7775">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7775">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7776</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7776" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7776.html">CVE-2017-7776</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7776">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7776">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7776">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7776">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7776">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7776">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7776">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177777" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7777</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7777" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7777" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7777.html">CVE-2017-7777</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7777">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7777">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7777">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7777">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7777">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7777">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7777">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177778" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7778</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7778" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7778" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7778.html">CVE-2017-7778</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7778">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7778">SUSE bug 1044239</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7778">SUSE bug 1044240</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7778">SUSE bug 1044241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7778">SUSE bug 1044242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7778">SUSE bug 1043960</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7778">SUSE bug 1043960</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157135" comment="MozillaFirefox-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157136" comment="MozillaFirefox-branding-upstream-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157137" comment="MozillaFirefox-buildsymbols-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157138" comment="MozillaFirefox-devel-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157139" comment="MozillaFirefox-translations-common-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157140" comment="MozillaFirefox-translations-other-52.2-57.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157141" comment="MozillaThunderbird-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157142" comment="MozillaThunderbird-buildsymbols-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157143" comment="MozillaThunderbird-devel-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157144" comment="MozillaThunderbird-translations-common-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157145" comment="MozillaThunderbird-translations-other-52.2-41.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157146" comment="java-1_8_0-openjdk-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157147" comment="java-1_8_0-openjdk-accessibility-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157148" comment="java-1_8_0-openjdk-demo-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157149" comment="java-1_8_0-openjdk-devel-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157150" comment="java-1_8_0-openjdk-headless-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157151" comment="java-1_8_0-openjdk-javadoc-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157152" comment="java-1_8_0-openjdk-src-1.8.0.131-10.10.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157153" comment="libfreebl3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157154" comment="libfreebl3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157155" comment="libsoftokn3-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157156" comment="libsoftokn3-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157157" comment="mozilla-nss-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157158" comment="mozilla-nss-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157159" comment="mozilla-nss-certs-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157160" comment="mozilla-nss-certs-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157161" comment="mozilla-nss-devel-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157162" comment="mozilla-nss-sysinit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157163" comment="mozilla-nss-sysinit-32bit-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157164" comment="mozilla-nss-tools-3.28.5-40.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7779</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7779" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7779.html">CVE-2017-7779</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7779">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7779">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177782" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7782</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7782" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7782" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Not set</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7782.html">CVE-2017-7782</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7782">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177784" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7784</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7784" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7784" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7784.html">CVE-2017-7784</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7784">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7784">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177785" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7785</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7785" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7785" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7785.html">CVE-2017-7785</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7785">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7785">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177786" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7786</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7786" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7786" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7786.html">CVE-2017-7786</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7786">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7786">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177787" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7787</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7787" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7787.html">CVE-2017-7787</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7787">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7787">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177791" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7791</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7791" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7791.html">CVE-2017-7791</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7791">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7791">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177792" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7792</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7792" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7792.html">CVE-2017-7792</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7792">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7792">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177793" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7793</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7793" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7793" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7793.html">CVE-2017-7793</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7793">SUSE bug 1060445</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164900" comment="MozillaFirefox-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164901" comment="MozillaFirefox-branding-upstream-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164902" comment="MozillaFirefox-buildsymbols-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164903" comment="MozillaFirefox-devel-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164904" comment="MozillaFirefox-translations-common-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164905" comment="MozillaFirefox-translations-other-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165404" comment="MozillaThunderbird-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165405" comment="MozillaThunderbird-buildsymbols-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165406" comment="MozillaThunderbird-devel-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165407" comment="MozillaThunderbird-translations-common-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165408" comment="MozillaThunderbird-translations-other-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164906" comment="java-1_8_0-openjdk-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164907" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164908" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164909" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164910" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164911" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164912" comment="java-1_8_0-openjdk-src-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164913" comment="libfreebl3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164914" comment="libfreebl3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164915" comment="libsoftokn3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164916" comment="libsoftokn3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164917" comment="mozilla-nss-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164918" comment="mozilla-nss-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164919" comment="mozilla-nss-certs-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164920" comment="mozilla-nss-certs-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164921" comment="mozilla-nss-devel-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164922" comment="mozilla-nss-sysinit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164923" comment="mozilla-nss-sysinit-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164924" comment="mozilla-nss-tools-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7798</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7798" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7798.html">CVE-2017-7798</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7798">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7798">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7800</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7800" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7800.html">CVE-2017-7800</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7800">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7800">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177801" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7801</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7801" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7801" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7801.html">CVE-2017-7801</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7801">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7801">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177802" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7802</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7802" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7802" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7802.html">CVE-2017-7802</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7802">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7802">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177803" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7803</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7803" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7803.html">CVE-2017-7803</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7803">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7803">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177804" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7804</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7804" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Not set</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7804.html">CVE-2017-7804</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7804">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177805" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7805</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7805" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7805.html">CVE-2017-7805</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1060445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7805">SUSE bug 1061005</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164900" comment="MozillaFirefox-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164901" comment="MozillaFirefox-branding-upstream-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164902" comment="MozillaFirefox-buildsymbols-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164903" comment="MozillaFirefox-devel-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164904" comment="MozillaFirefox-translations-common-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164905" comment="MozillaFirefox-translations-other-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165404" comment="MozillaThunderbird-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165405" comment="MozillaThunderbird-buildsymbols-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165406" comment="MozillaThunderbird-devel-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165407" comment="MozillaThunderbird-translations-common-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165408" comment="MozillaThunderbird-translations-other-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164906" comment="java-1_8_0-openjdk-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164907" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164908" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164909" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164910" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164911" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164912" comment="java-1_8_0-openjdk-src-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164913" comment="libfreebl3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164914" comment="libfreebl3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164915" comment="libsoftokn3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164916" comment="libsoftokn3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164917" comment="mozilla-nss-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164918" comment="mozilla-nss-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164919" comment="mozilla-nss-certs-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164920" comment="mozilla-nss-certs-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164921" comment="mozilla-nss-devel-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164922" comment="mozilla-nss-sysinit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164923" comment="mozilla-nss-sysinit-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164924" comment="mozilla-nss-tools-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177807" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7807</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7807" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7807.html">CVE-2017-7807</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7807">SUSE bug 1052829</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7807">SUSE bug 1052829</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161898" comment="MozillaFirefox-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161899" comment="MozillaFirefox-branding-upstream-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161900" comment="MozillaFirefox-buildsymbols-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161901" comment="MozillaFirefox-devel-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161902" comment="MozillaFirefox-translations-common-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161903" comment="MozillaFirefox-translations-other-52.3.0-57.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162203" comment="MozillaThunderbird-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162204" comment="MozillaThunderbird-buildsymbols-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162205" comment="MozillaThunderbird-devel-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162206" comment="MozillaThunderbird-translations-common-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162207" comment="MozillaThunderbird-translations-other-52.3.0-41.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177810" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7810</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7810" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7810.html">CVE-2017-7810</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7810">SUSE bug 1060445</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164900" comment="MozillaFirefox-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164901" comment="MozillaFirefox-branding-upstream-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164902" comment="MozillaFirefox-buildsymbols-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164903" comment="MozillaFirefox-devel-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164904" comment="MozillaFirefox-translations-common-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164905" comment="MozillaFirefox-translations-other-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165404" comment="MozillaThunderbird-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165405" comment="MozillaThunderbird-buildsymbols-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165406" comment="MozillaThunderbird-devel-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165407" comment="MozillaThunderbird-translations-common-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165408" comment="MozillaThunderbird-translations-other-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164906" comment="java-1_8_0-openjdk-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164907" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164908" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164909" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164910" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164911" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164912" comment="java-1_8_0-openjdk-src-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164913" comment="libfreebl3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164914" comment="libfreebl3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164915" comment="libsoftokn3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164916" comment="libsoftokn3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164917" comment="mozilla-nss-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164918" comment="mozilla-nss-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164919" comment="mozilla-nss-certs-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164920" comment="mozilla-nss-certs-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164921" comment="mozilla-nss-devel-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164922" comment="mozilla-nss-sysinit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164923" comment="mozilla-nss-sysinit-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164924" comment="mozilla-nss-tools-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177814" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7814</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7814" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7814.html">CVE-2017-7814</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7814">SUSE bug 1060445</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164900" comment="MozillaFirefox-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164901" comment="MozillaFirefox-branding-upstream-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164902" comment="MozillaFirefox-buildsymbols-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164903" comment="MozillaFirefox-devel-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164904" comment="MozillaFirefox-translations-common-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164905" comment="MozillaFirefox-translations-other-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165404" comment="MozillaThunderbird-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165405" comment="MozillaThunderbird-buildsymbols-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165406" comment="MozillaThunderbird-devel-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165407" comment="MozillaThunderbird-translations-common-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165408" comment="MozillaThunderbird-translations-other-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164906" comment="java-1_8_0-openjdk-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164907" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164908" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164909" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164910" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164911" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164912" comment="java-1_8_0-openjdk-src-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164913" comment="libfreebl3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164914" comment="libfreebl3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164915" comment="libsoftokn3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164916" comment="libsoftokn3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164917" comment="mozilla-nss-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164918" comment="mozilla-nss-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164919" comment="mozilla-nss-certs-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164920" comment="mozilla-nss-certs-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164921" comment="mozilla-nss-devel-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164922" comment="mozilla-nss-sysinit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164923" comment="mozilla-nss-sysinit-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164924" comment="mozilla-nss-tools-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177818" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7818</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7818" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7818" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7818.html">CVE-2017-7818</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7818">SUSE bug 1060445</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164900" comment="MozillaFirefox-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164901" comment="MozillaFirefox-branding-upstream-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164902" comment="MozillaFirefox-buildsymbols-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164903" comment="MozillaFirefox-devel-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164904" comment="MozillaFirefox-translations-common-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164905" comment="MozillaFirefox-translations-other-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165404" comment="MozillaThunderbird-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165405" comment="MozillaThunderbird-buildsymbols-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165406" comment="MozillaThunderbird-devel-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165407" comment="MozillaThunderbird-translations-common-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165408" comment="MozillaThunderbird-translations-other-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164906" comment="java-1_8_0-openjdk-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164907" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164908" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164909" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164910" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164911" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164912" comment="java-1_8_0-openjdk-src-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164913" comment="libfreebl3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164914" comment="libfreebl3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164915" comment="libsoftokn3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164916" comment="libsoftokn3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164917" comment="mozilla-nss-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164918" comment="mozilla-nss-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164919" comment="mozilla-nss-certs-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164920" comment="mozilla-nss-certs-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164921" comment="mozilla-nss-devel-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164922" comment="mozilla-nss-sysinit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164923" comment="mozilla-nss-sysinit-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164924" comment="mozilla-nss-tools-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7819</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7819" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7819" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7819.html">CVE-2017-7819</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7819">SUSE bug 1060445</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164900" comment="MozillaFirefox-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164901" comment="MozillaFirefox-branding-upstream-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164902" comment="MozillaFirefox-buildsymbols-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164903" comment="MozillaFirefox-devel-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164904" comment="MozillaFirefox-translations-common-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164905" comment="MozillaFirefox-translations-other-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165404" comment="MozillaThunderbird-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165405" comment="MozillaThunderbird-buildsymbols-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165406" comment="MozillaThunderbird-devel-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165407" comment="MozillaThunderbird-translations-common-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165408" comment="MozillaThunderbird-translations-other-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164906" comment="java-1_8_0-openjdk-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164907" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164908" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164909" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164910" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164911" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164912" comment="java-1_8_0-openjdk-src-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164913" comment="libfreebl3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164914" comment="libfreebl3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164915" comment="libsoftokn3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164916" comment="libsoftokn3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164917" comment="mozilla-nss-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164918" comment="mozilla-nss-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164919" comment="mozilla-nss-certs-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164920" comment="mozilla-nss-certs-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164921" comment="mozilla-nss-devel-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164922" comment="mozilla-nss-sysinit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164923" comment="mozilla-nss-sysinit-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164924" comment="mozilla-nss-tools-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7823</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7823" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7823.html">CVE-2017-7823</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7823">SUSE bug 1060445</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164900" comment="MozillaFirefox-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164901" comment="MozillaFirefox-branding-upstream-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164902" comment="MozillaFirefox-buildsymbols-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164903" comment="MozillaFirefox-devel-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164904" comment="MozillaFirefox-translations-common-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164905" comment="MozillaFirefox-translations-other-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165404" comment="MozillaThunderbird-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165405" comment="MozillaThunderbird-buildsymbols-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165406" comment="MozillaThunderbird-devel-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165407" comment="MozillaThunderbird-translations-common-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165408" comment="MozillaThunderbird-translations-other-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164906" comment="java-1_8_0-openjdk-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164907" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164908" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164909" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164910" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164911" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164912" comment="java-1_8_0-openjdk-src-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164913" comment="libfreebl3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164914" comment="libfreebl3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164915" comment="libsoftokn3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164916" comment="libsoftokn3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164917" comment="mozilla-nss-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164918" comment="mozilla-nss-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164919" comment="mozilla-nss-certs-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164920" comment="mozilla-nss-certs-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164921" comment="mozilla-nss-devel-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164922" comment="mozilla-nss-sysinit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164923" comment="mozilla-nss-sysinit-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164924" comment="mozilla-nss-tools-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7824</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7824" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7824.html">CVE-2017-7824</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7824">SUSE bug 1060445</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164900" comment="MozillaFirefox-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164901" comment="MozillaFirefox-branding-upstream-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164902" comment="MozillaFirefox-buildsymbols-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164903" comment="MozillaFirefox-devel-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164904" comment="MozillaFirefox-translations-common-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164905" comment="MozillaFirefox-translations-other-52.4.0-57.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165404" comment="MozillaThunderbird-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165405" comment="MozillaThunderbird-buildsymbols-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165406" comment="MozillaThunderbird-devel-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165407" comment="MozillaThunderbird-translations-common-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165408" comment="MozillaThunderbird-translations-other-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164906" comment="java-1_8_0-openjdk-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152674" comment="java-1_8_0-openjdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164907" comment="java-1_8_0-openjdk-accessibility-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152835" comment="java-1_8_0-openjdk-accessibility is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164908" comment="java-1_8_0-openjdk-demo-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152836" comment="java-1_8_0-openjdk-demo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164909" comment="java-1_8_0-openjdk-devel-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152675" comment="java-1_8_0-openjdk-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164910" comment="java-1_8_0-openjdk-headless-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152676" comment="java-1_8_0-openjdk-headless is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164911" comment="java-1_8_0-openjdk-javadoc-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152837" comment="java-1_8_0-openjdk-javadoc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164912" comment="java-1_8_0-openjdk-src-1.8.0.144-10.15.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152838" comment="java-1_8_0-openjdk-src is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164913" comment="libfreebl3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151498" comment="libfreebl3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164914" comment="libfreebl3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152810" comment="libfreebl3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164915" comment="libsoftokn3-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151499" comment="libsoftokn3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164916" comment="libsoftokn3-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152811" comment="libsoftokn3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164917" comment="mozilla-nss-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151500" comment="mozilla-nss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164918" comment="mozilla-nss-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152813" comment="mozilla-nss-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164919" comment="mozilla-nss-certs-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151501" comment="mozilla-nss-certs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164920" comment="mozilla-nss-certs-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152814" comment="mozilla-nss-certs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164921" comment="mozilla-nss-devel-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151502" comment="mozilla-nss-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164922" comment="mozilla-nss-sysinit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152815" comment="mozilla-nss-sysinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164923" comment="mozilla-nss-sysinit-32bit-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152816" comment="mozilla-nss-sysinit-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164924" comment="mozilla-nss-tools-3.28.6-40.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151503" comment="mozilla-nss-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7825</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7825" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7825" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7825.html">CVE-2017-7825</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7825">SUSE bug 1060445</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165404" comment="MozillaThunderbird-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165405" comment="MozillaThunderbird-buildsymbols-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165406" comment="MozillaThunderbird-devel-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165407" comment="MozillaThunderbird-translations-common-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009165408" comment="MozillaThunderbird-translations-other-52.4.0-41.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177826" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7826</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7826" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7826" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7826.html">CVE-2017-7826</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7826">SUSE bug 1068101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7826">SUSE bug 1068101</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166980" comment="MozillaFirefox-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166981" comment="MozillaFirefox-branding-upstream-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166982" comment="MozillaFirefox-buildsymbols-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166983" comment="MozillaFirefox-devel-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166984" comment="MozillaFirefox-translations-common-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166985" comment="MozillaFirefox-translations-other-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167242" comment="MozillaThunderbird-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167243" comment="MozillaThunderbird-buildsymbols-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167244" comment="MozillaThunderbird-devel-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167245" comment="MozillaThunderbird-translations-common-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167246" comment="MozillaThunderbird-translations-other-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177828" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7828</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7828" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7828" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7828.html">CVE-2017-7828</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7828">SUSE bug 1068101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7828">SUSE bug 1068101</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166980" comment="MozillaFirefox-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166981" comment="MozillaFirefox-branding-upstream-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166982" comment="MozillaFirefox-buildsymbols-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166983" comment="MozillaFirefox-devel-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166984" comment="MozillaFirefox-translations-common-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166985" comment="MozillaFirefox-translations-other-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167242" comment="MozillaThunderbird-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167243" comment="MozillaThunderbird-buildsymbols-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167244" comment="MozillaThunderbird-devel-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167245" comment="MozillaThunderbird-translations-common-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167246" comment="MozillaThunderbird-translations-other-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177829" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7829</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7829" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7829.html">CVE-2017-7829</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7829">SUSE bug 1074046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7829">SUSE bug 1074046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7829">SUSE bug 1071236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7829">SUSE bug 1074046</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7829">SUSE bug 1074046</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168905" comment="MozillaThunderbird-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168906" comment="MozillaThunderbird-buildsymbols-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168907" comment="MozillaThunderbird-devel-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168908" comment="MozillaThunderbird-translations-common-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168909" comment="MozillaThunderbird-translations-other-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7830" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7830.html">CVE-2017-7830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7830">SUSE bug 1068101</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7830">SUSE bug 1068101</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166980" comment="MozillaFirefox-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166981" comment="MozillaFirefox-branding-upstream-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166982" comment="MozillaFirefox-buildsymbols-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166983" comment="MozillaFirefox-devel-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166984" comment="MozillaFirefox-translations-common-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166985" comment="MozillaFirefox-translations-other-52.5.0-57.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167242" comment="MozillaThunderbird-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167243" comment="MozillaThunderbird-buildsymbols-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167244" comment="MozillaThunderbird-devel-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167245" comment="MozillaThunderbird-translations-common-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167246" comment="MozillaThunderbird-translations-other-52.5.0-41.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177843" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7843</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7843" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7843.html">CVE-2017-7843</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7843">SUSE bug 1072034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7843">SUSE bug 1072034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7843">SUSE bug 1072034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7843">SUSE bug 1072034</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7843">SUSE bug 1072034</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168275" comment="MozillaFirefox-52.5.2-57.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168276" comment="MozillaFirefox-branding-upstream-52.5.2-57.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168277" comment="MozillaFirefox-buildsymbols-52.5.2-57.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168278" comment="MozillaFirefox-devel-52.5.2-57.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168279" comment="MozillaFirefox-translations-common-52.5.2-57.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168280" comment="MozillaFirefox-translations-other-52.5.2-57.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177846" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7846</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7846" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7846.html">CVE-2017-7846</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7846">SUSE bug 1074043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7846">SUSE bug 1074043</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7846">SUSE bug 1074043</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168905" comment="MozillaThunderbird-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168906" comment="MozillaThunderbird-buildsymbols-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168907" comment="MozillaThunderbird-devel-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168908" comment="MozillaThunderbird-translations-common-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168909" comment="MozillaThunderbird-translations-other-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177847" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7847</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7847" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7847.html">CVE-2017-7847</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7847">SUSE bug 1074044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7847">SUSE bug 1074044</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7847">SUSE bug 1074044</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168905" comment="MozillaThunderbird-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168906" comment="MozillaThunderbird-buildsymbols-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168907" comment="MozillaThunderbird-devel-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168908" comment="MozillaThunderbird-translations-common-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168909" comment="MozillaThunderbird-translations-other-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177848" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7848</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7848" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7848.html">CVE-2017-7848</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7848">SUSE bug 1074045</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7848">SUSE bug 1074045</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7848">SUSE bug 1074045</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168905" comment="MozillaThunderbird-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151180" comment="MozillaThunderbird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168906" comment="MozillaThunderbird-buildsymbols-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152803" comment="MozillaThunderbird-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168907" comment="MozillaThunderbird-devel-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152804" comment="MozillaThunderbird-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168908" comment="MozillaThunderbird-translations-common-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151181" comment="MozillaThunderbird-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168909" comment="MozillaThunderbird-translations-other-52.5.2-41.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152805" comment="MozillaThunderbird-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177853" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7853</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7853" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7853" source="CVE"/>
    <description>
    In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7853.html">CVE-2017-7853</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7853">SUSE bug 1034570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7853">SUSE bug 1034570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7853">SUSE bug 1034570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7853">SUSE bug 1034570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7853">SUSE bug 1034570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7853">SUSE bug 1034570</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7853">SUSE bug 1034570</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154824" comment="libosip2-4.1.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154844" comment="libosip2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154825" comment="libosip2-devel-4.1.0-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154846" comment="libosip2-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177859" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7859</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7859" source="CVE"/>
    <description>
    FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ff_h264_slice_context_init function in libavcodec/h264dec.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7859.html">CVE-2017-7859</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7859">SUSE bug 1034183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7859">SUSE bug 1034183</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7859">SUSE bug 1034183</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154853" comment="ffmpeg-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154854" comment="libavcodec-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154855" comment="libavcodec57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154856" comment="libavcodec57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154857" comment="libavdevice-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154858" comment="libavdevice57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154859" comment="libavdevice57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154860" comment="libavfilter-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154861" comment="libavfilter6-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154862" comment="libavfilter6-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154863" comment="libavformat-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154864" comment="libavformat57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154865" comment="libavformat57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154866" comment="libavresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154867" comment="libavresample3-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154868" comment="libavresample3-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154869" comment="libavutil-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154870" comment="libavutil55-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154871" comment="libavutil55-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154872" comment="libpostproc-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154873" comment="libpostproc54-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154874" comment="libpostproc54-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154875" comment="libswresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154876" comment="libswresample2-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154877" comment="libswresample2-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154878" comment="libswscale-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154879" comment="libswscale4-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154880" comment="libswscale4-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177862" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7862</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7862" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7862" source="CVE"/>
    <description>
    FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame function in libavcodec/pictordec.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7862.html">CVE-2017-7862</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7862">SUSE bug 1034181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7862">SUSE bug 1034181</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7862">SUSE bug 1034181</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154853" comment="ffmpeg-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154854" comment="libavcodec-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154855" comment="libavcodec57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154856" comment="libavcodec57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154857" comment="libavdevice-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154858" comment="libavdevice57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154859" comment="libavdevice57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154860" comment="libavfilter-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154861" comment="libavfilter6-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154862" comment="libavfilter6-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154863" comment="libavformat-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154864" comment="libavformat57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154865" comment="libavformat57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154866" comment="libavresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154867" comment="libavresample3-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154868" comment="libavresample3-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154869" comment="libavutil-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154870" comment="libavutil55-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154871" comment="libavutil55-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154872" comment="libpostproc-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154873" comment="libpostproc54-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154874" comment="libpostproc54-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154875" comment="libswresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154876" comment="libswresample2-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154877" comment="libswresample2-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154878" comment="libswscale-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154879" comment="libswscale4-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154880" comment="libswscale4-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177863" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7863</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7863" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7863" source="CVE"/>
    <description>
    FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7863.html">CVE-2017-7863</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7863">SUSE bug 1034179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7863">SUSE bug 1034179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7863">SUSE bug 1034179</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7863">SUSE bug 1034179</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154853" comment="ffmpeg-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156206" comment="ffmpeg2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156207" comment="ffmpeg2-devel-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154854" comment="libavcodec-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156208" comment="libavcodec56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156209" comment="libavcodec56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154855" comment="libavcodec57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154856" comment="libavcodec57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154857" comment="libavdevice-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156210" comment="libavdevice56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156211" comment="libavdevice56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154858" comment="libavdevice57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154859" comment="libavdevice57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154860" comment="libavfilter-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156212" comment="libavfilter5-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156213" comment="libavfilter5-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154861" comment="libavfilter6-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154862" comment="libavfilter6-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154863" comment="libavformat-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156214" comment="libavformat56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156215" comment="libavformat56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154864" comment="libavformat57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154865" comment="libavformat57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154866" comment="libavresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156216" comment="libavresample2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156217" comment="libavresample2-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154867" comment="libavresample3-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154868" comment="libavresample3-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154869" comment="libavutil-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156218" comment="libavutil54-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156219" comment="libavutil54-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154870" comment="libavutil55-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154871" comment="libavutil55-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154872" comment="libpostproc-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156220" comment="libpostproc53-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156221" comment="libpostproc53-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154873" comment="libpostproc54-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154874" comment="libpostproc54-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154875" comment="libswresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156222" comment="libswresample1-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156223" comment="libswresample1-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154876" comment="libswresample2-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154877" comment="libswresample2-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154878" comment="libswscale-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156224" comment="libswscale3-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156225" comment="libswscale3-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154879" comment="libswscale4-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154880" comment="libswscale4-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177865" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7865</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7865" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7865" source="CVE"/>
    <description>
    FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7865.html">CVE-2017-7865</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7865">SUSE bug 1034177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7865">SUSE bug 1034177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7865">SUSE bug 1034177</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7865">SUSE bug 1034177</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154853" comment="ffmpeg-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156206" comment="ffmpeg2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156207" comment="ffmpeg2-devel-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154854" comment="libavcodec-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156208" comment="libavcodec56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156209" comment="libavcodec56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154855" comment="libavcodec57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154856" comment="libavcodec57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154857" comment="libavdevice-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156210" comment="libavdevice56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156211" comment="libavdevice56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154858" comment="libavdevice57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154859" comment="libavdevice57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154860" comment="libavfilter-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156212" comment="libavfilter5-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156213" comment="libavfilter5-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154861" comment="libavfilter6-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154862" comment="libavfilter6-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154863" comment="libavformat-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156214" comment="libavformat56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156215" comment="libavformat56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154864" comment="libavformat57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154865" comment="libavformat57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154866" comment="libavresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156216" comment="libavresample2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156217" comment="libavresample2-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154867" comment="libavresample3-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154868" comment="libavresample3-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154869" comment="libavutil-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156218" comment="libavutil54-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156219" comment="libavutil54-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154870" comment="libavutil55-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154871" comment="libavutil55-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154872" comment="libpostproc-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156220" comment="libpostproc53-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156221" comment="libpostproc53-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154873" comment="libpostproc54-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154874" comment="libpostproc54-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154875" comment="libswresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156222" comment="libswresample1-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156223" comment="libswresample1-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154876" comment="libswresample2-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154877" comment="libswresample2-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154878" comment="libswscale-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156224" comment="libswscale3-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156225" comment="libswscale3-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154879" comment="libswscale4-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154880" comment="libswscale4-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177866" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7866</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7866" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7866" source="CVE"/>
    <description>
    FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7866.html">CVE-2017-7866</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7866">SUSE bug 1034176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7866">SUSE bug 1034176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7866">SUSE bug 1034176</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7866">SUSE bug 1034176</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154853" comment="ffmpeg-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153138" comment="ffmpeg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156206" comment="ffmpeg2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156226" comment="ffmpeg2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156207" comment="ffmpeg2-devel-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156227" comment="ffmpeg2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154854" comment="libavcodec-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153140" comment="libavcodec-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156208" comment="libavcodec56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153141" comment="libavcodec56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156209" comment="libavcodec56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153142" comment="libavcodec56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154855" comment="libavcodec57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153988" comment="libavcodec57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154856" comment="libavcodec57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153989" comment="libavcodec57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154857" comment="libavdevice-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153143" comment="libavdevice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156210" comment="libavdevice56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153144" comment="libavdevice56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156211" comment="libavdevice56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153145" comment="libavdevice56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154858" comment="libavdevice57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153990" comment="libavdevice57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154859" comment="libavdevice57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153991" comment="libavdevice57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154860" comment="libavfilter-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153146" comment="libavfilter-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156212" comment="libavfilter5-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153147" comment="libavfilter5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156213" comment="libavfilter5-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153148" comment="libavfilter5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154861" comment="libavfilter6-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153992" comment="libavfilter6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154862" comment="libavfilter6-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153993" comment="libavfilter6-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154863" comment="libavformat-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153149" comment="libavformat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156214" comment="libavformat56-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153150" comment="libavformat56 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156215" comment="libavformat56-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153151" comment="libavformat56-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154864" comment="libavformat57-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153994" comment="libavformat57 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154865" comment="libavformat57-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153995" comment="libavformat57-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154866" comment="libavresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153152" comment="libavresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156216" comment="libavresample2-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153153" comment="libavresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156217" comment="libavresample2-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153154" comment="libavresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154867" comment="libavresample3-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153996" comment="libavresample3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154868" comment="libavresample3-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153997" comment="libavresample3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154869" comment="libavutil-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153155" comment="libavutil-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156218" comment="libavutil54-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153156" comment="libavutil54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156219" comment="libavutil54-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153157" comment="libavutil54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154870" comment="libavutil55-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153998" comment="libavutil55 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154871" comment="libavutil55-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153999" comment="libavutil55-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154872" comment="libpostproc-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153158" comment="libpostproc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156220" comment="libpostproc53-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153159" comment="libpostproc53 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156221" comment="libpostproc53-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153160" comment="libpostproc53-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154873" comment="libpostproc54-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154000" comment="libpostproc54 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154874" comment="libpostproc54-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154001" comment="libpostproc54-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154875" comment="libswresample-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153161" comment="libswresample-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156222" comment="libswresample1-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153162" comment="libswresample1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156223" comment="libswresample1-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153163" comment="libswresample1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154876" comment="libswresample2-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154002" comment="libswresample2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154877" comment="libswresample2-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154003" comment="libswresample2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154878" comment="libswscale-devel-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153164" comment="libswscale-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156224" comment="libswscale3-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153165" comment="libswscale3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156225" comment="libswscale3-32bit-2.8.11-25.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153166" comment="libswscale3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154879" comment="libswscale4-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154004" comment="libswscale4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154880" comment="libswscale4-32bit-3.3-6.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154005" comment="libswscale4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177869" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7869</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7869" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7869" source="CVE"/>
    <description>
    GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7869.html">CVE-2017-7869</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1038337</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7869">SUSE bug 1034173</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158847" comment="gnutls-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151156" comment="gnutls is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158848" comment="libgnutls-devel-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151157" comment="libgnutls-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158849" comment="libgnutls-devel-32bit-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153803" comment="libgnutls-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158850" comment="libgnutls-openssl-devel-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153804" comment="libgnutls-openssl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158851" comment="libgnutls-openssl27-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151158" comment="libgnutls-openssl27 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158852" comment="libgnutls28-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151159" comment="libgnutls28 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158853" comment="libgnutls28-32bit-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151160" comment="libgnutls28-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158854" comment="libgnutlsxx-devel-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153805" comment="libgnutlsxx-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158855" comment="libgnutlsxx28-3.2.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153806" comment="libgnutlsxx28 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177870" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7870</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7870" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7870" source="CVE"/>
    <description>
    LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7870.html">CVE-2017-7870</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7870">SUSE bug 1034568</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158482" comment="libixion-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153320" comment="libixion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158483" comment="libixion-0_12-0-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158751" comment="libixion-0_12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158484" comment="libixion-devel-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153322" comment="libixion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158485" comment="libixion-python3-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153323" comment="libixion-python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158486" comment="libixion-tools-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153324" comment="libixion-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158487" comment="libmwaw-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158752" comment="libmwaw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158488" comment="libmwaw-0_3-3-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158753" comment="libmwaw-0_3-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158489" comment="libmwaw-devel-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158754" comment="libmwaw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158490" comment="libmwaw-devel-doc-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158755" comment="libmwaw-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158491" comment="libmwaw-tools-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158756" comment="libmwaw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158492" comment="liborcus-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153325" comment="liborcus is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158493" comment="liborcus-0_12-0-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158757" comment="liborcus-0_12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158494" comment="liborcus-devel-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153327" comment="liborcus-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158495" comment="liborcus-python3-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153328" comment="liborcus-python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158496" comment="liborcus-tools-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153329" comment="liborcus-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164015" comment="libreoffice-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164016" comment="libreoffice-base-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164017" comment="libreoffice-base-drivers-mysql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164018" comment="libreoffice-base-drivers-postgresql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153330" comment="libreoffice-base-drivers-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164019" comment="libreoffice-branding-upstream-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164020" comment="libreoffice-calc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164021" comment="libreoffice-calc-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164022" comment="libreoffice-draw-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164023" comment="libreoffice-filters-optional-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164024" comment="libreoffice-gdb-pretty-printers-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153331" comment="libreoffice-gdb-pretty-printers is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164025" comment="libreoffice-glade-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153332" comment="libreoffice-glade is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164026" comment="libreoffice-gnome-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164027" comment="libreoffice-gtk3-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164028" comment="libreoffice-icon-theme-breeze-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164029" comment="libreoffice-icon-theme-galaxy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164030" comment="libreoffice-icon-theme-hicontrast-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164031" comment="libreoffice-icon-theme-oxygen-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164032" comment="libreoffice-icon-theme-sifr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164033" comment="libreoffice-icon-theme-tango-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164034" comment="libreoffice-impress-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164035" comment="libreoffice-kde4-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164036" comment="libreoffice-l10n-af-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153334" comment="libreoffice-l10n-af is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164037" comment="libreoffice-l10n-ar-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164038" comment="libreoffice-l10n-as-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153336" comment="libreoffice-l10n-as is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164039" comment="libreoffice-l10n-bg-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164040" comment="libreoffice-l10n-bn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153338" comment="libreoffice-l10n-bn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164041" comment="libreoffice-l10n-br-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153339" comment="libreoffice-l10n-br is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164042" comment="libreoffice-l10n-ca-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164043" comment="libreoffice-l10n-cs-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164044" comment="libreoffice-l10n-cy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153341" comment="libreoffice-l10n-cy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164045" comment="libreoffice-l10n-da-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164046" comment="libreoffice-l10n-de-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164047" comment="libreoffice-l10n-dz-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153342" comment="libreoffice-l10n-dz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164048" comment="libreoffice-l10n-el-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164049" comment="libreoffice-l10n-en-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164050" comment="libreoffice-l10n-es-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164051" comment="libreoffice-l10n-et-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164052" comment="libreoffice-l10n-eu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153344" comment="libreoffice-l10n-eu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164053" comment="libreoffice-l10n-fa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164054" comment="libreoffice-l10n-fi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164055" comment="libreoffice-l10n-fr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164056" comment="libreoffice-l10n-ga-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153347" comment="libreoffice-l10n-ga is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164057" comment="libreoffice-l10n-gl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153348" comment="libreoffice-l10n-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164058" comment="libreoffice-l10n-gu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153349" comment="libreoffice-l10n-gu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164059" comment="libreoffice-l10n-he-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153350" comment="libreoffice-l10n-he is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164060" comment="libreoffice-l10n-hi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153351" comment="libreoffice-l10n-hi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164061" comment="libreoffice-l10n-hr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153352" comment="libreoffice-l10n-hr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164062" comment="libreoffice-l10n-hu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164063" comment="libreoffice-l10n-it-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164064" comment="libreoffice-l10n-ja-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164065" comment="libreoffice-l10n-kk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153353" comment="libreoffice-l10n-kk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164066" comment="libreoffice-l10n-kn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153354" comment="libreoffice-l10n-kn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164067" comment="libreoffice-l10n-ko-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164068" comment="libreoffice-l10n-lt-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164069" comment="libreoffice-l10n-lv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153357" comment="libreoffice-l10n-lv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164070" comment="libreoffice-l10n-mai-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153358" comment="libreoffice-l10n-mai is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164071" comment="libreoffice-l10n-ml-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153359" comment="libreoffice-l10n-ml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164072" comment="libreoffice-l10n-mr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153360" comment="libreoffice-l10n-mr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164073" comment="libreoffice-l10n-nb-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164074" comment="libreoffice-l10n-nl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164075" comment="libreoffice-l10n-nn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153363" comment="libreoffice-l10n-nn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164076" comment="libreoffice-l10n-nr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153364" comment="libreoffice-l10n-nr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164077" comment="libreoffice-l10n-nso-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153365" comment="libreoffice-l10n-nso is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164078" comment="libreoffice-l10n-or-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153366" comment="libreoffice-l10n-or is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164079" comment="libreoffice-l10n-pa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153367" comment="libreoffice-l10n-pa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164080" comment="libreoffice-l10n-pl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164081" comment="libreoffice-l10n-pt_BR-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164082" comment="libreoffice-l10n-pt_PT-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158759" comment="libreoffice-l10n-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164083" comment="libreoffice-l10n-ro-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153370" comment="libreoffice-l10n-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164084" comment="libreoffice-l10n-ru-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164085" comment="libreoffice-l10n-si-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153371" comment="libreoffice-l10n-si is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164086" comment="libreoffice-l10n-sk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164087" comment="libreoffice-l10n-sl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164088" comment="libreoffice-l10n-sr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153374" comment="libreoffice-l10n-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164089" comment="libreoffice-l10n-ss-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153375" comment="libreoffice-l10n-ss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164090" comment="libreoffice-l10n-st-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153376" comment="libreoffice-l10n-st is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164091" comment="libreoffice-l10n-sv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164092" comment="libreoffice-l10n-ta-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153378" comment="libreoffice-l10n-ta is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164093" comment="libreoffice-l10n-te-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153379" comment="libreoffice-l10n-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164094" comment="libreoffice-l10n-th-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153380" comment="libreoffice-l10n-th is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164095" comment="libreoffice-l10n-tn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153381" comment="libreoffice-l10n-tn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164096" comment="libreoffice-l10n-tr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153382" comment="libreoffice-l10n-tr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164097" comment="libreoffice-l10n-ts-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153383" comment="libreoffice-l10n-ts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164098" comment="libreoffice-l10n-uk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164099" comment="libreoffice-l10n-ve-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153385" comment="libreoffice-l10n-ve is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164100" comment="libreoffice-l10n-xh-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153386" comment="libreoffice-l10n-xh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164101" comment="libreoffice-l10n-zh_CN-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164102" comment="libreoffice-l10n-zh_TW-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164103" comment="libreoffice-l10n-zu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153389" comment="libreoffice-l10n-zu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164104" comment="libreoffice-mailmerge-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164105" comment="libreoffice-math-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164106" comment="libreoffice-officebean-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153390" comment="libreoffice-officebean is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164107" comment="libreoffice-pyuno-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164108" comment="libreoffice-sdk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153391" comment="libreoffice-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164109" comment="libreoffice-sdk-doc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153392" comment="libreoffice-sdk-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164110" comment="libreoffice-writer-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164111" comment="libreoffice-writer-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164112" comment="libreofficekit-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164113" comment="libreofficekit-devel-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153394" comment="libreofficekit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158596" comment="libstaroffice-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158762" comment="libstaroffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158597" comment="libstaroffice-0_0-0-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158763" comment="libstaroffice-0_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158598" comment="libstaroffice-devel-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158764" comment="libstaroffice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158599" comment="libstaroffice-devel-doc-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158765" comment="libstaroffice-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158600" comment="libstaroffice-tools-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158766" comment="libstaroffice-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158236" comment="libzmf-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158767" comment="libzmf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158237" comment="libzmf-0_0-0-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158768" comment="libzmf-0_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158601" comment="libzmf-devel-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158769" comment="libzmf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158602" comment="libzmf-devel-doc-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158770" comment="libzmf-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158603" comment="libzmf-tools-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158771" comment="libzmf-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158604" comment="myspell-af_NA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153406" comment="myspell-af_NA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158605" comment="myspell-af_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153407" comment="myspell-af_ZA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158606" comment="myspell-an-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153408" comment="myspell-an is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158607" comment="myspell-an_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153409" comment="myspell-an_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158608" comment="myspell-ar-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153410" comment="myspell-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158609" comment="myspell-ar_AE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153411" comment="myspell-ar_AE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158610" comment="myspell-ar_BH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153412" comment="myspell-ar_BH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158611" comment="myspell-ar_DZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153413" comment="myspell-ar_DZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158612" comment="myspell-ar_EG-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153414" comment="myspell-ar_EG is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158613" comment="myspell-ar_IQ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153415" comment="myspell-ar_IQ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158614" comment="myspell-ar_JO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153416" comment="myspell-ar_JO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158615" comment="myspell-ar_KW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153417" comment="myspell-ar_KW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158616" comment="myspell-ar_LB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153418" comment="myspell-ar_LB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158617" comment="myspell-ar_LY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153419" comment="myspell-ar_LY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158618" comment="myspell-ar_MA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153420" comment="myspell-ar_MA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158619" comment="myspell-ar_OM-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153421" comment="myspell-ar_OM is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158620" comment="myspell-ar_QA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153422" comment="myspell-ar_QA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158621" comment="myspell-ar_SA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153423" comment="myspell-ar_SA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158622" comment="myspell-ar_SD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153424" comment="myspell-ar_SD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158623" comment="myspell-ar_SY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153425" comment="myspell-ar_SY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158624" comment="myspell-ar_TN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153426" comment="myspell-ar_TN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158625" comment="myspell-ar_YE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153427" comment="myspell-ar_YE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158626" comment="myspell-be_BY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153428" comment="myspell-be_BY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158627" comment="myspell-bg_BG-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153429" comment="myspell-bg_BG is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158628" comment="myspell-bn_BD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153430" comment="myspell-bn_BD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158629" comment="myspell-bn_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153431" comment="myspell-bn_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158630" comment="myspell-bo-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158772" comment="myspell-bo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158631" comment="myspell-bo_CN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158773" comment="myspell-bo_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158632" comment="myspell-bo_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158774" comment="myspell-bo_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158633" comment="myspell-br_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153432" comment="myspell-br_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158634" comment="myspell-bs-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153433" comment="myspell-bs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158635" comment="myspell-bs_BA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153434" comment="myspell-bs_BA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158636" comment="myspell-ca-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153435" comment="myspell-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158637" comment="myspell-ca_AD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153436" comment="myspell-ca_AD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158638" comment="myspell-ca_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153437" comment="myspell-ca_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158639" comment="myspell-ca_ES_valencia-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153438" comment="myspell-ca_ES_valencia is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158640" comment="myspell-ca_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153439" comment="myspell-ca_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158641" comment="myspell-ca_IT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153440" comment="myspell-ca_IT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158642" comment="myspell-cs_CZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153441" comment="myspell-cs_CZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158643" comment="myspell-da_DK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153442" comment="myspell-da_DK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158644" comment="myspell-de-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153443" comment="myspell-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158645" comment="myspell-de_AT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153444" comment="myspell-de_AT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158646" comment="myspell-de_CH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153445" comment="myspell-de_CH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158647" comment="myspell-de_DE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153446" comment="myspell-de_DE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158648" comment="myspell-dictionaries-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153447" comment="myspell-dictionaries is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158649" comment="myspell-el_GR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153448" comment="myspell-el_GR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158650" comment="myspell-en-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153449" comment="myspell-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158651" comment="myspell-en_AU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153450" comment="myspell-en_AU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158652" comment="myspell-en_BS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153451" comment="myspell-en_BS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158653" comment="myspell-en_BZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153452" comment="myspell-en_BZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158654" comment="myspell-en_CA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153453" comment="myspell-en_CA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158655" comment="myspell-en_GB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153454" comment="myspell-en_GB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158656" comment="myspell-en_GH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153455" comment="myspell-en_GH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158657" comment="myspell-en_IE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153456" comment="myspell-en_IE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158658" comment="myspell-en_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153457" comment="myspell-en_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158659" comment="myspell-en_JM-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153458" comment="myspell-en_JM is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158660" comment="myspell-en_MW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153459" comment="myspell-en_MW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158661" comment="myspell-en_NA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153460" comment="myspell-en_NA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158662" comment="myspell-en_NZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153461" comment="myspell-en_NZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158663" comment="myspell-en_PH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153462" comment="myspell-en_PH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158664" comment="myspell-en_TT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153463" comment="myspell-en_TT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158665" comment="myspell-en_US-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153464" comment="myspell-en_US is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158666" comment="myspell-en_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153465" comment="myspell-en_ZA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158667" comment="myspell-en_ZW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153466" comment="myspell-en_ZW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158668" comment="myspell-es-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153467" comment="myspell-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158669" comment="myspell-es_AR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153468" comment="myspell-es_AR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158670" comment="myspell-es_BO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153469" comment="myspell-es_BO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158671" comment="myspell-es_CL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153470" comment="myspell-es_CL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158672" comment="myspell-es_CO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153471" comment="myspell-es_CO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158673" comment="myspell-es_CR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153472" comment="myspell-es_CR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158674" comment="myspell-es_CU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153473" comment="myspell-es_CU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158675" comment="myspell-es_DO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153474" comment="myspell-es_DO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158676" comment="myspell-es_EC-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153475" comment="myspell-es_EC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158677" comment="myspell-es_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153476" comment="myspell-es_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158678" comment="myspell-es_GT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153477" comment="myspell-es_GT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158679" comment="myspell-es_HN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153478" comment="myspell-es_HN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158680" comment="myspell-es_MX-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153479" comment="myspell-es_MX is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158681" comment="myspell-es_NI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153480" comment="myspell-es_NI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158682" comment="myspell-es_PA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153481" comment="myspell-es_PA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158683" comment="myspell-es_PE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153482" comment="myspell-es_PE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158684" comment="myspell-es_PR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153483" comment="myspell-es_PR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158685" comment="myspell-es_PY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153484" comment="myspell-es_PY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158686" comment="myspell-es_SV-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153485" comment="myspell-es_SV is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158687" comment="myspell-es_UY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153486" comment="myspell-es_UY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158688" comment="myspell-es_VE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153487" comment="myspell-es_VE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158689" comment="myspell-et_EE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153488" comment="myspell-et_EE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158690" comment="myspell-fr_BE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153489" comment="myspell-fr_BE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158691" comment="myspell-fr_CA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153490" comment="myspell-fr_CA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158692" comment="myspell-fr_CH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153491" comment="myspell-fr_CH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158693" comment="myspell-fr_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153492" comment="myspell-fr_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158694" comment="myspell-fr_LU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153493" comment="myspell-fr_LU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158695" comment="myspell-fr_MC-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153494" comment="myspell-fr_MC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158696" comment="myspell-gd_GB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153495" comment="myspell-gd_GB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158697" comment="myspell-gl-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153496" comment="myspell-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158698" comment="myspell-gl_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153497" comment="myspell-gl_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158699" comment="myspell-gu_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153498" comment="myspell-gu_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158700" comment="myspell-gug-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153499" comment="myspell-gug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158701" comment="myspell-gug_PY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153500" comment="myspell-gug_PY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158702" comment="myspell-he_IL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153501" comment="myspell-he_IL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158703" comment="myspell-hi_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153502" comment="myspell-hi_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158704" comment="myspell-hr_HR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153503" comment="myspell-hr_HR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158705" comment="myspell-hu_HU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153504" comment="myspell-hu_HU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158706" comment="myspell-is-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153505" comment="myspell-is is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158707" comment="myspell-is_IS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153506" comment="myspell-is_IS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158708" comment="myspell-it_IT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153507" comment="myspell-it_IT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158709" comment="myspell-kmr_Latn-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153508" comment="myspell-kmr_Latn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158710" comment="myspell-kmr_Latn_SY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153509" comment="myspell-kmr_Latn_SY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158711" comment="myspell-kmr_Latn_TR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153510" comment="myspell-kmr_Latn_TR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158712" comment="myspell-lightproof-en-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153511" comment="myspell-lightproof-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158713" comment="myspell-lightproof-hu_HU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153512" comment="myspell-lightproof-hu_HU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158714" comment="myspell-lightproof-pt_BR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153513" comment="myspell-lightproof-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158715" comment="myspell-lightproof-ru_RU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153514" comment="myspell-lightproof-ru_RU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158716" comment="myspell-lo_LA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153515" comment="myspell-lo_LA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158717" comment="myspell-lt_LT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153516" comment="myspell-lt_LT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158718" comment="myspell-lv_LV-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153517" comment="myspell-lv_LV is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158719" comment="myspell-nb_NO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153518" comment="myspell-nb_NO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158720" comment="myspell-ne_NP-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153519" comment="myspell-ne_NP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158721" comment="myspell-nl_BE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153520" comment="myspell-nl_BE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158722" comment="myspell-nl_NL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153521" comment="myspell-nl_NL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158723" comment="myspell-nn_NO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153522" comment="myspell-nn_NO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158724" comment="myspell-no-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153523" comment="myspell-no is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158725" comment="myspell-oc_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153524" comment="myspell-oc_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158726" comment="myspell-pl_PL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153525" comment="myspell-pl_PL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158727" comment="myspell-pt_AO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153526" comment="myspell-pt_AO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158728" comment="myspell-pt_BR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153527" comment="myspell-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158729" comment="myspell-pt_PT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153528" comment="myspell-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158730" comment="myspell-ro-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153529" comment="myspell-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158731" comment="myspell-ro_RO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153530" comment="myspell-ro_RO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158732" comment="myspell-ru_RU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153531" comment="myspell-ru_RU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158733" comment="myspell-si_LK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153532" comment="myspell-si_LK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158734" comment="myspell-sk_SK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153533" comment="myspell-sk_SK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158735" comment="myspell-sl_SI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153534" comment="myspell-sl_SI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158736" comment="myspell-sr-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153535" comment="myspell-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158737" comment="myspell-sr_CS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153536" comment="myspell-sr_CS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158738" comment="myspell-sr_Latn_CS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153537" comment="myspell-sr_Latn_CS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158739" comment="myspell-sr_Latn_RS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153538" comment="myspell-sr_Latn_RS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158740" comment="myspell-sr_RS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153539" comment="myspell-sr_RS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158741" comment="myspell-sv_FI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153540" comment="myspell-sv_FI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158742" comment="myspell-sv_SE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153541" comment="myspell-sv_SE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158743" comment="myspell-sw_TZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153542" comment="myspell-sw_TZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158744" comment="myspell-te-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153543" comment="myspell-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158745" comment="myspell-te_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153544" comment="myspell-te_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158746" comment="myspell-th_TH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153545" comment="myspell-th_TH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158747" comment="myspell-uk_UA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153546" comment="myspell-uk_UA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158748" comment="myspell-vi-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153547" comment="myspell-vi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158749" comment="myspell-vi_VN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153548" comment="myspell-vi_VN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158750" comment="myspell-zu_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153549" comment="myspell-zu_ZA is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177875" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7875</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7875" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7875" source="CVE"/>
    <description>
    In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7875.html">CVE-2017-7875</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7875">SUSE bug 1034567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7875">SUSE bug 1034567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7875">SUSE bug 1034567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7875">SUSE bug 1034567</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7875">SUSE bug 1034567</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154881" comment="feh-2.18.3-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154883" comment="feh is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177882" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7882</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7882" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7882" source="CVE"/>
    <description>
    LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7882.html">CVE-2017-7882</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7882">SUSE bug 1034329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7882">SUSE bug 1034329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7882">SUSE bug 1034329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7882">SUSE bug 1034329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7882">SUSE bug 1034329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7882">SUSE bug 1034329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7882">SUSE bug 1034329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7882">SUSE bug 1034329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7882">SUSE bug 1034329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7882">SUSE bug 1034329</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7882">SUSE bug 1034329</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158482" comment="libixion-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153320" comment="libixion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158483" comment="libixion-0_12-0-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158751" comment="libixion-0_12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158484" comment="libixion-devel-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153322" comment="libixion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158485" comment="libixion-python3-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153323" comment="libixion-python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158486" comment="libixion-tools-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153324" comment="libixion-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158487" comment="libmwaw-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158752" comment="libmwaw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158488" comment="libmwaw-0_3-3-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158753" comment="libmwaw-0_3-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158489" comment="libmwaw-devel-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158754" comment="libmwaw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158490" comment="libmwaw-devel-doc-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158755" comment="libmwaw-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158491" comment="libmwaw-tools-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158756" comment="libmwaw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158492" comment="liborcus-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153325" comment="liborcus is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158493" comment="liborcus-0_12-0-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158757" comment="liborcus-0_12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158494" comment="liborcus-devel-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153327" comment="liborcus-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158495" comment="liborcus-python3-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153328" comment="liborcus-python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158496" comment="liborcus-tools-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153329" comment="liborcus-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164015" comment="libreoffice-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164016" comment="libreoffice-base-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164017" comment="libreoffice-base-drivers-mysql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164018" comment="libreoffice-base-drivers-postgresql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153330" comment="libreoffice-base-drivers-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164019" comment="libreoffice-branding-upstream-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164020" comment="libreoffice-calc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164021" comment="libreoffice-calc-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164022" comment="libreoffice-draw-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164023" comment="libreoffice-filters-optional-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164024" comment="libreoffice-gdb-pretty-printers-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153331" comment="libreoffice-gdb-pretty-printers is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164025" comment="libreoffice-glade-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153332" comment="libreoffice-glade is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164026" comment="libreoffice-gnome-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164027" comment="libreoffice-gtk3-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164028" comment="libreoffice-icon-theme-breeze-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164029" comment="libreoffice-icon-theme-galaxy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164030" comment="libreoffice-icon-theme-hicontrast-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164031" comment="libreoffice-icon-theme-oxygen-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164032" comment="libreoffice-icon-theme-sifr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164033" comment="libreoffice-icon-theme-tango-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164034" comment="libreoffice-impress-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164035" comment="libreoffice-kde4-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164036" comment="libreoffice-l10n-af-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153334" comment="libreoffice-l10n-af is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164037" comment="libreoffice-l10n-ar-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164038" comment="libreoffice-l10n-as-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153336" comment="libreoffice-l10n-as is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164039" comment="libreoffice-l10n-bg-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164040" comment="libreoffice-l10n-bn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153338" comment="libreoffice-l10n-bn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164041" comment="libreoffice-l10n-br-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153339" comment="libreoffice-l10n-br is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164042" comment="libreoffice-l10n-ca-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164043" comment="libreoffice-l10n-cs-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164044" comment="libreoffice-l10n-cy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153341" comment="libreoffice-l10n-cy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164045" comment="libreoffice-l10n-da-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164046" comment="libreoffice-l10n-de-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164047" comment="libreoffice-l10n-dz-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153342" comment="libreoffice-l10n-dz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164048" comment="libreoffice-l10n-el-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164049" comment="libreoffice-l10n-en-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164050" comment="libreoffice-l10n-es-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164051" comment="libreoffice-l10n-et-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164052" comment="libreoffice-l10n-eu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153344" comment="libreoffice-l10n-eu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164053" comment="libreoffice-l10n-fa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164054" comment="libreoffice-l10n-fi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164055" comment="libreoffice-l10n-fr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164056" comment="libreoffice-l10n-ga-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153347" comment="libreoffice-l10n-ga is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164057" comment="libreoffice-l10n-gl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153348" comment="libreoffice-l10n-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164058" comment="libreoffice-l10n-gu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153349" comment="libreoffice-l10n-gu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164059" comment="libreoffice-l10n-he-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153350" comment="libreoffice-l10n-he is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164060" comment="libreoffice-l10n-hi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153351" comment="libreoffice-l10n-hi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164061" comment="libreoffice-l10n-hr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153352" comment="libreoffice-l10n-hr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164062" comment="libreoffice-l10n-hu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164063" comment="libreoffice-l10n-it-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164064" comment="libreoffice-l10n-ja-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164065" comment="libreoffice-l10n-kk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153353" comment="libreoffice-l10n-kk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164066" comment="libreoffice-l10n-kn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153354" comment="libreoffice-l10n-kn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164067" comment="libreoffice-l10n-ko-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164068" comment="libreoffice-l10n-lt-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164069" comment="libreoffice-l10n-lv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153357" comment="libreoffice-l10n-lv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164070" comment="libreoffice-l10n-mai-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153358" comment="libreoffice-l10n-mai is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164071" comment="libreoffice-l10n-ml-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153359" comment="libreoffice-l10n-ml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164072" comment="libreoffice-l10n-mr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153360" comment="libreoffice-l10n-mr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164073" comment="libreoffice-l10n-nb-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164074" comment="libreoffice-l10n-nl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164075" comment="libreoffice-l10n-nn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153363" comment="libreoffice-l10n-nn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164076" comment="libreoffice-l10n-nr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153364" comment="libreoffice-l10n-nr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164077" comment="libreoffice-l10n-nso-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153365" comment="libreoffice-l10n-nso is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164078" comment="libreoffice-l10n-or-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153366" comment="libreoffice-l10n-or is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164079" comment="libreoffice-l10n-pa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153367" comment="libreoffice-l10n-pa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164080" comment="libreoffice-l10n-pl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164081" comment="libreoffice-l10n-pt_BR-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164082" comment="libreoffice-l10n-pt_PT-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158759" comment="libreoffice-l10n-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164083" comment="libreoffice-l10n-ro-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153370" comment="libreoffice-l10n-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164084" comment="libreoffice-l10n-ru-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164085" comment="libreoffice-l10n-si-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153371" comment="libreoffice-l10n-si is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164086" comment="libreoffice-l10n-sk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164087" comment="libreoffice-l10n-sl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164088" comment="libreoffice-l10n-sr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153374" comment="libreoffice-l10n-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164089" comment="libreoffice-l10n-ss-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153375" comment="libreoffice-l10n-ss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164090" comment="libreoffice-l10n-st-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153376" comment="libreoffice-l10n-st is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164091" comment="libreoffice-l10n-sv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164092" comment="libreoffice-l10n-ta-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153378" comment="libreoffice-l10n-ta is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164093" comment="libreoffice-l10n-te-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153379" comment="libreoffice-l10n-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164094" comment="libreoffice-l10n-th-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153380" comment="libreoffice-l10n-th is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164095" comment="libreoffice-l10n-tn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153381" comment="libreoffice-l10n-tn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164096" comment="libreoffice-l10n-tr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153382" comment="libreoffice-l10n-tr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164097" comment="libreoffice-l10n-ts-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153383" comment="libreoffice-l10n-ts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164098" comment="libreoffice-l10n-uk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164099" comment="libreoffice-l10n-ve-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153385" comment="libreoffice-l10n-ve is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164100" comment="libreoffice-l10n-xh-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153386" comment="libreoffice-l10n-xh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164101" comment="libreoffice-l10n-zh_CN-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164102" comment="libreoffice-l10n-zh_TW-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164103" comment="libreoffice-l10n-zu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153389" comment="libreoffice-l10n-zu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164104" comment="libreoffice-mailmerge-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164105" comment="libreoffice-math-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164106" comment="libreoffice-officebean-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153390" comment="libreoffice-officebean is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164107" comment="libreoffice-pyuno-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164108" comment="libreoffice-sdk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153391" comment="libreoffice-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164109" comment="libreoffice-sdk-doc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153392" comment="libreoffice-sdk-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164110" comment="libreoffice-writer-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164111" comment="libreoffice-writer-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164112" comment="libreofficekit-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164113" comment="libreofficekit-devel-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153394" comment="libreofficekit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158596" comment="libstaroffice-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158762" comment="libstaroffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158597" comment="libstaroffice-0_0-0-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158763" comment="libstaroffice-0_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158598" comment="libstaroffice-devel-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158764" comment="libstaroffice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158599" comment="libstaroffice-devel-doc-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158765" comment="libstaroffice-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158600" comment="libstaroffice-tools-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158766" comment="libstaroffice-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158236" comment="libzmf-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158767" comment="libzmf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158237" comment="libzmf-0_0-0-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158768" comment="libzmf-0_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158601" comment="libzmf-devel-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158769" comment="libzmf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158602" comment="libzmf-devel-doc-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158770" comment="libzmf-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158603" comment="libzmf-tools-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158771" comment="libzmf-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158604" comment="myspell-af_NA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153406" comment="myspell-af_NA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158605" comment="myspell-af_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153407" comment="myspell-af_ZA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158606" comment="myspell-an-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153408" comment="myspell-an is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158607" comment="myspell-an_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153409" comment="myspell-an_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158608" comment="myspell-ar-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153410" comment="myspell-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158609" comment="myspell-ar_AE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153411" comment="myspell-ar_AE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158610" comment="myspell-ar_BH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153412" comment="myspell-ar_BH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158611" comment="myspell-ar_DZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153413" comment="myspell-ar_DZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158612" comment="myspell-ar_EG-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153414" comment="myspell-ar_EG is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158613" comment="myspell-ar_IQ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153415" comment="myspell-ar_IQ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158614" comment="myspell-ar_JO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153416" comment="myspell-ar_JO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158615" comment="myspell-ar_KW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153417" comment="myspell-ar_KW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158616" comment="myspell-ar_LB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153418" comment="myspell-ar_LB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158617" comment="myspell-ar_LY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153419" comment="myspell-ar_LY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158618" comment="myspell-ar_MA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153420" comment="myspell-ar_MA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158619" comment="myspell-ar_OM-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153421" comment="myspell-ar_OM is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158620" comment="myspell-ar_QA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153422" comment="myspell-ar_QA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158621" comment="myspell-ar_SA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153423" comment="myspell-ar_SA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158622" comment="myspell-ar_SD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153424" comment="myspell-ar_SD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158623" comment="myspell-ar_SY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153425" comment="myspell-ar_SY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158624" comment="myspell-ar_TN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153426" comment="myspell-ar_TN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158625" comment="myspell-ar_YE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153427" comment="myspell-ar_YE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158626" comment="myspell-be_BY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153428" comment="myspell-be_BY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158627" comment="myspell-bg_BG-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153429" comment="myspell-bg_BG is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158628" comment="myspell-bn_BD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153430" comment="myspell-bn_BD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158629" comment="myspell-bn_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153431" comment="myspell-bn_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158630" comment="myspell-bo-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158772" comment="myspell-bo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158631" comment="myspell-bo_CN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158773" comment="myspell-bo_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158632" comment="myspell-bo_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158774" comment="myspell-bo_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158633" comment="myspell-br_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153432" comment="myspell-br_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158634" comment="myspell-bs-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153433" comment="myspell-bs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158635" comment="myspell-bs_BA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153434" comment="myspell-bs_BA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158636" comment="myspell-ca-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153435" comment="myspell-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158637" comment="myspell-ca_AD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153436" comment="myspell-ca_AD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158638" comment="myspell-ca_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153437" comment="myspell-ca_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158639" comment="myspell-ca_ES_valencia-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153438" comment="myspell-ca_ES_valencia is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158640" comment="myspell-ca_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153439" comment="myspell-ca_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158641" comment="myspell-ca_IT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153440" comment="myspell-ca_IT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158642" comment="myspell-cs_CZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153441" comment="myspell-cs_CZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158643" comment="myspell-da_DK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153442" comment="myspell-da_DK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158644" comment="myspell-de-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153443" comment="myspell-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158645" comment="myspell-de_AT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153444" comment="myspell-de_AT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158646" comment="myspell-de_CH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153445" comment="myspell-de_CH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158647" comment="myspell-de_DE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153446" comment="myspell-de_DE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158648" comment="myspell-dictionaries-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153447" comment="myspell-dictionaries is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158649" comment="myspell-el_GR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153448" comment="myspell-el_GR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158650" comment="myspell-en-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153449" comment="myspell-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158651" comment="myspell-en_AU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153450" comment="myspell-en_AU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158652" comment="myspell-en_BS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153451" comment="myspell-en_BS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158653" comment="myspell-en_BZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153452" comment="myspell-en_BZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158654" comment="myspell-en_CA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153453" comment="myspell-en_CA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158655" comment="myspell-en_GB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153454" comment="myspell-en_GB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158656" comment="myspell-en_GH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153455" comment="myspell-en_GH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158657" comment="myspell-en_IE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153456" comment="myspell-en_IE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158658" comment="myspell-en_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153457" comment="myspell-en_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158659" comment="myspell-en_JM-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153458" comment="myspell-en_JM is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158660" comment="myspell-en_MW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153459" comment="myspell-en_MW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158661" comment="myspell-en_NA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153460" comment="myspell-en_NA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158662" comment="myspell-en_NZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153461" comment="myspell-en_NZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158663" comment="myspell-en_PH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153462" comment="myspell-en_PH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158664" comment="myspell-en_TT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153463" comment="myspell-en_TT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158665" comment="myspell-en_US-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153464" comment="myspell-en_US is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158666" comment="myspell-en_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153465" comment="myspell-en_ZA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158667" comment="myspell-en_ZW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153466" comment="myspell-en_ZW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158668" comment="myspell-es-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153467" comment="myspell-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158669" comment="myspell-es_AR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153468" comment="myspell-es_AR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158670" comment="myspell-es_BO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153469" comment="myspell-es_BO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158671" comment="myspell-es_CL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153470" comment="myspell-es_CL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158672" comment="myspell-es_CO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153471" comment="myspell-es_CO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158673" comment="myspell-es_CR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153472" comment="myspell-es_CR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158674" comment="myspell-es_CU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153473" comment="myspell-es_CU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158675" comment="myspell-es_DO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153474" comment="myspell-es_DO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158676" comment="myspell-es_EC-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153475" comment="myspell-es_EC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158677" comment="myspell-es_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153476" comment="myspell-es_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158678" comment="myspell-es_GT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153477" comment="myspell-es_GT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158679" comment="myspell-es_HN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153478" comment="myspell-es_HN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158680" comment="myspell-es_MX-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153479" comment="myspell-es_MX is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158681" comment="myspell-es_NI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153480" comment="myspell-es_NI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158682" comment="myspell-es_PA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153481" comment="myspell-es_PA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158683" comment="myspell-es_PE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153482" comment="myspell-es_PE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158684" comment="myspell-es_PR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153483" comment="myspell-es_PR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158685" comment="myspell-es_PY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153484" comment="myspell-es_PY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158686" comment="myspell-es_SV-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153485" comment="myspell-es_SV is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158687" comment="myspell-es_UY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153486" comment="myspell-es_UY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158688" comment="myspell-es_VE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153487" comment="myspell-es_VE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158689" comment="myspell-et_EE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153488" comment="myspell-et_EE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158690" comment="myspell-fr_BE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153489" comment="myspell-fr_BE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158691" comment="myspell-fr_CA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153490" comment="myspell-fr_CA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158692" comment="myspell-fr_CH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153491" comment="myspell-fr_CH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158693" comment="myspell-fr_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153492" comment="myspell-fr_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158694" comment="myspell-fr_LU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153493" comment="myspell-fr_LU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158695" comment="myspell-fr_MC-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153494" comment="myspell-fr_MC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158696" comment="myspell-gd_GB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153495" comment="myspell-gd_GB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158697" comment="myspell-gl-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153496" comment="myspell-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158698" comment="myspell-gl_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153497" comment="myspell-gl_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158699" comment="myspell-gu_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153498" comment="myspell-gu_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158700" comment="myspell-gug-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153499" comment="myspell-gug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158701" comment="myspell-gug_PY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153500" comment="myspell-gug_PY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158702" comment="myspell-he_IL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153501" comment="myspell-he_IL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158703" comment="myspell-hi_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153502" comment="myspell-hi_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158704" comment="myspell-hr_HR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153503" comment="myspell-hr_HR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158705" comment="myspell-hu_HU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153504" comment="myspell-hu_HU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158706" comment="myspell-is-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153505" comment="myspell-is is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158707" comment="myspell-is_IS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153506" comment="myspell-is_IS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158708" comment="myspell-it_IT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153507" comment="myspell-it_IT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158709" comment="myspell-kmr_Latn-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153508" comment="myspell-kmr_Latn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158710" comment="myspell-kmr_Latn_SY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153509" comment="myspell-kmr_Latn_SY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158711" comment="myspell-kmr_Latn_TR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153510" comment="myspell-kmr_Latn_TR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158712" comment="myspell-lightproof-en-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153511" comment="myspell-lightproof-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158713" comment="myspell-lightproof-hu_HU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153512" comment="myspell-lightproof-hu_HU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158714" comment="myspell-lightproof-pt_BR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153513" comment="myspell-lightproof-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158715" comment="myspell-lightproof-ru_RU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153514" comment="myspell-lightproof-ru_RU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158716" comment="myspell-lo_LA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153515" comment="myspell-lo_LA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158717" comment="myspell-lt_LT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153516" comment="myspell-lt_LT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158718" comment="myspell-lv_LV-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153517" comment="myspell-lv_LV is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158719" comment="myspell-nb_NO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153518" comment="myspell-nb_NO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158720" comment="myspell-ne_NP-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153519" comment="myspell-ne_NP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158721" comment="myspell-nl_BE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153520" comment="myspell-nl_BE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158722" comment="myspell-nl_NL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153521" comment="myspell-nl_NL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158723" comment="myspell-nn_NO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153522" comment="myspell-nn_NO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158724" comment="myspell-no-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153523" comment="myspell-no is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158725" comment="myspell-oc_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153524" comment="myspell-oc_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158726" comment="myspell-pl_PL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153525" comment="myspell-pl_PL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158727" comment="myspell-pt_AO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153526" comment="myspell-pt_AO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158728" comment="myspell-pt_BR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153527" comment="myspell-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158729" comment="myspell-pt_PT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153528" comment="myspell-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158730" comment="myspell-ro-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153529" comment="myspell-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158731" comment="myspell-ro_RO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153530" comment="myspell-ro_RO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158732" comment="myspell-ru_RU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153531" comment="myspell-ru_RU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158733" comment="myspell-si_LK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153532" comment="myspell-si_LK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158734" comment="myspell-sk_SK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153533" comment="myspell-sk_SK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158735" comment="myspell-sl_SI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153534" comment="myspell-sl_SI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158736" comment="myspell-sr-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153535" comment="myspell-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158737" comment="myspell-sr_CS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153536" comment="myspell-sr_CS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158738" comment="myspell-sr_Latn_CS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153537" comment="myspell-sr_Latn_CS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158739" comment="myspell-sr_Latn_RS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153538" comment="myspell-sr_Latn_RS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158740" comment="myspell-sr_RS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153539" comment="myspell-sr_RS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158741" comment="myspell-sv_FI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153540" comment="myspell-sv_FI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158742" comment="myspell-sv_SE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153541" comment="myspell-sv_SE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158743" comment="myspell-sw_TZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153542" comment="myspell-sw_TZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158744" comment="myspell-te-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153543" comment="myspell-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158745" comment="myspell-te_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153544" comment="myspell-te_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158746" comment="myspell-th_TH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153545" comment="myspell-th_TH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158747" comment="myspell-uk_UA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153546" comment="myspell-uk_UA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158748" comment="myspell-vi-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153547" comment="myspell-vi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158749" comment="myspell-vi_VN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153548" comment="myspell-vi_VN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158750" comment="myspell-zu_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153549" comment="myspell-zu_ZA is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7890</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7890" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7890" source="CVE"/>
    <description>
    The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7890.html">CVE-2017-7890</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7890">SUSE bug 1050241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7890">SUSE bug 1050241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7890">SUSE bug 1050241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7890">SUSE bug 1050241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7890">SUSE bug 1050241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7890">SUSE bug 1050241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7890">SUSE bug 1050241</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7890">SUSE bug 1050241</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163225" comment="apache2-mod_php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163059" comment="apache2-mod_php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163226" comment="php5-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163227" comment="php5-bcmath-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163228" comment="php5-bz2-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163229" comment="php5-calendar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163230" comment="php5-ctype-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163231" comment="php5-curl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163232" comment="php5-dba-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163233" comment="php5-devel-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163234" comment="php5-dom-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163235" comment="php5-enchant-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163236" comment="php5-exif-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163237" comment="php5-fastcgi-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163238" comment="php5-fileinfo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163239" comment="php5-firebird-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163240" comment="php5-fpm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163241" comment="php5-ftp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163242" comment="php5-gd-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163243" comment="php5-gettext-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163244" comment="php5-gmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163245" comment="php5-iconv-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163246" comment="php5-imap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163247" comment="php5-intl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163248" comment="php5-json-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163249" comment="php5-ldap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163250" comment="php5-mbstring-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163251" comment="php5-mcrypt-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163252" comment="php5-mssql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163253" comment="php5-mysql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163254" comment="php5-odbc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163255" comment="php5-opcache-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163256" comment="php5-openssl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163257" comment="php5-pcntl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163258" comment="php5-pdo-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163259" comment="php5-pear-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163260" comment="php5-pgsql-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163261" comment="php5-phar-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163262" comment="php5-posix-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163263" comment="php5-pspell-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163264" comment="php5-readline-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163265" comment="php5-shmop-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163266" comment="php5-snmp-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163267" comment="php5-soap-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163268" comment="php5-sockets-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163269" comment="php5-sqlite-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163270" comment="php5-suhosin-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163271" comment="php5-sysvmsg-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163272" comment="php5-sysvsem-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163273" comment="php5-sysvshm-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163274" comment="php5-tidy-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163275" comment="php5-tokenizer-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163276" comment="php5-wddx-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163277" comment="php5-xmlreader-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163278" comment="php5-xmlrpc-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163279" comment="php5-xmlwriter-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163280" comment="php5-xsl-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163281" comment="php5-zip-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163282" comment="php5-zlib-5.5.14-77.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163060" comment="php7-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163061" comment="php7-bcmath-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163062" comment="php7-bz2-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163063" comment="php7-calendar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163064" comment="php7-ctype-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163065" comment="php7-curl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163066" comment="php7-dba-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163067" comment="php7-devel-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163068" comment="php7-dom-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163069" comment="php7-enchant-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163070" comment="php7-exif-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163071" comment="php7-fastcgi-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163072" comment="php7-fileinfo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163073" comment="php7-firebird-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163074" comment="php7-fpm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163075" comment="php7-ftp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163076" comment="php7-gd-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163077" comment="php7-gettext-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163078" comment="php7-gmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163079" comment="php7-iconv-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163080" comment="php7-imap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163081" comment="php7-intl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163082" comment="php7-json-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163083" comment="php7-ldap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163084" comment="php7-mbstring-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163085" comment="php7-mcrypt-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163086" comment="php7-mysql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163087" comment="php7-odbc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163088" comment="php7-opcache-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163089" comment="php7-openssl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163090" comment="php7-pcntl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163091" comment="php7-pdo-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163092" comment="php7-pear-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163093" comment="php7-pear-Archive_Tar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163094" comment="php7-pgsql-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163095" comment="php7-phar-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163096" comment="php7-posix-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163097" comment="php7-pspell-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163098" comment="php7-readline-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163099" comment="php7-shmop-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163100" comment="php7-snmp-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163101" comment="php7-soap-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163102" comment="php7-sockets-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163103" comment="php7-sqlite-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163104" comment="php7-sysvmsg-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163105" comment="php7-sysvsem-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163106" comment="php7-sysvshm-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163107" comment="php7-tidy-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163108" comment="php7-tokenizer-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163109" comment="php7-wddx-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163110" comment="php7-xmlreader-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163111" comment="php7-xmlrpc-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163112" comment="php7-xmlwriter-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163113" comment="php7-xsl-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163114" comment="php7-zip-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163115" comment="php7-zlib-7.0.7-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177941" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7941</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7941" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7941" source="CVE"/>
    <description>
    The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7941.html">CVE-2017-7941</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7941">SUSE bug 1034876</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177942" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7942</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7942" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7942" source="CVE"/>
    <description>
    The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7942.html">CVE-2017-7942</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7942">SUSE bug 1034872</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177943" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7943</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7943" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7943" source="CVE"/>
    <description>
    The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7943.html">CVE-2017-7943</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7943">SUSE bug 1034870</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177976" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7976</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7976" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7976" source="CVE"/>
    <description>
    Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7976.html">CVE-2017-7976</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7976">SUSE bug 1035032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7976">SUSE bug 1035032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7976">SUSE bug 1035032</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7976">SUSE bug 1052029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7976">SUSE bug 1052029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7976">SUSE bug 1052029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7976">SUSE bug 1052029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7976">SUSE bug 1052029</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7976">SUSE bug 1052029</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167061" comment="mupdf-1.11-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167062" comment="mupdf-devel-static-1.11-13.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177980" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7980</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7980" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7980" source="CVE"/>
    <description>
    Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7980.html">CVE-2017-7980</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035483</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7980">SUSE bug 1035406</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20177982" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-7982</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-7982" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7982" source="CVE"/>
    <description>
    Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-7982.html">CVE-2017-7982</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-7982">SUSE bug 1035312</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156177" comment="libplist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154007" comment="libplist is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156178" comment="libplist++-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154008" comment="libplist++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156179" comment="libplist++3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154009" comment="libplist++3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156180" comment="libplist++3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154010" comment="libplist++3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156181" comment="libplist-devel-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154011" comment="libplist-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156182" comment="libplist3-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154012" comment="libplist3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156183" comment="libplist3-32bit-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154013" comment="libplist3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156184" comment="plistutil-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154014" comment="plistutil is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156185" comment="python-plist-1.12-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154015" comment="python-plist is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178073" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8073</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8073" source="CVE"/>
    <description>
    WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8073.html">CVE-2017-8073</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8073">SUSE bug 1036467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8073">SUSE bug 1036467</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8073">SUSE bug 1036467</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154998" comment="weechat-1.5-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155009" comment="weechat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009154999" comment="weechat-aspell-1.5-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155010" comment="weechat-aspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155000" comment="weechat-devel-1.5-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155011" comment="weechat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155001" comment="weechat-doc-1.5-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155012" comment="weechat-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155002" comment="weechat-guile-1.5-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155013" comment="weechat-guile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155003" comment="weechat-lang-1.5-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155014" comment="weechat-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155004" comment="weechat-lua-1.5-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155015" comment="weechat-lua is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155005" comment="weechat-perl-1.5-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155016" comment="weechat-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155006" comment="weechat-python-1.5-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155017" comment="weechat-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155007" comment="weechat-ruby-1.5-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155018" comment="weechat-ruby is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155008" comment="weechat-tcl-1.5-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155019" comment="weechat-tcl is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178086" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8086</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8086" source="CVE"/>
    <description>
    Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8086.html">CVE-2017-8086</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8086">SUSE bug 1035950</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178108" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8108</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8108" source="CVE"/>
    <description>
    Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8108.html">CVE-2017-8108</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8108">SUSE bug 1043463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8108">SUSE bug 1043463</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8108">SUSE bug 1043463</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156950" comment="lynis-2.5.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156951" comment="lynis is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178112" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8112</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8112" source="CVE"/>
    <description>
    hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8112.html">CVE-2017-8112</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036470</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8112">SUSE bug 1036211</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178114" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8114</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8114" source="CVE"/>
    <description>
    Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x before 1.1.9, and 1.2.x before 1.2.5. The problem is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8114.html">CVE-2017-8114</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8114">SUSE bug 1036955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8114">SUSE bug 1036955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8114">SUSE bug 1036955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8114">SUSE bug 1036955</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8114">SUSE bug 1036955</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155480" comment="roundcubemail-1.1.9-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152670" comment="roundcubemail is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178288" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8288</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8288" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8288" source="CVE"/>
    <description>
    gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications (but not interact with them), see information from the extensions (e.g., what applications you have opened or what music you were playing), or even execute arbitrary commands. It all depends on what extensions a user has enabled. The problem is caused by lack of exception handling in js/ui/extensionSystem.js.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8288.html">CVE-2017-8288</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8288">SUSE bug 1036494</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162384" comment="gnome-shell-3.20.4-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151510" comment="gnome-shell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162385" comment="gnome-shell-browser-plugin-3.20.4-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151511" comment="gnome-shell-browser-plugin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162386" comment="gnome-shell-calendar-3.20.4-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151512" comment="gnome-shell-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162387" comment="gnome-shell-devel-3.20.4-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009162388" comment="gnome-shell-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162389" comment="gnome-shell-lang-3.20.4-10.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151513" comment="gnome-shell-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178291" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8291</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8291" source="CVE"/>
    <description>
    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8291.html">CVE-2017-8291</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8291">SUSE bug 1036453</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155158" comment="ghostscript-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151933" comment="ghostscript is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155159" comment="ghostscript-devel-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151934" comment="ghostscript-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155160" comment="ghostscript-mini-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151935" comment="ghostscript-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155161" comment="ghostscript-mini-devel-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151936" comment="ghostscript-mini-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155162" comment="ghostscript-x11-9.15-11.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151937" comment="ghostscript-x11 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178309" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8309</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8309" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8309" source="CVE"/>
    <description>
    Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8309.html">CVE-2017-8309</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8309">SUSE bug 1037242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8309">SUSE bug 1037243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8309">SUSE bug 1037242</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8309">SUSE bug 1037243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8309">SUSE bug 1037243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8309">SUSE bug 1037243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8309">SUSE bug 1037243</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8309">SUSE bug 1037242</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158417" comment="xen-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158418" comment="xen-devel-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158419" comment="xen-doc-html-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158420" comment="xen-libs-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158421" comment="xen-libs-32bit-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158422" comment="xen-tools-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158423" comment="xen-tools-domU-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8343</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8343" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8343.html">CVE-2017-8343</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8343">SUSE bug 1036977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8343">SUSE bug 1036977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8343">SUSE bug 1036977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8343">SUSE bug 1036977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8343">SUSE bug 1036977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8343">SUSE bug 1036977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8343">SUSE bug 1036977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8343">SUSE bug 1036977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8343">SUSE bug 1036977</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8343">SUSE bug 1036977</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178344" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8344</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8344" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8344.html">CVE-2017-8344</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8344">SUSE bug 1036978</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8345</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8345" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8345.html">CVE-2017-8345</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8345">SUSE bug 1036980</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8346</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8346" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadDCMImage function in dcm.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8346.html">CVE-2017-8346</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8346">SUSE bug 1036981</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8347</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8347" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadEXRImage function in exr.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8347.html">CVE-2017-8347</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8347">SUSE bug 1036982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8347">SUSE bug 1036982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8347">SUSE bug 1036982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8347">SUSE bug 1036982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8347">SUSE bug 1036982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8347">SUSE bug 1036982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8347">SUSE bug 1036982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8347">SUSE bug 1036982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8347">SUSE bug 1036982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8347">SUSE bug 1036982</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8347">SUSE bug 1036982</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8348</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8348" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadMATImage function in mat.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8348.html">CVE-2017-8348</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8348">SUSE bug 1036983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8348">SUSE bug 1036983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8348">SUSE bug 1036983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8348">SUSE bug 1036983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8348">SUSE bug 1036983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8348">SUSE bug 1036983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8348">SUSE bug 1036983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8348">SUSE bug 1036983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8348">SUSE bug 1036983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8348">SUSE bug 1036983</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8348">SUSE bug 1036983</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8349</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8349" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8349" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8349.html">CVE-2017-8349</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8349">SUSE bug 1036984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8349">SUSE bug 1036984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8349">SUSE bug 1036984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8349">SUSE bug 1036984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8349">SUSE bug 1036984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8349">SUSE bug 1036984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8349">SUSE bug 1036984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8349">SUSE bug 1036984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8349">SUSE bug 1036984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8349">SUSE bug 1036984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8349">SUSE bug 1036984</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8350</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8350" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8350" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8350.html">CVE-2017-8350</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1053919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8350">SUSE bug 1036985</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158032" comment="GraphicsMagick-1.3.25-11.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158033" comment="GraphicsMagick-devel-1.3.25-11.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158034" comment="libGraphicsMagick++-Q16-12-1.3.25-11.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158035" comment="libGraphicsMagick++-devel-1.3.25-11.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158036" comment="libGraphicsMagick-Q16-3-1.3.25-11.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158037" comment="libGraphicsMagick3-config-1.3.25-11.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158038" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158039" comment="perl-GraphicsMagick-1.3.25-11.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8351</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8351" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8351.html">CVE-2017-8351</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8351">SUSE bug 1036986</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156152" comment="GraphicsMagick-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156153" comment="GraphicsMagick-devel-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156154" comment="libGraphicsMagick++-Q16-12-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156155" comment="libGraphicsMagick++-devel-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156156" comment="libGraphicsMagick-Q16-3-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156157" comment="libGraphicsMagick3-config-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156158" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156159" comment="perl-GraphicsMagick-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8352</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8352" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8352.html">CVE-2017-8352</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8352">SUSE bug 1036987</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8353</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8353" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8353.html">CVE-2017-8353</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1055010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1055010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1055010</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1036988</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8353">SUSE bug 1055010</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156152" comment="GraphicsMagick-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156153" comment="GraphicsMagick-devel-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156154" comment="libGraphicsMagick++-Q16-12-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156155" comment="libGraphicsMagick++-devel-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156156" comment="libGraphicsMagick-Q16-3-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156157" comment="libGraphicsMagick3-config-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156158" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156159" comment="perl-GraphicsMagick-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8354</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8354" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8354.html">CVE-2017-8354</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8354">SUSE bug 1036989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8354">SUSE bug 1036989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8354">SUSE bug 1036989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8354">SUSE bug 1036989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8354">SUSE bug 1036989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8354">SUSE bug 1036989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8354">SUSE bug 1036989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8354">SUSE bug 1036989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8354">SUSE bug 1036989</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8354">SUSE bug 1036989</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178355" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8355</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8355" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8355.html">CVE-2017-8355</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8355">SUSE bug 1036990</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156152" comment="GraphicsMagick-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156153" comment="GraphicsMagick-devel-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156154" comment="libGraphicsMagick++-Q16-12-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156155" comment="libGraphicsMagick++-devel-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156156" comment="libGraphicsMagick-Q16-3-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156157" comment="libGraphicsMagick3-config-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156158" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156159" comment="perl-GraphicsMagick-1.3.25-11.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178356" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8356</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8356" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8356.html">CVE-2017-8356</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8356">SUSE bug 1036991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8356">SUSE bug 1036991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8356">SUSE bug 1036991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8356">SUSE bug 1036991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8356">SUSE bug 1036991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8356">SUSE bug 1036991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8356">SUSE bug 1036991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8356">SUSE bug 1036991</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8356">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178357" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8357</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8357" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8357.html">CVE-2017-8357</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8357">SUSE bug 1036976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8357">SUSE bug 1036976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8357">SUSE bug 1036976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8357">SUSE bug 1036976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8357">SUSE bug 1036976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8357">SUSE bug 1036976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8357">SUSE bug 1036976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8357">SUSE bug 1036976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8357">SUSE bug 1036976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8357">SUSE bug 1036976</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178358" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8358</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8358" source="CVE"/>
    <description>
    LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8358.html">CVE-2017-8358</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8358">SUSE bug 1036975</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158482" comment="libixion-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153320" comment="libixion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158483" comment="libixion-0_12-0-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158751" comment="libixion-0_12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158484" comment="libixion-devel-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153322" comment="libixion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158485" comment="libixion-python3-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153323" comment="libixion-python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158486" comment="libixion-tools-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153324" comment="libixion-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158487" comment="libmwaw-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158752" comment="libmwaw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158488" comment="libmwaw-0_3-3-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158753" comment="libmwaw-0_3-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158489" comment="libmwaw-devel-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158754" comment="libmwaw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158490" comment="libmwaw-devel-doc-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158755" comment="libmwaw-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158491" comment="libmwaw-tools-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158756" comment="libmwaw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158492" comment="liborcus-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153325" comment="liborcus is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158493" comment="liborcus-0_12-0-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158757" comment="liborcus-0_12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158494" comment="liborcus-devel-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153327" comment="liborcus-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158495" comment="liborcus-python3-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153328" comment="liborcus-python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158496" comment="liborcus-tools-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153329" comment="liborcus-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164015" comment="libreoffice-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164016" comment="libreoffice-base-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164017" comment="libreoffice-base-drivers-mysql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164018" comment="libreoffice-base-drivers-postgresql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153330" comment="libreoffice-base-drivers-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164019" comment="libreoffice-branding-upstream-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164020" comment="libreoffice-calc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164021" comment="libreoffice-calc-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164022" comment="libreoffice-draw-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164023" comment="libreoffice-filters-optional-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164024" comment="libreoffice-gdb-pretty-printers-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153331" comment="libreoffice-gdb-pretty-printers is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164025" comment="libreoffice-glade-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153332" comment="libreoffice-glade is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164026" comment="libreoffice-gnome-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164027" comment="libreoffice-gtk3-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164028" comment="libreoffice-icon-theme-breeze-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164029" comment="libreoffice-icon-theme-galaxy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164030" comment="libreoffice-icon-theme-hicontrast-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164031" comment="libreoffice-icon-theme-oxygen-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164032" comment="libreoffice-icon-theme-sifr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164033" comment="libreoffice-icon-theme-tango-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164034" comment="libreoffice-impress-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164035" comment="libreoffice-kde4-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164036" comment="libreoffice-l10n-af-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153334" comment="libreoffice-l10n-af is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164037" comment="libreoffice-l10n-ar-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164038" comment="libreoffice-l10n-as-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153336" comment="libreoffice-l10n-as is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164039" comment="libreoffice-l10n-bg-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164040" comment="libreoffice-l10n-bn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153338" comment="libreoffice-l10n-bn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164041" comment="libreoffice-l10n-br-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153339" comment="libreoffice-l10n-br is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164042" comment="libreoffice-l10n-ca-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164043" comment="libreoffice-l10n-cs-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164044" comment="libreoffice-l10n-cy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153341" comment="libreoffice-l10n-cy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164045" comment="libreoffice-l10n-da-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164046" comment="libreoffice-l10n-de-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164047" comment="libreoffice-l10n-dz-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153342" comment="libreoffice-l10n-dz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164048" comment="libreoffice-l10n-el-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164049" comment="libreoffice-l10n-en-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164050" comment="libreoffice-l10n-es-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164051" comment="libreoffice-l10n-et-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164052" comment="libreoffice-l10n-eu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153344" comment="libreoffice-l10n-eu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164053" comment="libreoffice-l10n-fa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164054" comment="libreoffice-l10n-fi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164055" comment="libreoffice-l10n-fr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164056" comment="libreoffice-l10n-ga-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153347" comment="libreoffice-l10n-ga is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164057" comment="libreoffice-l10n-gl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153348" comment="libreoffice-l10n-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164058" comment="libreoffice-l10n-gu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153349" comment="libreoffice-l10n-gu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164059" comment="libreoffice-l10n-he-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153350" comment="libreoffice-l10n-he is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164060" comment="libreoffice-l10n-hi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153351" comment="libreoffice-l10n-hi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164061" comment="libreoffice-l10n-hr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153352" comment="libreoffice-l10n-hr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164062" comment="libreoffice-l10n-hu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164063" comment="libreoffice-l10n-it-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164064" comment="libreoffice-l10n-ja-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164065" comment="libreoffice-l10n-kk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153353" comment="libreoffice-l10n-kk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164066" comment="libreoffice-l10n-kn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153354" comment="libreoffice-l10n-kn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164067" comment="libreoffice-l10n-ko-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164068" comment="libreoffice-l10n-lt-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164069" comment="libreoffice-l10n-lv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153357" comment="libreoffice-l10n-lv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164070" comment="libreoffice-l10n-mai-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153358" comment="libreoffice-l10n-mai is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164071" comment="libreoffice-l10n-ml-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153359" comment="libreoffice-l10n-ml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164072" comment="libreoffice-l10n-mr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153360" comment="libreoffice-l10n-mr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164073" comment="libreoffice-l10n-nb-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164074" comment="libreoffice-l10n-nl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164075" comment="libreoffice-l10n-nn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153363" comment="libreoffice-l10n-nn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164076" comment="libreoffice-l10n-nr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153364" comment="libreoffice-l10n-nr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164077" comment="libreoffice-l10n-nso-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153365" comment="libreoffice-l10n-nso is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164078" comment="libreoffice-l10n-or-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153366" comment="libreoffice-l10n-or is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164079" comment="libreoffice-l10n-pa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153367" comment="libreoffice-l10n-pa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164080" comment="libreoffice-l10n-pl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164081" comment="libreoffice-l10n-pt_BR-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164082" comment="libreoffice-l10n-pt_PT-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158759" comment="libreoffice-l10n-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164083" comment="libreoffice-l10n-ro-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153370" comment="libreoffice-l10n-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164084" comment="libreoffice-l10n-ru-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164085" comment="libreoffice-l10n-si-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153371" comment="libreoffice-l10n-si is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164086" comment="libreoffice-l10n-sk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164087" comment="libreoffice-l10n-sl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164088" comment="libreoffice-l10n-sr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153374" comment="libreoffice-l10n-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164089" comment="libreoffice-l10n-ss-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153375" comment="libreoffice-l10n-ss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164090" comment="libreoffice-l10n-st-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153376" comment="libreoffice-l10n-st is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164091" comment="libreoffice-l10n-sv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164092" comment="libreoffice-l10n-ta-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153378" comment="libreoffice-l10n-ta is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164093" comment="libreoffice-l10n-te-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153379" comment="libreoffice-l10n-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164094" comment="libreoffice-l10n-th-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153380" comment="libreoffice-l10n-th is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164095" comment="libreoffice-l10n-tn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153381" comment="libreoffice-l10n-tn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164096" comment="libreoffice-l10n-tr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153382" comment="libreoffice-l10n-tr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164097" comment="libreoffice-l10n-ts-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153383" comment="libreoffice-l10n-ts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164098" comment="libreoffice-l10n-uk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164099" comment="libreoffice-l10n-ve-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153385" comment="libreoffice-l10n-ve is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164100" comment="libreoffice-l10n-xh-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153386" comment="libreoffice-l10n-xh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164101" comment="libreoffice-l10n-zh_CN-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164102" comment="libreoffice-l10n-zh_TW-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164103" comment="libreoffice-l10n-zu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153389" comment="libreoffice-l10n-zu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164104" comment="libreoffice-mailmerge-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164105" comment="libreoffice-math-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164106" comment="libreoffice-officebean-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153390" comment="libreoffice-officebean is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164107" comment="libreoffice-pyuno-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164108" comment="libreoffice-sdk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153391" comment="libreoffice-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164109" comment="libreoffice-sdk-doc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153392" comment="libreoffice-sdk-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164110" comment="libreoffice-writer-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164111" comment="libreoffice-writer-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164112" comment="libreofficekit-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164113" comment="libreofficekit-devel-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153394" comment="libreofficekit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158596" comment="libstaroffice-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158762" comment="libstaroffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158597" comment="libstaroffice-0_0-0-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158763" comment="libstaroffice-0_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158598" comment="libstaroffice-devel-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158764" comment="libstaroffice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158599" comment="libstaroffice-devel-doc-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158765" comment="libstaroffice-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158600" comment="libstaroffice-tools-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158766" comment="libstaroffice-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158236" comment="libzmf-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158767" comment="libzmf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158237" comment="libzmf-0_0-0-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158768" comment="libzmf-0_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158601" comment="libzmf-devel-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158769" comment="libzmf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158602" comment="libzmf-devel-doc-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158770" comment="libzmf-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158603" comment="libzmf-tools-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158771" comment="libzmf-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158604" comment="myspell-af_NA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153406" comment="myspell-af_NA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158605" comment="myspell-af_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153407" comment="myspell-af_ZA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158606" comment="myspell-an-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153408" comment="myspell-an is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158607" comment="myspell-an_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153409" comment="myspell-an_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158608" comment="myspell-ar-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153410" comment="myspell-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158609" comment="myspell-ar_AE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153411" comment="myspell-ar_AE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158610" comment="myspell-ar_BH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153412" comment="myspell-ar_BH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158611" comment="myspell-ar_DZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153413" comment="myspell-ar_DZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158612" comment="myspell-ar_EG-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153414" comment="myspell-ar_EG is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158613" comment="myspell-ar_IQ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153415" comment="myspell-ar_IQ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158614" comment="myspell-ar_JO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153416" comment="myspell-ar_JO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158615" comment="myspell-ar_KW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153417" comment="myspell-ar_KW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158616" comment="myspell-ar_LB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153418" comment="myspell-ar_LB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158617" comment="myspell-ar_LY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153419" comment="myspell-ar_LY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158618" comment="myspell-ar_MA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153420" comment="myspell-ar_MA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158619" comment="myspell-ar_OM-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153421" comment="myspell-ar_OM is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158620" comment="myspell-ar_QA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153422" comment="myspell-ar_QA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158621" comment="myspell-ar_SA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153423" comment="myspell-ar_SA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158622" comment="myspell-ar_SD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153424" comment="myspell-ar_SD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158623" comment="myspell-ar_SY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153425" comment="myspell-ar_SY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158624" comment="myspell-ar_TN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153426" comment="myspell-ar_TN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158625" comment="myspell-ar_YE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153427" comment="myspell-ar_YE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158626" comment="myspell-be_BY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153428" comment="myspell-be_BY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158627" comment="myspell-bg_BG-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153429" comment="myspell-bg_BG is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158628" comment="myspell-bn_BD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153430" comment="myspell-bn_BD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158629" comment="myspell-bn_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153431" comment="myspell-bn_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158630" comment="myspell-bo-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158772" comment="myspell-bo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158631" comment="myspell-bo_CN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158773" comment="myspell-bo_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158632" comment="myspell-bo_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158774" comment="myspell-bo_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158633" comment="myspell-br_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153432" comment="myspell-br_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158634" comment="myspell-bs-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153433" comment="myspell-bs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158635" comment="myspell-bs_BA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153434" comment="myspell-bs_BA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158636" comment="myspell-ca-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153435" comment="myspell-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158637" comment="myspell-ca_AD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153436" comment="myspell-ca_AD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158638" comment="myspell-ca_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153437" comment="myspell-ca_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158639" comment="myspell-ca_ES_valencia-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153438" comment="myspell-ca_ES_valencia is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158640" comment="myspell-ca_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153439" comment="myspell-ca_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158641" comment="myspell-ca_IT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153440" comment="myspell-ca_IT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158642" comment="myspell-cs_CZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153441" comment="myspell-cs_CZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158643" comment="myspell-da_DK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153442" comment="myspell-da_DK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158644" comment="myspell-de-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153443" comment="myspell-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158645" comment="myspell-de_AT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153444" comment="myspell-de_AT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158646" comment="myspell-de_CH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153445" comment="myspell-de_CH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158647" comment="myspell-de_DE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153446" comment="myspell-de_DE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158648" comment="myspell-dictionaries-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153447" comment="myspell-dictionaries is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158649" comment="myspell-el_GR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153448" comment="myspell-el_GR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158650" comment="myspell-en-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153449" comment="myspell-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158651" comment="myspell-en_AU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153450" comment="myspell-en_AU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158652" comment="myspell-en_BS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153451" comment="myspell-en_BS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158653" comment="myspell-en_BZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153452" comment="myspell-en_BZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158654" comment="myspell-en_CA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153453" comment="myspell-en_CA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158655" comment="myspell-en_GB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153454" comment="myspell-en_GB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158656" comment="myspell-en_GH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153455" comment="myspell-en_GH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158657" comment="myspell-en_IE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153456" comment="myspell-en_IE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158658" comment="myspell-en_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153457" comment="myspell-en_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158659" comment="myspell-en_JM-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153458" comment="myspell-en_JM is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158660" comment="myspell-en_MW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153459" comment="myspell-en_MW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158661" comment="myspell-en_NA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153460" comment="myspell-en_NA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158662" comment="myspell-en_NZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153461" comment="myspell-en_NZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158663" comment="myspell-en_PH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153462" comment="myspell-en_PH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158664" comment="myspell-en_TT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153463" comment="myspell-en_TT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158665" comment="myspell-en_US-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153464" comment="myspell-en_US is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158666" comment="myspell-en_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153465" comment="myspell-en_ZA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158667" comment="myspell-en_ZW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153466" comment="myspell-en_ZW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158668" comment="myspell-es-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153467" comment="myspell-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158669" comment="myspell-es_AR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153468" comment="myspell-es_AR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158670" comment="myspell-es_BO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153469" comment="myspell-es_BO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158671" comment="myspell-es_CL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153470" comment="myspell-es_CL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158672" comment="myspell-es_CO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153471" comment="myspell-es_CO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158673" comment="myspell-es_CR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153472" comment="myspell-es_CR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158674" comment="myspell-es_CU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153473" comment="myspell-es_CU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158675" comment="myspell-es_DO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153474" comment="myspell-es_DO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158676" comment="myspell-es_EC-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153475" comment="myspell-es_EC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158677" comment="myspell-es_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153476" comment="myspell-es_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158678" comment="myspell-es_GT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153477" comment="myspell-es_GT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158679" comment="myspell-es_HN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153478" comment="myspell-es_HN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158680" comment="myspell-es_MX-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153479" comment="myspell-es_MX is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158681" comment="myspell-es_NI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153480" comment="myspell-es_NI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158682" comment="myspell-es_PA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153481" comment="myspell-es_PA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158683" comment="myspell-es_PE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153482" comment="myspell-es_PE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158684" comment="myspell-es_PR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153483" comment="myspell-es_PR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158685" comment="myspell-es_PY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153484" comment="myspell-es_PY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158686" comment="myspell-es_SV-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153485" comment="myspell-es_SV is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158687" comment="myspell-es_UY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153486" comment="myspell-es_UY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158688" comment="myspell-es_VE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153487" comment="myspell-es_VE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158689" comment="myspell-et_EE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153488" comment="myspell-et_EE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158690" comment="myspell-fr_BE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153489" comment="myspell-fr_BE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158691" comment="myspell-fr_CA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153490" comment="myspell-fr_CA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158692" comment="myspell-fr_CH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153491" comment="myspell-fr_CH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158693" comment="myspell-fr_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153492" comment="myspell-fr_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158694" comment="myspell-fr_LU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153493" comment="myspell-fr_LU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158695" comment="myspell-fr_MC-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153494" comment="myspell-fr_MC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158696" comment="myspell-gd_GB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153495" comment="myspell-gd_GB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158697" comment="myspell-gl-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153496" comment="myspell-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158698" comment="myspell-gl_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153497" comment="myspell-gl_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158699" comment="myspell-gu_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153498" comment="myspell-gu_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158700" comment="myspell-gug-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153499" comment="myspell-gug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158701" comment="myspell-gug_PY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153500" comment="myspell-gug_PY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158702" comment="myspell-he_IL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153501" comment="myspell-he_IL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158703" comment="myspell-hi_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153502" comment="myspell-hi_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158704" comment="myspell-hr_HR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153503" comment="myspell-hr_HR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158705" comment="myspell-hu_HU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153504" comment="myspell-hu_HU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158706" comment="myspell-is-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153505" comment="myspell-is is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158707" comment="myspell-is_IS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153506" comment="myspell-is_IS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158708" comment="myspell-it_IT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153507" comment="myspell-it_IT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158709" comment="myspell-kmr_Latn-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153508" comment="myspell-kmr_Latn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158710" comment="myspell-kmr_Latn_SY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153509" comment="myspell-kmr_Latn_SY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158711" comment="myspell-kmr_Latn_TR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153510" comment="myspell-kmr_Latn_TR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158712" comment="myspell-lightproof-en-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153511" comment="myspell-lightproof-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158713" comment="myspell-lightproof-hu_HU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153512" comment="myspell-lightproof-hu_HU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158714" comment="myspell-lightproof-pt_BR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153513" comment="myspell-lightproof-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158715" comment="myspell-lightproof-ru_RU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153514" comment="myspell-lightproof-ru_RU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158716" comment="myspell-lo_LA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153515" comment="myspell-lo_LA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158717" comment="myspell-lt_LT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153516" comment="myspell-lt_LT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158718" comment="myspell-lv_LV-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153517" comment="myspell-lv_LV is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158719" comment="myspell-nb_NO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153518" comment="myspell-nb_NO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158720" comment="myspell-ne_NP-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153519" comment="myspell-ne_NP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158721" comment="myspell-nl_BE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153520" comment="myspell-nl_BE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158722" comment="myspell-nl_NL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153521" comment="myspell-nl_NL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158723" comment="myspell-nn_NO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153522" comment="myspell-nn_NO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158724" comment="myspell-no-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153523" comment="myspell-no is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158725" comment="myspell-oc_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153524" comment="myspell-oc_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158726" comment="myspell-pl_PL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153525" comment="myspell-pl_PL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158727" comment="myspell-pt_AO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153526" comment="myspell-pt_AO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158728" comment="myspell-pt_BR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153527" comment="myspell-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158729" comment="myspell-pt_PT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153528" comment="myspell-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158730" comment="myspell-ro-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153529" comment="myspell-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158731" comment="myspell-ro_RO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153530" comment="myspell-ro_RO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158732" comment="myspell-ru_RU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153531" comment="myspell-ru_RU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158733" comment="myspell-si_LK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153532" comment="myspell-si_LK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158734" comment="myspell-sk_SK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153533" comment="myspell-sk_SK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158735" comment="myspell-sl_SI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153534" comment="myspell-sl_SI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158736" comment="myspell-sr-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153535" comment="myspell-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158737" comment="myspell-sr_CS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153536" comment="myspell-sr_CS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158738" comment="myspell-sr_Latn_CS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153537" comment="myspell-sr_Latn_CS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158739" comment="myspell-sr_Latn_RS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153538" comment="myspell-sr_Latn_RS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158740" comment="myspell-sr_RS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153539" comment="myspell-sr_RS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158741" comment="myspell-sv_FI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153540" comment="myspell-sv_FI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158742" comment="myspell-sv_SE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153541" comment="myspell-sv_SE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158743" comment="myspell-sw_TZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153542" comment="myspell-sw_TZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158744" comment="myspell-te-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153543" comment="myspell-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158745" comment="myspell-te_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153544" comment="myspell-te_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158746" comment="myspell-th_TH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153545" comment="myspell-th_TH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158747" comment="myspell-uk_UA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153546" comment="myspell-uk_UA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158748" comment="myspell-vi-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153547" comment="myspell-vi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158749" comment="myspell-vi_VN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153548" comment="myspell-vi_VN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158750" comment="myspell-zu_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153549" comment="myspell-zu_ZA is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178361" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8361</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8361" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8361" source="CVE"/>
    <description>
    The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8361.html">CVE-2017-8361</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8361">SUSE bug 1036944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8361">SUSE bug 1036944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8361">SUSE bug 1036944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8361">SUSE bug 1036944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8361">SUSE bug 1036944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8361">SUSE bug 1036944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8361">SUSE bug 1036944</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8361">SUSE bug 1036944</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156172" comment="libsndfile-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152564" comment="libsndfile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156173" comment="libsndfile-devel-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156174" comment="libsndfile-progs-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152565" comment="libsndfile-progs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156175" comment="libsndfile1-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156176" comment="libsndfile1-32bit-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178362" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8362</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8362" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8362" source="CVE"/>
    <description>
    The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8362.html">CVE-2017-8362</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8362">SUSE bug 1036943</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156172" comment="libsndfile-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152564" comment="libsndfile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156173" comment="libsndfile-devel-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156174" comment="libsndfile-progs-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152565" comment="libsndfile-progs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156175" comment="libsndfile1-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156176" comment="libsndfile1-32bit-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178363" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8363</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8363" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8363" source="CVE"/>
    <description>
    The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8363.html">CVE-2017-8363</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8363">SUSE bug 1036945</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156172" comment="libsndfile-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152564" comment="libsndfile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156173" comment="libsndfile-devel-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156174" comment="libsndfile-progs-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152565" comment="libsndfile-progs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156175" comment="libsndfile1-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156176" comment="libsndfile1-32bit-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178364" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8364</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8364" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8364" source="CVE"/>
    <description>
    The read_buf function in stream.c in rzip 2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted archive.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8364.html">CVE-2017-8364</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8364">SUSE bug 1036941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8364">SUSE bug 1036941</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8364">SUSE bug 1036941</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155459" comment="rzip-2.1-151.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155505" comment="rzip is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178365" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8365</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8365" source="CVE"/>
    <description>
    The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8365.html">CVE-2017-8365</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8365">SUSE bug 1036946</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156172" comment="libsndfile-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152564" comment="libsndfile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156173" comment="libsndfile-devel-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151189" comment="libsndfile-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156174" comment="libsndfile-progs-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152565" comment="libsndfile-progs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156175" comment="libsndfile1-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151190" comment="libsndfile1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156176" comment="libsndfile1-32bit-1.0.25-26.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151191" comment="libsndfile1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178379" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8379</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8379" source="CVE"/>
    <description>
    Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8379.html">CVE-2017-8379</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8379">SUSE bug 1037334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8379">SUSE bug 1037334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8379">SUSE bug 1037334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8379">SUSE bug 1037334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8379">SUSE bug 1037334</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8379">SUSE bug 1037334</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178380" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8380</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8380" source="CVE"/>
    <description>
    Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8380.html">CVE-2017-8380</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8380">SUSE bug 1037336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8380">SUSE bug 1037336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8380">SUSE bug 1037336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8380">SUSE bug 1037336</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8380">SUSE bug 1037336</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178386" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8386</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8386" source="CVE"/>
    <description>
    git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8386.html">CVE-2017-8386</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8386">SUSE bug 1038395</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156160" comment="git-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151600" comment="git is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156161" comment="git-arch-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153608" comment="git-arch is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156162" comment="git-core-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151601" comment="git-core is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156163" comment="git-credential-gnome-keyring-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153609" comment="git-credential-gnome-keyring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156164" comment="git-cvs-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151602" comment="git-cvs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156165" comment="git-daemon-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151603" comment="git-daemon is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156166" comment="git-doc-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153610" comment="git-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156167" comment="git-email-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151604" comment="git-email is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156168" comment="git-gui-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151605" comment="git-gui is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156169" comment="git-svn-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151606" comment="git-svn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156170" comment="git-web-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151607" comment="git-web is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156171" comment="gitk-2.12.3-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151608" comment="gitk is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178392" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8392</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8392" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine whether symbols are NULL in the _bfd_dwarf2_find_nearest_line function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8392.html">CVE-2017-8392</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8392">SUSE bug 1037052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8392">SUSE bug 1037052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8392">SUSE bug 1037052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8392">SUSE bug 1037052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8392">SUSE bug 1037052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8392">SUSE bug 1037052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8392">SUSE bug 1037052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8392">SUSE bug 1037052</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178393" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8393</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8393" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code that runs for objcopy and strip, that SHT_REL/SHR_RELA sections are always named starting with a .rel/.rela prefix. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy and strip, to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8393.html">CVE-2017-8393</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8393">SUSE bug 1037057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8393">SUSE bug 1037057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8393">SUSE bug 1037057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8393">SUSE bug 1037057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8393">SUSE bug 1037057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8393">SUSE bug 1037057</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8393">SUSE bug 1037057</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178394" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8394</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8394" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8394" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of _bfd_elf_large_com_section. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8394.html">CVE-2017-8394</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8394">SUSE bug 1037061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8394">SUSE bug 1037061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8394">SUSE bug 1037061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8394">SUSE bug 1037061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8394">SUSE bug 1037061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8394">SUSE bug 1037061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8394">SUSE bug 1037061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178395" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8395</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8395" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8395" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value check to see if memory had actually been allocated in the _bfd_generic_get_section_contents function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8395.html">CVE-2017-8395</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8395">SUSE bug 1037062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8395">SUSE bug 1037062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8395">SUSE bug 1037062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8395">SUSE bug 1037062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8395">SUSE bug 1037062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8395">SUSE bug 1037062</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8395">SUSE bug 1037062</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178396" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8396</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8396" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8396.html">CVE-2017-8396</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8396">SUSE bug 1037066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8396">SUSE bug 1037066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8396">SUSE bug 1037066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8396">SUSE bug 1037066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8396">SUSE bug 1037066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8396">SUSE bug 1037066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8396">SUSE bug 1037066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8396">SUSE bug 1037066</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178397" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8397</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8397" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8397" source="CVE"/>
    <description>
    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and an invalid write of size 1 during processing of a corrupt binary containing reloc(s) with negative addresses. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8397.html">CVE-2017-8397</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8397">SUSE bug 1037070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8397">SUSE bug 1037070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8397">SUSE bug 1037070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8397">SUSE bug 1037070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8397">SUSE bug 1037070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8397">SUSE bug 1037070</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8397">SUSE bug 1037070</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178398" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8398</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8398" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8398" source="CVE"/>
    <description>
    dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary. This vulnerability causes programs that conduct an analysis of binary programs, such as objdump and readelf, to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8398.html">CVE-2017-8398</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8398">SUSE bug 1037072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8398">SUSE bug 1037072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8398">SUSE bug 1037072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8398">SUSE bug 1037072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8398">SUSE bug 1037072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8398">SUSE bug 1037072</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8398">SUSE bug 1037072</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178400" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8400</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8400" source="CVE"/>
    <description>
    In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function png_load() in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8400.html">CVE-2017-8400</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8400">SUSE bug 1037050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8400">SUSE bug 1037050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8400">SUSE bug 1037050</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8400">SUSE bug 1037050</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155300" comment="swftools-0.9.2-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155302" comment="swftools is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178401" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8401</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8401" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8401" source="CVE"/>
    <description>
    In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function png_load() in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8401.html">CVE-2017-8401</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8401">SUSE bug 1037051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8401">SUSE bug 1037051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8401">SUSE bug 1037051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8401">SUSE bug 1037051</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155300" comment="swftools-0.9.2-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155302" comment="swftools is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178421" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8421</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8421" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8421" source="CVE"/>
    <description>
    The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which can cause memory exhaustion in objdump via a crafted PE file. Additional validation in dump_relocs_in_section in objdump.c can resolve this.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8421.html">CVE-2017-8421</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8421">SUSE bug 1037273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8421">SUSE bug 1037273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8421">SUSE bug 1037273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8421">SUSE bug 1037273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8421">SUSE bug 1037273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8421">SUSE bug 1037273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8421">SUSE bug 1037273</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8421">SUSE bug 1037273</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178422" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8422</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8422" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8422" source="CVE"/>
    <description>
    KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8422.html">CVE-2017-8422</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 749065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 869959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1033300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1041511</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8422">SUSE bug 1036244</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155460" comment="kauth-5.26.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155507" comment="kauth is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155461" comment="kauth-devel-5.26.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155509" comment="kauth-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155462" comment="kauth-devel-32bit-5.26.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155511" comment="kauth-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155463" comment="kdelibs4-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152123" comment="kdelibs4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155464" comment="kdelibs4-apidocs-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154035" comment="kdelibs4-apidocs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155465" comment="kdelibs4-branding-upstream-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154036" comment="kdelibs4-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155466" comment="kdelibs4-core-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152124" comment="kdelibs4-core is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155467" comment="kdelibs4-doc-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152125" comment="kdelibs4-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155468" comment="libKF5Auth5-5.26.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155518" comment="libKF5Auth5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155469" comment="libKF5Auth5-32bit-5.26.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155520" comment="libKF5Auth5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155470" comment="libKF5Auth5-lang-5.26.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155522" comment="libKF5Auth5-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155471" comment="libkde4-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152126" comment="libkde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155472" comment="libkde4-32bit-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154044" comment="libkde4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155473" comment="libkde4-devel-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152127" comment="libkde4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155474" comment="libkdecore4-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152128" comment="libkdecore4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155475" comment="libkdecore4-32bit-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154045" comment="libkdecore4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155476" comment="libkdecore4-devel-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152129" comment="libkdecore4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155477" comment="libksuseinstall-devel-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154046" comment="libksuseinstall-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155478" comment="libksuseinstall1-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152130" comment="libksuseinstall1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155479" comment="libksuseinstall1-32bit-4.14.25-7.4.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154047" comment="libksuseinstall1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8765</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8765" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8765" source="CVE"/>
    <description>
    The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8765.html">CVE-2017-8765</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1037527</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8765">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178779" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8779</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8779" source="CVE"/>
    <description>
    rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8779.html">CVE-2017-8779</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037930</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8779">SUSE bug 1037559</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155731" comment="libtirpc-1.0.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155750" comment="libtirpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155732" comment="libtirpc-devel-1.0.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155751" comment="libtirpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155733" comment="libtirpc-netconfig-1.0.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155752" comment="libtirpc-netconfig is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155734" comment="libtirpc3-1.0.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155753" comment="libtirpc3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155735" comment="libtirpc3-32bit-1.0.1-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155754" comment="libtirpc3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156151" comment="rpcbind-0.2.3-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153045" comment="rpcbind is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8798</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8798" source="CVE"/>
    <description>
    Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8798.html">CVE-2017-8798</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8798">SUSE bug 1038601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8798">SUSE bug 1038601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8798">SUSE bug 1038601</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8798">SUSE bug 1038601</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156331" comment="libminiupnpc-devel-1.9-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153029" comment="libminiupnpc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156332" comment="libminiupnpc10-1.9-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152166" comment="libminiupnpc10 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156333" comment="libminiupnpc10-32bit-1.9-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153030" comment="libminiupnpc10-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156334" comment="miniupnpc-1.9-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153031" comment="miniupnpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156335" comment="python-miniupnpc-1.9-7.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153032" comment="python-miniupnpc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178816" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8816</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8816" source="CVE"/>
    <description>
    The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8816.html">CVE-2017-8816</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8816">SUSE bug 1069226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8816">SUSE bug 1069226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8816">SUSE bug 1069226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8816">SUSE bug 1069226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8816">SUSE bug 1069226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8816">SUSE bug 1069226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8816">SUSE bug 1069226</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8816">SUSE bug 1069226</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169947" comment="curl-7.37.0-16.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169948" comment="libcurl-devel-7.37.0-16.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169949" comment="libcurl-devel-32bit-7.37.0-16.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153284" comment="libcurl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169950" comment="libcurl4-7.37.0-16.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169951" comment="libcurl4-32bit-7.37.0-16.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178817" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8817</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8817" source="CVE"/>
    <description>
    The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8817.html">CVE-2017-8817</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8817">SUSE bug 1069222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8817">SUSE bug 1069222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8817">SUSE bug 1069222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8817">SUSE bug 1069222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8817">SUSE bug 1069222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8817">SUSE bug 1069222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8817">SUSE bug 1069222</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8817">SUSE bug 1069222</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169947" comment="curl-7.37.0-16.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169948" comment="libcurl-devel-7.37.0-16.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169949" comment="libcurl-devel-32bit-7.37.0-16.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153284" comment="libcurl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169950" comment="libcurl4-7.37.0-16.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169951" comment="libcurl4-32bit-7.37.0-16.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178819" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8819</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8819" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8819" source="CVE"/>
    <description>
    In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the replay-cache protection mechanism is ineffective for v2 onion services, aka TROVE-2017-009. An attacker can send many INTRODUCE2 cells to trigger this issue.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8819.html">CVE-2017-8819</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8819">SUSE bug 1070849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8819">SUSE bug 1070849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167649" comment="tor-0.2.9.14-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153574" comment="tor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178820" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8820</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8820" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8820" source="CVE"/>
    <description>
    In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, remote attackers can cause a denial of service (NULL pointer dereference and application crash) against directory authorities via a malformed descriptor, aka TROVE-2017-010.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8820.html">CVE-2017-8820</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8820">SUSE bug 1070849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8820">SUSE bug 1070849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167649" comment="tor-0.2.9.14-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153574" comment="tor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178821" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8821</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8821" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8821" source="CVE"/>
    <description>
    In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, an attacker can cause a denial of service (application hang) via crafted PEM input that signifies a public key requiring a password, which triggers an attempt by the OpenSSL library to ask the user for the password, aka TROVE-2017-011.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8821.html">CVE-2017-8821</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8821">SUSE bug 1070849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8821">SUSE bug 1070849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167649" comment="tor-0.2.9.14-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153574" comment="tor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178822" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8822</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8822" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8822" source="CVE"/>
    <description>
    In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have incompletely downloaded descriptors) can pick themselves in a circuit path, leading to a degradation of anonymity, aka TROVE-2017-012.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8822.html">CVE-2017-8822</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8822">SUSE bug 1070849</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8822">SUSE bug 1070849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167649" comment="tor-0.2.9.14-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153574" comment="tor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178823" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8823</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8823" source="CVE"/>
    <description>
    In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there is a use-after-free in onion service v2 during intro-point expiration because the expiring list is mismanaged in certain error cases, aka TROVE-2017-013.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8823.html">CVE-2017-8823</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8823">SUSE bug 1070849</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167649" comment="tor-0.2.9.14-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153574" comment="tor is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178824" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8824</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8824" source="CVE"/>
    <description>
    The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8824.html">CVE-2017-8824</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8824">SUSE bug 1070771</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168644" comment="kernel-debug-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168645" comment="kernel-debug-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168646" comment="kernel-debug-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168647" comment="kernel-default-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168648" comment="kernel-default-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168649" comment="kernel-default-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168650" comment="kernel-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168651" comment="kernel-docs-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168652" comment="kernel-docs-html-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168653" comment="kernel-docs-pdf-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168654" comment="kernel-macros-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168655" comment="kernel-obs-build-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168656" comment="kernel-obs-qa-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168657" comment="kernel-source-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168658" comment="kernel-source-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168659" comment="kernel-syms-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168660" comment="kernel-vanilla-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168661" comment="kernel-vanilla-base-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168662" comment="kernel-vanilla-devel-4.4.103-18.41.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178825" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8825</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8825" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8825" source="CVE"/>
    <description>
    A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. A crash can occur in low-level/imf/mailimf.c during a failed parse of a Cc header containing multiple e-mail addresses.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8825.html">CVE-2017-8825</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8825">SUSE bug 1038061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8825">SUSE bug 1038061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8825">SUSE bug 1038061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169761" comment="libetpan-1.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169762" comment="libetpan is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169763" comment="libetpan-devel-1.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169764" comment="libetpan-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169765" comment="libetpan17-1.6-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169766" comment="libetpan17 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178830" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8830</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8830" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8830.html">CVE-2017-8830</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1038000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8830">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178831" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8831</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8831" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8831" source="CVE"/>
    <description>
    The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch" vulnerability.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8831.html">CVE-2017-8831</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1053611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1053611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1053611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1053611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1053611</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1061936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1061936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8831">SUSE bug 1037994</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161924" comment="kernel-debug-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161925" comment="kernel-debug-base-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161926" comment="kernel-debug-devel-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161927" comment="kernel-default-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161928" comment="kernel-default-base-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161929" comment="kernel-default-devel-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161930" comment="kernel-devel-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161931" comment="kernel-docs-4.4.79-18.26.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161932" comment="kernel-docs-html-4.4.79-18.26.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161933" comment="kernel-docs-pdf-4.4.79-18.26.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161934" comment="kernel-macros-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161935" comment="kernel-obs-build-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161936" comment="kernel-obs-qa-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161937" comment="kernel-source-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161938" comment="kernel-source-vanilla-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161939" comment="kernel-syms-4.4.79-18.26.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161940" comment="kernel-vanilla-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161941" comment="kernel-vanilla-base-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161942" comment="kernel-vanilla-devel-4.4.79-18.26.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178849" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8849</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8849" source="CVE"/>
    <description>
    smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8849.html">CVE-2017-8849</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8849">SUSE bug 1036245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8849">SUSE bug 1036245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8849">SUSE bug 749065</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8849">SUSE bug 869959</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8849">SUSE bug 1033300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8849">SUSE bug 1036245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8849">SUSE bug 1036245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8849">SUSE bug 1036245</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8849">SUSE bug 1041511</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155640" comment="smb4k-1.2.1-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155643" comment="smb4k is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155641" comment="smb4k-doc-1.2.1-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155644" comment="smb4k-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009155642" comment="smb4k-lang-1.2.1-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009155645" comment="smb4k-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178872" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8872</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8872" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8872" source="CVE"/>
    <description>
    The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8872.html">CVE-2017-8872</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8872">SUSE bug 1038444</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162057" comment="libxml2-2.9.4-5.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162058" comment="libxml2-2-2.9.4-5.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162059" comment="libxml2-2-32bit-2.9.4-5.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162060" comment="libxml2-devel-2.9.4-5.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162061" comment="libxml2-devel-32bit-2.9.4-5.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162062" comment="libxml2-doc-2.9.4-5.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162063" comment="libxml2-tools-2.9.4-5.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162064" comment="python-libxml2-2.9.4-5.17.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178890" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8890</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8890" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8890" source="CVE"/>
    <description>
    The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8890.html">CVE-2017-8890</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1051906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1051906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1051906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038564</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8890">SUSE bug 1038544</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156721" comment="kernel-debug-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156722" comment="kernel-debug-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156723" comment="kernel-debug-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156724" comment="kernel-default-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156725" comment="kernel-default-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156726" comment="kernel-default-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156727" comment="kernel-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156728" comment="kernel-docs-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156729" comment="kernel-docs-html-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156730" comment="kernel-docs-pdf-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156731" comment="kernel-macros-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156732" comment="kernel-obs-build-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156733" comment="kernel-obs-qa-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156734" comment="kernel-source-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156735" comment="kernel-source-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156736" comment="kernel-syms-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156737" comment="kernel-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156738" comment="kernel-vanilla-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156739" comment="kernel-vanilla-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178911" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8911</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8911" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8911" source="CVE"/>
    <description>
    An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8911.html">CVE-2017-8911</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8911">SUSE bug 1038837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8911">SUSE bug 1038837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8911">SUSE bug 1038837</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8911">SUSE bug 1038837</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167180" comment="tnef-1.4.15-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167181" comment="tnef is signed with openSUSE key"/>
        </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20178932" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-8932</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-8932" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8932" source="CVE"/>
    <description>
    A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-8932.html">CVE-2017-8932</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-8932">SUSE bug 1040618</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157255" comment="go-1.6.2-23.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153190" comment="go is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157256" comment="go-doc-1.6.2-23.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153191" comment="go-doc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179031" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9031</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9031" source="CVE"/>
    <description>
    The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9031.html">CVE-2017-9031</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9031">SUSE bug 1039815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9031">SUSE bug 1039815</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9031">SUSE bug 1039958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9031">SUSE bug 1039815</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156382" comment="deluge-1.3.15-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156394" comment="deluge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156383" comment="deluge-lang-1.3.15-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009156395" comment="deluge-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179038" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9038</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9038" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9038" source="CVE"/>
    <description>
    GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the byte_get_little_endian function in elfcomm.c, the get_unwind_section_word function in readelf.c, and ARM unwind information that contains invalid word offsets.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9038.html">CVE-2017-9038</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9038">SUSE bug 1038874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9038">SUSE bug 1038874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9038">SUSE bug 1038874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9038">SUSE bug 1038874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9038">SUSE bug 1038874</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179039" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9039</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9039" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9039" source="CVE"/>
    <description>
    GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9039.html">CVE-2017-9039</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9039">SUSE bug 1038875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9039">SUSE bug 1038875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9039">SUSE bug 1038875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9039">SUSE bug 1038875</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9039">SUSE bug 1038875</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179040" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9040</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9040" source="CVE"/>
    <description>
    GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9040.html">CVE-2017-9040</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9040">SUSE bug 1038876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9040">SUSE bug 1038877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9040">SUSE bug 1038877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9040">SUSE bug 1038876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9040">SUSE bug 1038876</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9040">SUSE bug 1038876</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179041" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9041</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9041" source="CVE"/>
    <description>
    GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9041.html">CVE-2017-9041</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9041">SUSE bug 1038874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9041">SUSE bug 1038877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9041">SUSE bug 1038874</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9041">SUSE bug 1038877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9041">SUSE bug 1038877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9041">SUSE bug 1038877</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9041">SUSE bug 1038877</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179042" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9042</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9042" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9042" source="CVE"/>
    <description>
    readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9042.html">CVE-2017-9042</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9042">SUSE bug 1038878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9042">SUSE bug 1038878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9042">SUSE bug 1038878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9042">SUSE bug 1038878</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9042">SUSE bug 1038878</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179043" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9043</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9043" source="CVE"/>
    <description>
    readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9043.html">CVE-2017-9043</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9043">SUSE bug 1038880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9043">SUSE bug 1038880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9043">SUSE bug 1038880</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9043">SUSE bug 1038880</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179044" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9044</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9044" source="CVE"/>
    <description>
    The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted ELF file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9044.html">CVE-2017-9044</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9044">SUSE bug 1038881</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9044">SUSE bug 1038881</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9044">SUSE bug 1038881</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9044">SUSE bug 1038881</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9044">SUSE bug 1038881</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179047" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9047</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9047" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9047" source="CVE"/>
    <description>
    A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content-&gt;type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content-&gt;prefix is appended to buf (if it actually fits) whereupon (ii) content-&gt;name is written to the buffer. However, the check for whether the content-&gt;name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about "size" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9047.html">CVE-2017-9047</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039657</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9047">SUSE bug 1039063</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157099" comment="libxml2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157100" comment="libxml2-2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157101" comment="libxml2-2-32bit-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157102" comment="libxml2-devel-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157103" comment="libxml2-devel-32bit-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157104" comment="libxml2-doc-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157105" comment="libxml2-tools-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157106" comment="python-libxml2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179048" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9048</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048" source="CVE"/>
    <description>
    libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 &lt; size. This vulnerability causes programs that use libxml2, such as PHP, to crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9048.html">CVE-2017-9048</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039658</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9048">SUSE bug 1039064</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157099" comment="libxml2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157100" comment="libxml2-2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157101" comment="libxml2-2-32bit-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157102" comment="libxml2-devel-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157103" comment="libxml2-devel-32bit-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157104" comment="libxml2-doc-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157105" comment="libxml2-tools-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157106" comment="python-libxml2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179049" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9049</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9049" source="CVE"/>
    <description>
    libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9049.html">CVE-2017-9049</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039064</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039659</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9049">SUSE bug 1069690</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157099" comment="libxml2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157100" comment="libxml2-2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157101" comment="libxml2-2-32bit-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157102" comment="libxml2-devel-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157103" comment="libxml2-devel-32bit-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157104" comment="libxml2-doc-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157105" comment="libxml2-tools-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157106" comment="python-libxml2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179050" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9050</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9050" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9050" source="CVE"/>
    <description>
    libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9050.html">CVE-2017-9050</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039066</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1039661</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9050">SUSE bug 1069690</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157099" comment="libxml2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152662" comment="libxml2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157100" comment="libxml2-2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151137" comment="libxml2-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157101" comment="libxml2-2-32bit-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151138" comment="libxml2-2-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157102" comment="libxml2-devel-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151139" comment="libxml2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157103" comment="libxml2-devel-32bit-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152663" comment="libxml2-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157104" comment="libxml2-doc-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152664" comment="libxml2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157105" comment="libxml2-tools-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151140" comment="libxml2-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157106" comment="python-libxml2-2.9.4-5.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151141" comment="python-libxml2 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179074" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9074</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9074" source="CVE"/>
    <description>
    The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9074.html">CVE-2017-9074</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9074">SUSE bug 1039882</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156721" comment="kernel-debug-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156722" comment="kernel-debug-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156723" comment="kernel-debug-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156724" comment="kernel-default-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156725" comment="kernel-default-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156726" comment="kernel-default-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156727" comment="kernel-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156728" comment="kernel-docs-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156729" comment="kernel-docs-html-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156730" comment="kernel-docs-pdf-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156731" comment="kernel-macros-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156732" comment="kernel-obs-build-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156733" comment="kernel-obs-qa-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156734" comment="kernel-source-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156735" comment="kernel-source-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156736" comment="kernel-syms-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156737" comment="kernel-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156738" comment="kernel-vanilla-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156739" comment="kernel-vanilla-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179075" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9075</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9075" source="CVE"/>
    <description>
    The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9075.html">CVE-2017-9075</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1051906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9075">SUSE bug 1039883</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156721" comment="kernel-debug-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156722" comment="kernel-debug-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156723" comment="kernel-debug-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156724" comment="kernel-default-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156725" comment="kernel-default-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156726" comment="kernel-default-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156727" comment="kernel-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156728" comment="kernel-docs-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156729" comment="kernel-docs-html-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156730" comment="kernel-docs-pdf-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156731" comment="kernel-macros-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156732" comment="kernel-obs-build-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156733" comment="kernel-obs-qa-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156734" comment="kernel-source-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156735" comment="kernel-source-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156736" comment="kernel-syms-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156737" comment="kernel-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156738" comment="kernel-vanilla-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156739" comment="kernel-vanilla-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179076" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9076</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9076" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9076" source="CVE"/>
    <description>
    The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9076.html">CVE-2017-9076</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1051906</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9076">SUSE bug 1039885</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156721" comment="kernel-debug-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156722" comment="kernel-debug-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156723" comment="kernel-debug-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156724" comment="kernel-default-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156725" comment="kernel-default-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156726" comment="kernel-default-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156727" comment="kernel-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156728" comment="kernel-docs-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156729" comment="kernel-docs-html-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156730" comment="kernel-docs-pdf-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156731" comment="kernel-macros-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156732" comment="kernel-obs-build-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156733" comment="kernel-obs-qa-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156734" comment="kernel-source-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156735" comment="kernel-source-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156736" comment="kernel-syms-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156737" comment="kernel-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156738" comment="kernel-vanilla-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156739" comment="kernel-vanilla-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179077" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9077</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9077" source="CVE"/>
    <description>
    The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9077.html">CVE-2017-9077</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1038544</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1040069</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9077">SUSE bug 1042364</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156721" comment="kernel-debug-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156722" comment="kernel-debug-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156723" comment="kernel-debug-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156724" comment="kernel-default-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156725" comment="kernel-default-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156726" comment="kernel-default-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156727" comment="kernel-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156728" comment="kernel-docs-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156729" comment="kernel-docs-html-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156730" comment="kernel-docs-pdf-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156731" comment="kernel-macros-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156732" comment="kernel-obs-build-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156733" comment="kernel-obs-qa-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156734" comment="kernel-source-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156735" comment="kernel-source-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156736" comment="kernel-syms-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156737" comment="kernel-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156738" comment="kernel-vanilla-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156739" comment="kernel-vanilla-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9098</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9098" source="CVE"/>
    <description>
    ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9098.html">CVE-2017-9098</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1040025</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9098">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179122" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9122</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9122" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9122" source="CVE"/>
    <description>
    The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9122.html">CVE-2017-9122</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1051855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1051859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9122">SUSE bug 1044077</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158053" comment="libquicktime-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153614" comment="libquicktime is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158054" comment="libquicktime-devel-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153615" comment="libquicktime-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158055" comment="libquicktime-tools-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153616" comment="libquicktime-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158056" comment="libquicktime0-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158057" comment="libquicktime0-32bit-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153618" comment="libquicktime0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179123" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9123</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9123" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9123" source="CVE"/>
    <description>
    The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9123.html">CVE-2017-9123</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9123">SUSE bug 1044009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9123">SUSE bug 1044009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9123">SUSE bug 1044009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9123">SUSE bug 1044009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9123">SUSE bug 1044009</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158053" comment="libquicktime-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153614" comment="libquicktime is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158054" comment="libquicktime-devel-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153615" comment="libquicktime-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158055" comment="libquicktime-tools-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153616" comment="libquicktime-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158056" comment="libquicktime0-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158057" comment="libquicktime0-32bit-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153618" comment="libquicktime0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179124" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9124</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9124" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9124" source="CVE"/>
    <description>
    The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9124.html">CVE-2017-9124</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9124">SUSE bug 1044008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9124">SUSE bug 1044008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9124">SUSE bug 1044008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9124">SUSE bug 1044008</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158053" comment="libquicktime-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153614" comment="libquicktime is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158054" comment="libquicktime-devel-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153615" comment="libquicktime-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158055" comment="libquicktime-tools-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153616" comment="libquicktime-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158056" comment="libquicktime0-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158057" comment="libquicktime0-32bit-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153618" comment="libquicktime0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179125" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9125</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9125" source="CVE"/>
    <description>
    The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9125.html">CVE-2017-9125</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9125">SUSE bug 1044122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9125">SUSE bug 1044122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9125">SUSE bug 1044122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9125">SUSE bug 1044122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9125">SUSE bug 1044122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9125">SUSE bug 1044122</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158053" comment="libquicktime-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153614" comment="libquicktime is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158054" comment="libquicktime-devel-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153615" comment="libquicktime-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158055" comment="libquicktime-tools-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153616" comment="libquicktime-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158056" comment="libquicktime0-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158057" comment="libquicktime0-32bit-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153618" comment="libquicktime0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179126" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9126</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9126" source="CVE"/>
    <description>
    The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9126.html">CVE-2017-9126</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9126">SUSE bug 1044006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9126">SUSE bug 1044006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9126">SUSE bug 1044006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9126">SUSE bug 1044006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9126">SUSE bug 1044006</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158053" comment="libquicktime-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153614" comment="libquicktime is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158054" comment="libquicktime-devel-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153615" comment="libquicktime-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158055" comment="libquicktime-tools-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153616" comment="libquicktime-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158056" comment="libquicktime0-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158057" comment="libquicktime0-32bit-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153618" comment="libquicktime0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179127" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9127</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9127" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9127" source="CVE"/>
    <description>
    The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9127.html">CVE-2017-9127</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9127">SUSE bug 1044002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9127">SUSE bug 1044002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9127">SUSE bug 1044002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9127">SUSE bug 1044002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9127">SUSE bug 1044002</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158053" comment="libquicktime-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153614" comment="libquicktime is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158054" comment="libquicktime-devel-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153615" comment="libquicktime-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158055" comment="libquicktime-tools-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153616" comment="libquicktime-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158056" comment="libquicktime0-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158057" comment="libquicktime0-32bit-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153618" comment="libquicktime0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179128" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9128</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9128" source="CVE"/>
    <description>
    The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted mp4 file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9128.html">CVE-2017-9128</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1044000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1044000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1044002</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1044006</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1044009</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1044077</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1044122</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1044000</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1044008</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1051855</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1051859</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9128">SUSE bug 1044000</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158053" comment="libquicktime-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153614" comment="libquicktime is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158054" comment="libquicktime-devel-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153615" comment="libquicktime-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158055" comment="libquicktime-tools-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153616" comment="libquicktime-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158056" comment="libquicktime0-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153617" comment="libquicktime0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158057" comment="libquicktime0-32bit-1.2.4cvs20150223-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153618" comment="libquicktime0-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179141" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9141</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9141" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of missing checks in the ReadDDSImage function in coders/dds.c.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9141.html">CVE-2017-9141</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9141">SUSE bug 1040303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9141">SUSE bug 1040303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9141">SUSE bug 1040303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9141">SUSE bug 1040303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9141">SUSE bug 1040303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9141">SUSE bug 1040303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9141">SUSE bug 1040303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9141">SUSE bug 1040303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9141">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179142" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9142</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9142" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9142.html">CVE-2017-9142</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1036985</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9142">SUSE bug 1040304</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156711" comment="GraphicsMagick-1.3.25-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156712" comment="GraphicsMagick-devel-1.3.25-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156713" comment="libGraphicsMagick++-Q16-12-1.3.25-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156714" comment="libGraphicsMagick++-devel-1.3.25-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156715" comment="libGraphicsMagick-Q16-3-1.3.25-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156716" comment="libGraphicsMagick3-config-1.3.25-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156717" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156718" comment="perl-GraphicsMagick-1.3.25-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179143" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9143</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9143" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory leak) via a crafted .art file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9143.html">CVE-2017-9143</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9143">SUSE bug 1040306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9143">SUSE bug 1040306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9143">SUSE bug 1040306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9143">SUSE bug 1040306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9143">SUSE bug 1040306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9143">SUSE bug 1040306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9143">SUSE bug 1040306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9143">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179144" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9144</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9144" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9144.html">CVE-2017-9144</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1040332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1040332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1040332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1040332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1040332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1040332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1040332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1048936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1048936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1040332</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1053919</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9144">SUSE bug 1048936</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156797" comment="ImageMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156798" comment="ImageMagick-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156799" comment="ImageMagick-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156800" comment="ImageMagick-doc-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156801" comment="ImageMagick-extra-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156802" comment="libMagick++-6_Q16-3-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156803" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156804" comment="libMagick++-devel-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156805" comment="libMagick++-devel-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156806" comment="libMagickCore-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156807" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156808" comment="libMagickWand-6_Q16-1-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156809" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156810" comment="perl-PerlMagick-6.8.8.1-30.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179148" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9148</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9148" source="CVE"/>
    <description>
    The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9148.html">CVE-2017-9148</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1046141</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9148">SUSE bug 1041445</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157083" comment="freeradius-server-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157108" comment="freeradius-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157084" comment="freeradius-server-devel-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157109" comment="freeradius-server-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157085" comment="freeradius-server-doc-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157110" comment="freeradius-server-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157086" comment="freeradius-server-krb5-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157111" comment="freeradius-server-krb5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157087" comment="freeradius-server-ldap-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157112" comment="freeradius-server-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157088" comment="freeradius-server-libs-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157113" comment="freeradius-server-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157089" comment="freeradius-server-mysql-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157114" comment="freeradius-server-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157090" comment="freeradius-server-perl-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157115" comment="freeradius-server-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157091" comment="freeradius-server-postgresql-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157116" comment="freeradius-server-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157092" comment="freeradius-server-python-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157117" comment="freeradius-server-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157093" comment="freeradius-server-sqlite-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157118" comment="freeradius-server-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157094" comment="freeradius-server-utils-3.0.12-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157119" comment="freeradius-server-utils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179150" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9150</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9150" source="CVE"/>
    <description>
    The do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allow_ptr_leaks value available for restricting the output of the print_bpf_insn function, which allows local users to obtain sensitive address information via crafted bpf system calls.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9150.html">CVE-2017-9150</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9150">SUSE bug 1040279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9150">SUSE bug 1040279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9150">SUSE bug 1040279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9150">SUSE bug 1040279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9150">SUSE bug 1040279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9150">SUSE bug 1040279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9150">SUSE bug 1040279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9150">SUSE bug 1040279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9150">SUSE bug 1040279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9150">SUSE bug 1040279</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9150">SUSE bug 1040279</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156721" comment="kernel-debug-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156722" comment="kernel-debug-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156723" comment="kernel-debug-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156724" comment="kernel-default-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156725" comment="kernel-default-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156726" comment="kernel-default-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156727" comment="kernel-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156728" comment="kernel-docs-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156729" comment="kernel-docs-html-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156730" comment="kernel-docs-pdf-4.4.70-18.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156731" comment="kernel-macros-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156732" comment="kernel-obs-build-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156733" comment="kernel-obs-qa-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156734" comment="kernel-source-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156735" comment="kernel-source-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156736" comment="kernel-syms-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156737" comment="kernel-vanilla-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156738" comment="kernel-vanilla-base-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156739" comment="kernel-vanilla-devel-4.4.70-18.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179217" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9217</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9217" source="CVE"/>
    <description>
    systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9217.html">CVE-2017-9217</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9217">SUSE bug 1040614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9217">SUSE bug 1040614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9217">SUSE bug 1040614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9217">SUSE bug 1040614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9217">SUSE bug 1040614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9217">SUSE bug 1040614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9217">SUSE bug 1040614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9217">SUSE bug 1040614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9217">SUSE bug 1040614</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9217">SUSE bug 1040614</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158459" comment="libsystemd0-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154102" comment="libsystemd0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158460" comment="libsystemd0-32bit-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154103" comment="libsystemd0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158461" comment="libsystemd0-mini-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154202" comment="libsystemd0-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158462" comment="libudev-devel-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151690" comment="libudev-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158463" comment="libudev-mini-devel-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152578" comment="libudev-mini-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158464" comment="libudev-mini1-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152579" comment="libudev-mini1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158465" comment="libudev1-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151691" comment="libudev1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158466" comment="libudev1-32bit-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151692" comment="libudev1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158467" comment="nss-myhostname-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152580" comment="nss-myhostname is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158468" comment="nss-myhostname-32bit-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152581" comment="nss-myhostname-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158469" comment="nss-mymachines-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154203" comment="nss-mymachines is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158470" comment="systemd-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151693" comment="systemd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158471" comment="systemd-32bit-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151694" comment="systemd-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158472" comment="systemd-bash-completion-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151695" comment="systemd-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158473" comment="systemd-devel-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152582" comment="systemd-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158474" comment="systemd-logger-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151696" comment="systemd-logger is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158475" comment="systemd-mini-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152584" comment="systemd-mini is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158476" comment="systemd-mini-bash-completion-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154204" comment="systemd-mini-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158477" comment="systemd-mini-devel-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152585" comment="systemd-mini-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158478" comment="systemd-mini-sysvinit-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152586" comment="systemd-mini-sysvinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158479" comment="systemd-sysvinit-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151697" comment="systemd-sysvinit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158480" comment="udev-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151699" comment="udev is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158481" comment="udev-mini-228-25.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152587" comment="udev-mini is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179224" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9224</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9224" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9224" source="CVE"/>
    <description>
    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in match_at() during regular expression searching. A logical error involving order of validation and access in match_at() could result in an out-of-bounds read from a stack buffer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9224.html">CVE-2017-9224</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1044976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9224">SUSE bug 1040891</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157852" comment="apache2-mod_php5-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158083" comment="apache2-mod_php7-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157853" comment="php5-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157854" comment="php5-bcmath-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157855" comment="php5-bz2-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157856" comment="php5-calendar-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157857" comment="php5-ctype-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157858" comment="php5-curl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157859" comment="php5-dba-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157860" comment="php5-devel-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157861" comment="php5-dom-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157862" comment="php5-enchant-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157863" comment="php5-exif-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157864" comment="php5-fastcgi-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157865" comment="php5-fileinfo-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157866" comment="php5-firebird-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157867" comment="php5-fpm-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157868" comment="php5-ftp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157869" comment="php5-gd-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157870" comment="php5-gettext-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157871" comment="php5-gmp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157872" comment="php5-iconv-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157873" comment="php5-imap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157874" comment="php5-intl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157875" comment="php5-json-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157876" comment="php5-ldap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157877" comment="php5-mbstring-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157878" comment="php5-mcrypt-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157879" comment="php5-mssql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157880" comment="php5-mysql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157881" comment="php5-odbc-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157882" comment="php5-opcache-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157883" comment="php5-openssl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157884" comment="php5-pcntl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157885" comment="php5-pdo-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157886" comment="php5-pear-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157887" comment="php5-pgsql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157888" comment="php5-phar-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157889" comment="php5-posix-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157890" comment="php5-pspell-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157891" comment="php5-readline-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157892" comment="php5-shmop-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157893" comment="php5-snmp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157894" comment="php5-soap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157895" comment="php5-sockets-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157896" comment="php5-sqlite-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157897" comment="php5-suhosin-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157898" comment="php5-sysvmsg-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157899" comment="php5-sysvsem-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157900" comment="php5-sysvshm-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157901" comment="php5-tidy-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157902" comment="php5-tokenizer-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157903" comment="php5-wddx-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157904" comment="php5-xmlreader-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157905" comment="php5-xmlrpc-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157906" comment="php5-xmlwriter-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157907" comment="php5-xsl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157908" comment="php5-zip-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157909" comment="php5-zlib-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158084" comment="php7-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158085" comment="php7-bcmath-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158086" comment="php7-bz2-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158087" comment="php7-calendar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158088" comment="php7-ctype-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158089" comment="php7-curl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158090" comment="php7-dba-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158091" comment="php7-devel-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158092" comment="php7-dom-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158093" comment="php7-enchant-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158094" comment="php7-exif-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158095" comment="php7-fastcgi-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158096" comment="php7-fileinfo-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158097" comment="php7-firebird-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158098" comment="php7-fpm-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158099" comment="php7-ftp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158100" comment="php7-gd-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158101" comment="php7-gettext-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158102" comment="php7-gmp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158103" comment="php7-iconv-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158104" comment="php7-imap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158105" comment="php7-intl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158106" comment="php7-json-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158107" comment="php7-ldap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158108" comment="php7-mbstring-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158109" comment="php7-mcrypt-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158110" comment="php7-mysql-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158111" comment="php7-odbc-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158112" comment="php7-opcache-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158113" comment="php7-openssl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158114" comment="php7-pcntl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158115" comment="php7-pdo-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158116" comment="php7-pear-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158117" comment="php7-pear-Archive_Tar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158118" comment="php7-pgsql-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158119" comment="php7-phar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158120" comment="php7-posix-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158121" comment="php7-pspell-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158122" comment="php7-readline-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158123" comment="php7-shmop-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158124" comment="php7-snmp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158125" comment="php7-soap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158126" comment="php7-sockets-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158127" comment="php7-sqlite-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158128" comment="php7-sysvmsg-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158129" comment="php7-sysvsem-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158130" comment="php7-sysvshm-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158131" comment="php7-tidy-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158132" comment="php7-tokenizer-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158133" comment="php7-wddx-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158134" comment="php7-xmlreader-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158135" comment="php7-xmlrpc-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158136" comment="php7-xmlwriter-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158137" comment="php7-xsl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158138" comment="php7-zip-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158139" comment="php7-zlib-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179226" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9226</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9226" source="CVE"/>
    <description>
    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read occurs in next_state_val() during regular expression compilation. Octal numbers larger than 0xff are not handled correctly in fetch_token() and fetch_token_in_cc(). A malformed regular expression containing an octal number in the form of '\700' would produce an invalid code point value larger than 0xff in next_state_val(), resulting in an out-of-bounds write memory corruption.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9226.html">CVE-2017-9226</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1044976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9226">SUSE bug 1040889</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157852" comment="apache2-mod_php5-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158083" comment="apache2-mod_php7-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157853" comment="php5-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157854" comment="php5-bcmath-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157855" comment="php5-bz2-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157856" comment="php5-calendar-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157857" comment="php5-ctype-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157858" comment="php5-curl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157859" comment="php5-dba-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157860" comment="php5-devel-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157861" comment="php5-dom-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157862" comment="php5-enchant-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157863" comment="php5-exif-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157864" comment="php5-fastcgi-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157865" comment="php5-fileinfo-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157866" comment="php5-firebird-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157867" comment="php5-fpm-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157868" comment="php5-ftp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157869" comment="php5-gd-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157870" comment="php5-gettext-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157871" comment="php5-gmp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157872" comment="php5-iconv-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157873" comment="php5-imap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157874" comment="php5-intl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157875" comment="php5-json-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157876" comment="php5-ldap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157877" comment="php5-mbstring-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157878" comment="php5-mcrypt-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157879" comment="php5-mssql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157880" comment="php5-mysql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157881" comment="php5-odbc-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157882" comment="php5-opcache-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157883" comment="php5-openssl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157884" comment="php5-pcntl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157885" comment="php5-pdo-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157886" comment="php5-pear-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157887" comment="php5-pgsql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157888" comment="php5-phar-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157889" comment="php5-posix-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157890" comment="php5-pspell-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157891" comment="php5-readline-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157892" comment="php5-shmop-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157893" comment="php5-snmp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157894" comment="php5-soap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157895" comment="php5-sockets-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157896" comment="php5-sqlite-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157897" comment="php5-suhosin-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157898" comment="php5-sysvmsg-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157899" comment="php5-sysvsem-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157900" comment="php5-sysvshm-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157901" comment="php5-tidy-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157902" comment="php5-tokenizer-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157903" comment="php5-wddx-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157904" comment="php5-xmlreader-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157905" comment="php5-xmlrpc-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157906" comment="php5-xmlwriter-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157907" comment="php5-xsl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157908" comment="php5-zip-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157909" comment="php5-zlib-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158084" comment="php7-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158085" comment="php7-bcmath-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158086" comment="php7-bz2-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158087" comment="php7-calendar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158088" comment="php7-ctype-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158089" comment="php7-curl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158090" comment="php7-dba-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158091" comment="php7-devel-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158092" comment="php7-dom-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158093" comment="php7-enchant-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158094" comment="php7-exif-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158095" comment="php7-fastcgi-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158096" comment="php7-fileinfo-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158097" comment="php7-firebird-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158098" comment="php7-fpm-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158099" comment="php7-ftp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158100" comment="php7-gd-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158101" comment="php7-gettext-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158102" comment="php7-gmp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158103" comment="php7-iconv-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158104" comment="php7-imap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158105" comment="php7-intl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158106" comment="php7-json-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158107" comment="php7-ldap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158108" comment="php7-mbstring-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158109" comment="php7-mcrypt-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158110" comment="php7-mysql-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158111" comment="php7-odbc-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158112" comment="php7-opcache-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158113" comment="php7-openssl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158114" comment="php7-pcntl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158115" comment="php7-pdo-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158116" comment="php7-pear-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158117" comment="php7-pear-Archive_Tar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158118" comment="php7-pgsql-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158119" comment="php7-phar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158120" comment="php7-posix-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158121" comment="php7-pspell-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158122" comment="php7-readline-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158123" comment="php7-shmop-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158124" comment="php7-snmp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158125" comment="php7-soap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158126" comment="php7-sockets-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158127" comment="php7-sqlite-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158128" comment="php7-sysvmsg-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158129" comment="php7-sysvsem-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158130" comment="php7-sysvshm-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158131" comment="php7-tidy-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158132" comment="php7-tokenizer-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158133" comment="php7-wddx-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158134" comment="php7-xmlreader-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158135" comment="php7-xmlrpc-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158136" comment="php7-xmlwriter-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158137" comment="php7-xsl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158138" comment="php7-zip-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158139" comment="php7-zlib-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179227" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9227</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9227" source="CVE"/>
    <description>
    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbc_enc_len() during regular expression searching. Invalid handling of reg-&gt;dmin in forward_search_range() could result in an invalid pointer dereference, as an out-of-bounds read from a stack buffer.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9227.html">CVE-2017-9227</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1044976</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9227">SUSE bug 1040883</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157852" comment="apache2-mod_php5-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158083" comment="apache2-mod_php7-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157853" comment="php5-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157854" comment="php5-bcmath-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157855" comment="php5-bz2-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157856" comment="php5-calendar-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157857" comment="php5-ctype-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157858" comment="php5-curl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157859" comment="php5-dba-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157860" comment="php5-devel-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157861" comment="php5-dom-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157862" comment="php5-enchant-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157863" comment="php5-exif-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157864" comment="php5-fastcgi-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157865" comment="php5-fileinfo-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157866" comment="php5-firebird-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157867" comment="php5-fpm-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157868" comment="php5-ftp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157869" comment="php5-gd-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157870" comment="php5-gettext-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157871" comment="php5-gmp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157872" comment="php5-iconv-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157873" comment="php5-imap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157874" comment="php5-intl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157875" comment="php5-json-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157876" comment="php5-ldap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157877" comment="php5-mbstring-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157878" comment="php5-mcrypt-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157879" comment="php5-mssql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157880" comment="php5-mysql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157881" comment="php5-odbc-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157882" comment="php5-opcache-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157883" comment="php5-openssl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157884" comment="php5-pcntl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157885" comment="php5-pdo-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157886" comment="php5-pear-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157887" comment="php5-pgsql-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157888" comment="php5-phar-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157889" comment="php5-posix-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157890" comment="php5-pspell-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157891" comment="php5-readline-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157892" comment="php5-shmop-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157893" comment="php5-snmp-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157894" comment="php5-soap-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157895" comment="php5-sockets-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157896" comment="php5-sqlite-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157897" comment="php5-suhosin-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157898" comment="php5-sysvmsg-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157899" comment="php5-sysvsem-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157900" comment="php5-sysvshm-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157901" comment="php5-tidy-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157902" comment="php5-tokenizer-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157903" comment="php5-wddx-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157904" comment="php5-xmlreader-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157905" comment="php5-xmlrpc-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157906" comment="php5-xmlwriter-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157907" comment="php5-xsl-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157908" comment="php5-zip-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157909" comment="php5-zlib-5.5.14-77.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158084" comment="php7-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158085" comment="php7-bcmath-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158086" comment="php7-bz2-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158087" comment="php7-calendar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158088" comment="php7-ctype-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158089" comment="php7-curl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158090" comment="php7-dba-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158091" comment="php7-devel-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158092" comment="php7-dom-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158093" comment="php7-enchant-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158094" comment="php7-exif-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158095" comment="php7-fastcgi-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158096" comment="php7-fileinfo-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158097" comment="php7-firebird-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158098" comment="php7-fpm-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158099" comment="php7-ftp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158100" comment="php7-gd-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158101" comment="php7-gettext-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158102" comment="php7-gmp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158103" comment="php7-iconv-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158104" comment="php7-imap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158105" comment="php7-intl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158106" comment="php7-json-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158107" comment="php7-ldap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158108" comment="php7-mbstring-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158109" comment="php7-mcrypt-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158110" comment="php7-mysql-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158111" comment="php7-odbc-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158112" comment="php7-opcache-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158113" comment="php7-openssl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158114" comment="php7-pcntl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158115" comment="php7-pdo-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158116" comment="php7-pear-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158117" comment="php7-pear-Archive_Tar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158118" comment="php7-pgsql-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158119" comment="php7-phar-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158120" comment="php7-posix-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158121" comment="php7-pspell-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158122" comment="php7-readline-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158123" comment="php7-shmop-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158124" comment="php7-snmp-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158125" comment="php7-soap-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158126" comment="php7-sockets-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158127" comment="php7-sqlite-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158128" comment="php7-sysvmsg-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158129" comment="php7-sysvsem-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158130" comment="php7-sysvshm-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158131" comment="php7-tidy-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158132" comment="php7-tokenizer-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158133" comment="php7-wddx-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158134" comment="php7-xmlreader-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158135" comment="php7-xmlrpc-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158136" comment="php7-xmlwriter-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158137" comment="php7-xsl-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158138" comment="php7-zip-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158139" comment="php7-zlib-7.0.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179228" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9228</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9228" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9228" source="CVE"/>
    <description>
    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9228.html">CVE-2017-9228</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1068376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1068376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069607</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9228">SUSE bug 1069606</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168546" comment="apache2-mod_php5-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168115" comment="apache2-mod_php7-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168547" comment="php5-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168548" comment="php5-bcmath-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168549" comment="php5-bz2-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168550" comment="php5-calendar-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168551" comment="php5-ctype-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168552" comment="php5-curl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168553" comment="php5-dba-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168554" comment="php5-devel-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168555" comment="php5-dom-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168556" comment="php5-enchant-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168557" comment="php5-exif-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168558" comment="php5-fastcgi-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168559" comment="php5-fileinfo-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168560" comment="php5-firebird-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168561" comment="php5-fpm-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168562" comment="php5-ftp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168563" comment="php5-gd-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168564" comment="php5-gettext-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168565" comment="php5-gmp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168566" comment="php5-iconv-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168567" comment="php5-imap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168568" comment="php5-intl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168569" comment="php5-json-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168570" comment="php5-ldap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168571" comment="php5-mbstring-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168572" comment="php5-mcrypt-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168573" comment="php5-mssql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168574" comment="php5-mysql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168575" comment="php5-odbc-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168576" comment="php5-opcache-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168577" comment="php5-openssl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168578" comment="php5-pcntl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168579" comment="php5-pdo-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168580" comment="php5-pear-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168581" comment="php5-pgsql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168582" comment="php5-phar-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168583" comment="php5-posix-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168584" comment="php5-pspell-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168585" comment="php5-readline-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168586" comment="php5-shmop-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168587" comment="php5-snmp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168588" comment="php5-soap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168589" comment="php5-sockets-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168590" comment="php5-sqlite-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168591" comment="php5-suhosin-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168592" comment="php5-sysvmsg-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168593" comment="php5-sysvsem-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168594" comment="php5-sysvshm-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168595" comment="php5-tidy-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168596" comment="php5-tokenizer-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168597" comment="php5-wddx-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168598" comment="php5-xmlreader-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168599" comment="php5-xmlrpc-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168600" comment="php5-xmlwriter-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168601" comment="php5-xsl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168602" comment="php5-zip-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168603" comment="php5-zlib-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168116" comment="php7-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168117" comment="php7-bcmath-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168118" comment="php7-bz2-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168119" comment="php7-calendar-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168120" comment="php7-ctype-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168121" comment="php7-curl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168122" comment="php7-dba-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168123" comment="php7-devel-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168124" comment="php7-dom-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168125" comment="php7-enchant-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168126" comment="php7-exif-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168127" comment="php7-fastcgi-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168128" comment="php7-fileinfo-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168129" comment="php7-firebird-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168130" comment="php7-fpm-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168131" comment="php7-ftp-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168132" comment="php7-gd-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168133" comment="php7-gettext-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168134" comment="php7-gmp-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168135" comment="php7-iconv-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168136" comment="php7-imap-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168137" comment="php7-intl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168138" comment="php7-json-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168139" comment="php7-ldap-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168140" comment="php7-mbstring-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168141" comment="php7-mcrypt-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168142" comment="php7-mysql-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168143" comment="php7-odbc-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168144" comment="php7-opcache-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168145" comment="php7-openssl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168146" comment="php7-pcntl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168147" comment="php7-pdo-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168148" comment="php7-pear-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168149" comment="php7-pear-Archive_Tar-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168150" comment="php7-pgsql-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168151" comment="php7-phar-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168152" comment="php7-posix-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168153" comment="php7-pspell-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168154" comment="php7-readline-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168155" comment="php7-shmop-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168156" comment="php7-snmp-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168157" comment="php7-soap-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168158" comment="php7-sockets-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168159" comment="php7-sqlite-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168160" comment="php7-sysvmsg-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168161" comment="php7-sysvsem-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168162" comment="php7-sysvshm-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168163" comment="php7-tidy-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168164" comment="php7-tokenizer-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168165" comment="php7-wddx-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168166" comment="php7-xmlreader-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168167" comment="php7-xmlrpc-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168168" comment="php7-xmlwriter-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168169" comment="php7-xsl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168170" comment="php7-zip-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168171" comment="php7-zlib-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179229" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9229</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9229" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9229" source="CVE"/>
    <description>
    An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adjust_char_head() during regular expression compilation. Invalid handling of reg-&gt;dmax in forward_search_range() could result in an invalid pointer dereference, normally as an immediate denial-of-service condition.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9229.html">CVE-2017-9229</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1068376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1068376</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069632</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9229">SUSE bug 1069631</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168546" comment="apache2-mod_php5-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168115" comment="apache2-mod_php7-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154143" comment="apache2-mod_php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168547" comment="php5-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168548" comment="php5-bcmath-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168549" comment="php5-bz2-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168550" comment="php5-calendar-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168551" comment="php5-ctype-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168552" comment="php5-curl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168553" comment="php5-dba-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168554" comment="php5-devel-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168555" comment="php5-dom-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168556" comment="php5-enchant-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168557" comment="php5-exif-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168558" comment="php5-fastcgi-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168559" comment="php5-fileinfo-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168560" comment="php5-firebird-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168561" comment="php5-fpm-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168562" comment="php5-ftp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168563" comment="php5-gd-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168564" comment="php5-gettext-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168565" comment="php5-gmp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168566" comment="php5-iconv-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168567" comment="php5-imap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168568" comment="php5-intl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168569" comment="php5-json-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168570" comment="php5-ldap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168571" comment="php5-mbstring-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168572" comment="php5-mcrypt-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168573" comment="php5-mssql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168574" comment="php5-mysql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168575" comment="php5-odbc-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168576" comment="php5-opcache-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168577" comment="php5-openssl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168578" comment="php5-pcntl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168579" comment="php5-pdo-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168580" comment="php5-pear-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168581" comment="php5-pgsql-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168582" comment="php5-phar-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168583" comment="php5-posix-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168584" comment="php5-pspell-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168585" comment="php5-readline-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168586" comment="php5-shmop-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168587" comment="php5-snmp-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168588" comment="php5-soap-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168589" comment="php5-sockets-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168590" comment="php5-sqlite-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168591" comment="php5-suhosin-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168592" comment="php5-sysvmsg-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168593" comment="php5-sysvsem-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168594" comment="php5-sysvshm-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168595" comment="php5-tidy-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168596" comment="php5-tokenizer-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168597" comment="php5-wddx-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168598" comment="php5-xmlreader-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168599" comment="php5-xmlrpc-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168600" comment="php5-xmlwriter-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168601" comment="php5-xsl-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168602" comment="php5-zip-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168603" comment="php5-zlib-5.5.14-77.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168116" comment="php7-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154144" comment="php7 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168117" comment="php7-bcmath-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154145" comment="php7-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168118" comment="php7-bz2-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154146" comment="php7-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168119" comment="php7-calendar-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154147" comment="php7-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168120" comment="php7-ctype-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154148" comment="php7-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168121" comment="php7-curl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154149" comment="php7-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168122" comment="php7-dba-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154150" comment="php7-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168123" comment="php7-devel-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154151" comment="php7-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168124" comment="php7-dom-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154152" comment="php7-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168125" comment="php7-enchant-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154153" comment="php7-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168126" comment="php7-exif-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154154" comment="php7-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168127" comment="php7-fastcgi-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154155" comment="php7-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168128" comment="php7-fileinfo-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154156" comment="php7-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168129" comment="php7-firebird-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154157" comment="php7-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168130" comment="php7-fpm-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154158" comment="php7-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168131" comment="php7-ftp-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154159" comment="php7-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168132" comment="php7-gd-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154160" comment="php7-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168133" comment="php7-gettext-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154161" comment="php7-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168134" comment="php7-gmp-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154162" comment="php7-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168135" comment="php7-iconv-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154163" comment="php7-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168136" comment="php7-imap-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154164" comment="php7-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168137" comment="php7-intl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154165" comment="php7-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168138" comment="php7-json-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154166" comment="php7-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168139" comment="php7-ldap-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154167" comment="php7-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168140" comment="php7-mbstring-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154168" comment="php7-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168141" comment="php7-mcrypt-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154169" comment="php7-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168142" comment="php7-mysql-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154170" comment="php7-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168143" comment="php7-odbc-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154171" comment="php7-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168144" comment="php7-opcache-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154172" comment="php7-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168145" comment="php7-openssl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154173" comment="php7-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168146" comment="php7-pcntl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154174" comment="php7-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168147" comment="php7-pdo-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154175" comment="php7-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168148" comment="php7-pear-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154176" comment="php7-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168149" comment="php7-pear-Archive_Tar-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154177" comment="php7-pear-Archive_Tar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168150" comment="php7-pgsql-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154178" comment="php7-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168151" comment="php7-phar-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154179" comment="php7-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168152" comment="php7-posix-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154180" comment="php7-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168153" comment="php7-pspell-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154181" comment="php7-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168154" comment="php7-readline-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154182" comment="php7-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168155" comment="php7-shmop-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154183" comment="php7-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168156" comment="php7-snmp-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154184" comment="php7-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168157" comment="php7-soap-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154185" comment="php7-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168158" comment="php7-sockets-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154186" comment="php7-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168159" comment="php7-sqlite-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154187" comment="php7-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168160" comment="php7-sysvmsg-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154188" comment="php7-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168161" comment="php7-sysvsem-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154189" comment="php7-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168162" comment="php7-sysvshm-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154190" comment="php7-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168163" comment="php7-tidy-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154191" comment="php7-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168164" comment="php7-tokenizer-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154192" comment="php7-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168165" comment="php7-wddx-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154193" comment="php7-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168166" comment="php7-xmlreader-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154194" comment="php7-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168167" comment="php7-xmlrpc-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154195" comment="php7-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168168" comment="php7-xmlwriter-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154196" comment="php7-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168169" comment="php7-xsl-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154197" comment="php7-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168170" comment="php7-zip-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154198" comment="php7-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168171" comment="php7-zlib-7.0.7-14.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154199" comment="php7-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179233" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9233</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9233" source="CVE"/>
    <description>
    XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9233.html">CVE-2017-9233</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 983216</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1047236</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1073350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1073350</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9233">SUSE bug 1073350</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162480" comment="expat-2.1.0-21.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151330" comment="expat is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162539" comment="libexpat-devel-2.1.0-21.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151331" comment="libexpat-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009163116" comment="libexpat-devel-32bit-2.1.0-21.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151785" comment="libexpat-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162481" comment="libexpat1-2.1.0-21.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151332" comment="libexpat1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162482" comment="libexpat1-32bit-2.1.0-21.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151333" comment="libexpat1-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179242" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9242</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9242" source="CVE"/>
    <description>
    The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to cause a denial of service (system crash) via crafted system calls.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9242.html">CVE-2017-9242</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1042892</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9242">SUSE bug 1041431</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157229" comment="kernel-debug-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151957" comment="kernel-debug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157230" comment="kernel-debug-base-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151958" comment="kernel-debug-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157231" comment="kernel-debug-devel-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151959" comment="kernel-debug-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157232" comment="kernel-default-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151354" comment="kernel-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157233" comment="kernel-default-base-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151960" comment="kernel-default-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157234" comment="kernel-default-devel-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151355" comment="kernel-default-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157235" comment="kernel-devel-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151356" comment="kernel-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157236" comment="kernel-docs-4.4.72-18.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151357" comment="kernel-docs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157237" comment="kernel-docs-html-4.4.72-18.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151961" comment="kernel-docs-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157238" comment="kernel-docs-pdf-4.4.72-18.12.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151962" comment="kernel-docs-pdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157239" comment="kernel-macros-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151358" comment="kernel-macros is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157240" comment="kernel-obs-build-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151966" comment="kernel-obs-build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157241" comment="kernel-obs-qa-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151967" comment="kernel-obs-qa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157242" comment="kernel-source-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151360" comment="kernel-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157243" comment="kernel-source-vanilla-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151974" comment="kernel-source-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157244" comment="kernel-syms-4.4.72-18.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151361" comment="kernel-syms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157245" comment="kernel-vanilla-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151975" comment="kernel-vanilla is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157246" comment="kernel-vanilla-base-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154129" comment="kernel-vanilla-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157247" comment="kernel-vanilla-devel-4.4.72-18.12.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151976" comment="kernel-vanilla-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179261" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9261</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9261" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9261.html">CVE-2017-9261</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9261">SUSE bug 1043354</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170211" comment="GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170212" comment="GraphicsMagick-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170213" comment="libGraphicsMagick++-Q16-12-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170214" comment="libGraphicsMagick++-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170215" comment="libGraphicsMagick-Q16-3-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170216" comment="libGraphicsMagick3-config-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170217" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170218" comment="perl-GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179262" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9262</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9262" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9262.html">CVE-2017-9262</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9262">SUSE bug 1043353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9262">SUSE bug 1043353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9262">SUSE bug 1043353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9262">SUSE bug 1043353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9262">SUSE bug 1043353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9262">SUSE bug 1043353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9262">SUSE bug 1043353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9262">SUSE bug 1043353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9262">SUSE bug 1043353</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9262">SUSE bug 1043353</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170211" comment="GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152591" comment="GraphicsMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170212" comment="GraphicsMagick-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151256" comment="GraphicsMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170213" comment="libGraphicsMagick++-Q16-12-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154127" comment="libGraphicsMagick++-Q16-12 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170214" comment="libGraphicsMagick++-devel-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152594" comment="libGraphicsMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170215" comment="libGraphicsMagick-Q16-3-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151257" comment="libGraphicsMagick-Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170216" comment="libGraphicsMagick3-config-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151258" comment="libGraphicsMagick3-config is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170217" comment="libGraphicsMagickWand-Q16-2-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151259" comment="libGraphicsMagickWand-Q16-2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170218" comment="perl-GraphicsMagick-1.3.25-11.63.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152600" comment="perl-GraphicsMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179269" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9269</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9269" source="CVE"/>
    <description>
    In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories with potential malicious content.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9269.html">CVE-2017-9269</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1038984</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9269">SUSE bug 1045735</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161657" comment="libzypp-16.15.2-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161722" comment="libzypp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161658" comment="libzypp-devel-16.15.2-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161723" comment="libzypp-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161659" comment="libzypp-devel-doc-16.15.2-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161724" comment="libzypp-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161660" comment="zypper-1.13.30-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161725" comment="zypper is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161661" comment="zypper-aptitude-1.13.30-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161726" comment="zypper-aptitude is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161662" comment="zypper-log-1.13.30-5.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161727" comment="zypper-log is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179274" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9274</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9274" source="CVE"/>
    <description>
    A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.
    </description>
<advisory from="security@suse.de">
<severity>Critical</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9274.html">CVE-2017-9274</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9274">SUSE bug 938556</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168196" comment="build-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168197" comment="build is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168198" comment="build-initvm-i586-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168199" comment="build-initvm-i586 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168200" comment="build-initvm-x86_64-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168201" comment="build-initvm-x86_64 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168202" comment="build-mkbaselibs-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168203" comment="build-mkbaselibs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168204" comment="build-mkdrpms-20171128-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009168205" comment="build-mkdrpms is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168206" comment="obs-service-source_validator-0.7-13.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153664" comment="obs-service-source_validator is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009168207" comment="osc-0.162.0-7.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151686" comment="osc is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179300" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9300</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9300" source="CVE"/>
    <description>
    plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted FLAC file.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9300.html">CVE-2017-9300</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9300">SUSE bug 1041907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9300">SUSE bug 1041907</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9300">SUSE bug 1041907</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164804" comment="libvlc5-2.2.6-32.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153021" comment="libvlc5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164805" comment="libvlccore8-2.2.6-32.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153022" comment="libvlccore8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164806" comment="vlc-2.2.6-32.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153023" comment="vlc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164807" comment="vlc-codec-gstreamer-2.2.6-32.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164833" comment="vlc-codec-gstreamer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164808" comment="vlc-devel-2.2.6-32.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153024" comment="vlc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164809" comment="vlc-lang-2.2.6-32.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009164834" comment="vlc-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164810" comment="vlc-noX-2.2.6-32.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153026" comment="vlc-noX is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164811" comment="vlc-qt-2.2.6-32.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153028" comment="vlc-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179324" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9324</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9324" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9324" source="CVE"/>
    <description>
    In Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain administrative privileges / full access. Afterward, all system settings can be read and changed. The URLs in question contain index.pl?Action=Installer with ;Subaction=Intro or ;Subaction=Start or ;Subaction=System appended at the end.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9324.html">CVE-2017-9324</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9324">SUSE bug 1043086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9324">SUSE bug 1043244</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9324">SUSE bug 1043086</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9324">SUSE bug 1043086</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156820" comment="otrs-3.3.17-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154272" comment="otrs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156821" comment="otrs-doc-3.3.17-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154273" comment="otrs-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156822" comment="otrs-itsm-3.3.14-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154274" comment="otrs-itsm is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179330" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9330</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9330" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9330" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9330.html">CVE-2017-9330</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9330">SUSE bug 1042159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9330">SUSE bug 1042160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9330">SUSE bug 1042159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9330">SUSE bug 1042160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9330">SUSE bug 1043157</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9330">SUSE bug 1042159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9330">SUSE bug 1042160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9330">SUSE bug 1042160</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9330">SUSE bug 1042159</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9330">SUSE bug 1042160</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158417" comment="xen-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151587" comment="xen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158418" comment="xen-devel-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151929" comment="xen-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158419" comment="xen-doc-html-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151588" comment="xen-doc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158420" comment="xen-libs-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151590" comment="xen-libs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158421" comment="xen-libs-32bit-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151930" comment="xen-libs-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158422" comment="xen-tools-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151591" comment="xen-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158423" comment="xen-tools-domU-4.7.2_06-11.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151592" comment="xen-tools-domU is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179343" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9343</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9343" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by validating an IPv4 address.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9343.html">CVE-2017-9343</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1042309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1042331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1042309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1042309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1042309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1042309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1042309</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1042331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9343">SUSE bug 1077080</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156785" comment="wireshark-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156786" comment="wireshark-devel-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156787" comment="wireshark-ui-gtk-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156788" comment="wireshark-ui-qt-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179344" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9344</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9344" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero. This was addressed in epan/dissectors/packet-btl2cap.c by validating an interval value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9344.html">CVE-2017-9344</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9344">SUSE bug 1042298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9344">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9344">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9344">SUSE bug 1042331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9344">SUSE bug 1042298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9344">SUSE bug 1042298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9344">SUSE bug 1042298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9344">SUSE bug 1042298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9344">SUSE bug 1042298</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9344">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9344">SUSE bug 1042331</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156785" comment="wireshark-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156786" comment="wireshark-devel-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156787" comment="wireshark-ui-gtk-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156788" comment="wireshark-ui-qt-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179345" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9345</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9345" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9345.html">CVE-2017-9345</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9345">SUSE bug 1042300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9345">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9345">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9345">SUSE bug 1042331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9345">SUSE bug 1042300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9345">SUSE bug 1042300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9345">SUSE bug 1042300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9345">SUSE bug 1042300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9345">SUSE bug 1042300</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9345">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9345">SUSE bug 1042331</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156785" comment="wireshark-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156786" comment="wireshark-devel-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156787" comment="wireshark-ui-gtk-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156788" comment="wireshark-ui-qt-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179346" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9346</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9346" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-slsk.c by making loop bounds more explicit.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9346.html">CVE-2017-9346</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9346">SUSE bug 1042301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9346">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9346">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9346">SUSE bug 1042331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9346">SUSE bug 1042301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9346">SUSE bug 1042301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9346">SUSE bug 1042301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9346">SUSE bug 1042301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9346">SUSE bug 1042301</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9346">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9346">SUSE bug 1042331</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156785" comment="wireshark-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156786" comment="wireshark-devel-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156787" comment="wireshark-ui-gtk-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156788" comment="wireshark-ui-qt-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179347" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9347</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9347" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9347.html">CVE-2017-9347</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9347">SUSE bug 1042308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9347">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9347">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9347">SUSE bug 1042308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9347">SUSE bug 1042308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9347">SUSE bug 1042308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9347">SUSE bug 1042308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9347">SUSE bug 1042308</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9347">SUSE bug 1042330</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156785" comment="wireshark-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156786" comment="wireshark-devel-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156787" comment="wireshark-ui-gtk-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156788" comment="wireshark-ui-qt-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179348" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9348</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9348" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9348.html">CVE-2017-9348</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9348">SUSE bug 1042303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9348">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9348">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9348">SUSE bug 1042303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9348">SUSE bug 1042303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9348">SUSE bug 1042303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9348">SUSE bug 1042303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9348">SUSE bug 1042303</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9348">SUSE bug 1042330</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156785" comment="wireshark-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156786" comment="wireshark-devel-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156787" comment="wireshark-ui-gtk-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156788" comment="wireshark-ui-qt-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179349" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9349</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9349" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9349" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop. This was addressed in epan/dissectors/packet-dcm.c by validating a length value.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9349.html">CVE-2017-9349</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9349">SUSE bug 1042305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9349">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9349">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9349">SUSE bug 1042331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9349">SUSE bug 1042305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9349">SUSE bug 1042305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9349">SUSE bug 1042305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9349">SUSE bug 1042305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9349">SUSE bug 1042305</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9349">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9349">SUSE bug 1042331</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156785" comment="wireshark-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156786" comment="wireshark-devel-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156787" comment="wireshark-ui-gtk-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156788" comment="wireshark-ui-qt-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179350" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9350</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9350" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9350" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by checking for a negative length.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9350.html">CVE-2017-9350</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1042299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1042331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1042299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1042299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1042299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1042299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1042299</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1042331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1049255</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9350">SUSE bug 1049621</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159468" comment="wireshark-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159469" comment="wireshark-devel-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159470" comment="wireshark-ui-gtk-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159471" comment="wireshark-ui-qt-2.2.8-14.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179351" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9351</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9351" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9351.html">CVE-2017-9351</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9351">SUSE bug 1042302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9351">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9351">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9351">SUSE bug 1042331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9351">SUSE bug 1042302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9351">SUSE bug 1042302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9351">SUSE bug 1042302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9351">SUSE bug 1042302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9351">SUSE bug 1042302</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9351">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9351">SUSE bug 1042331</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156785" comment="wireshark-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156786" comment="wireshark-devel-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156787" comment="wireshark-ui-gtk-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156788" comment="wireshark-ui-qt-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179352" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9352</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9352" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by ensuring that backwards parsing cannot occur.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9352.html">CVE-2017-9352</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9352">SUSE bug 1042304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9352">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9352">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9352">SUSE bug 1042331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9352">SUSE bug 1042304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9352">SUSE bug 1042304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9352">SUSE bug 1042304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9352">SUSE bug 1042304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9352">SUSE bug 1042304</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9352">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9352">SUSE bug 1042331</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156785" comment="wireshark-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156786" comment="wireshark-devel-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156787" comment="wireshark-ui-gtk-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156788" comment="wireshark-ui-qt-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179353" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9353</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9353" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by validating an IPv6 address.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9353.html">CVE-2017-9353</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9353">SUSE bug 1042306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9353">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9353">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9353">SUSE bug 1042306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9353">SUSE bug 1042306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9353">SUSE bug 1042306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9353">SUSE bug 1042306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9353">SUSE bug 1042306</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9353">SUSE bug 1042330</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156785" comment="wireshark-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156786" comment="wireshark-devel-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156787" comment="wireshark-ui-gtk-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156788" comment="wireshark-ui-qt-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179354" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9354</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9354" source="CVE"/>
    <description>
    In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash. This was addressed in epan/dissectors/packet-rgmp.c by validating an IPv4 address.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9354.html">CVE-2017-9354</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9354">SUSE bug 1042307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9354">SUSE bug 1042324</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9354">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9354">SUSE bug 1042331</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9354">SUSE bug 1042307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9354">SUSE bug 1042307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9354">SUSE bug 1042307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9354">SUSE bug 1042307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9354">SUSE bug 1042307</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9354">SUSE bug 1042330</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9354">SUSE bug 1042331</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156785" comment="wireshark-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156786" comment="wireshark-devel-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156787" comment="wireshark-ui-gtk-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156788" comment="wireshark-ui-qt-2.2.7-14.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179373" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9373</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9373" source="CVE"/>
    <description>
    Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9373.html">CVE-2017-9373</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9373">SUSE bug 1042801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9373">SUSE bug 1042801</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9373">SUSE bug 1042801</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179374" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9374</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9374" source="CVE"/>
    <description>
    Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9374.html">CVE-2017-9374</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9374">SUSE bug 1043073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9374">SUSE bug 1043074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9374">SUSE bug 1043073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9374">SUSE bug 1043074</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9374">SUSE bug 1043073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9374">SUSE bug 1043073</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9374">SUSE bug 1043074</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179375" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9375</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9375" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9375.html">CVE-2017-9375</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9375">SUSE bug 1042800</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9375">SUSE bug 1042800</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9375">SUSE bug 1042800</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179403" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9403</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9403" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9403" source="CVE"/>
    <description>
    In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9403.html">CVE-2017-9403</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9403">SUSE bug 1042805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9403">SUSE bug 1042805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9403">SUSE bug 1042805</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9403">SUSE bug 1042805</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179404" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9404</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9404" source="CVE"/>
    <description>
    In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9404.html">CVE-2017-9404</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9404">SUSE bug 1042804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9404">SUSE bug 1042804</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9404">SUSE bug 1042804</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164954" comment="libtiff-devel-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151316" comment="libtiff-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164955" comment="libtiff-devel-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152222" comment="libtiff-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164956" comment="libtiff5-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151317" comment="libtiff5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164957" comment="libtiff5-32bit-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151318" comment="libtiff5-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164958" comment="tiff-4.0.8-17.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151319" comment="tiff is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179406" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9406</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406" source="CVE"/>
    <description>
    In Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9406.html">CVE-2017-9406</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9406">SUSE bug 1042803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9406">SUSE bug 1042803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9406">SUSE bug 1042803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9406">SUSE bug 1042803</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9406">SUSE bug 1042803</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161472" comment="libpoppler-cpp0-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161473" comment="libpoppler-cpp0-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161474" comment="libpoppler-cpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161475" comment="libpoppler-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161476" comment="libpoppler-glib-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153236" comment="libpoppler-glib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161477" comment="libpoppler-glib8-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161478" comment="libpoppler-glib8-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161479" comment="libpoppler-glib8-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161480" comment="libpoppler-qt4-4-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161481" comment="libpoppler-qt4-4-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161482" comment="libpoppler-qt4-4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161483" comment="libpoppler-qt4-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153237" comment="libpoppler-qt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161484" comment="libpoppler-qt5-1-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161485" comment="libpoppler-qt5-1-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161486" comment="libpoppler-qt5-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161487" comment="libpoppler-qt5-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161488" comment="libpoppler60-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161489" comment="libpoppler60-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161490" comment="libpoppler60-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161491" comment="poppler-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153240" comment="poppler is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161492" comment="poppler-qt-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153241" comment="poppler-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161493" comment="poppler-qt5-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153242" comment="poppler-qt5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161494" comment="poppler-tools-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161495" comment="typelib-1_0-Poppler-0_18-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153243" comment="typelib-1_0-Poppler-0_18 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179408" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9408</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9408" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408" source="CVE"/>
    <description>
    In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9408.html">CVE-2017-9408</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9408">SUSE bug 1042802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9408">SUSE bug 1042802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9408">SUSE bug 1042802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9408">SUSE bug 1042802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9408">SUSE bug 1042802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9408">SUSE bug 1042802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9408">SUSE bug 1042802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9408">SUSE bug 1042802</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9408">SUSE bug 1042802</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161472" comment="libpoppler-cpp0-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161473" comment="libpoppler-cpp0-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161474" comment="libpoppler-cpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161475" comment="libpoppler-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161476" comment="libpoppler-glib-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153236" comment="libpoppler-glib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161477" comment="libpoppler-glib8-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161478" comment="libpoppler-glib8-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161479" comment="libpoppler-glib8-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161480" comment="libpoppler-qt4-4-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161481" comment="libpoppler-qt4-4-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161482" comment="libpoppler-qt4-4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161483" comment="libpoppler-qt4-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153237" comment="libpoppler-qt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161484" comment="libpoppler-qt5-1-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161485" comment="libpoppler-qt5-1-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161486" comment="libpoppler-qt5-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161487" comment="libpoppler-qt5-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161488" comment="libpoppler60-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161489" comment="libpoppler60-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161490" comment="libpoppler60-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161491" comment="poppler-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153240" comment="poppler is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161492" comment="poppler-qt-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153241" comment="poppler-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161493" comment="poppler-qt5-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153242" comment="poppler-qt5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161494" comment="poppler-tools-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161495" comment="typelib-1_0-Poppler-0_18-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153243" comment="typelib-1_0-Poppler-0_18 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179409" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9409</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9409" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9409" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9409.html">CVE-2017-9409</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9409">SUSE bug 1042948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9409">SUSE bug 1042948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9409">SUSE bug 1042948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9409">SUSE bug 1042948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9409">SUSE bug 1042948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9409">SUSE bug 1042948</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9409">SUSE bug 1042948</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169709" comment="ImageMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169710" comment="ImageMagick-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169711" comment="ImageMagick-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169712" comment="ImageMagick-doc-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169713" comment="ImageMagick-extra-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169714" comment="libMagick++-6_Q16-3-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169715" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169716" comment="libMagick++-devel-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169717" comment="libMagick++-devel-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169718" comment="libMagickCore-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169719" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169720" comment="libMagickWand-6_Q16-1-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169721" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169722" comment="perl-PerlMagick-6.8.8.1-30.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179433" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9433</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9433" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9433" source="CVE"/>
    <description>
    Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9433.html">CVE-2017-9433</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9433">SUSE bug 1042828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9433">SUSE bug 1042828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9433">SUSE bug 1042828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9433">SUSE bug 1042828</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9433">SUSE bug 1042828</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158482" comment="libixion-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153320" comment="libixion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158483" comment="libixion-0_12-0-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158751" comment="libixion-0_12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158484" comment="libixion-devel-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153322" comment="libixion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158485" comment="libixion-python3-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153323" comment="libixion-python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158486" comment="libixion-tools-0.12.1-8.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153324" comment="libixion-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158487" comment="libmwaw-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158752" comment="libmwaw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158488" comment="libmwaw-0_3-3-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158753" comment="libmwaw-0_3-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158489" comment="libmwaw-devel-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158754" comment="libmwaw-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158490" comment="libmwaw-devel-doc-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158755" comment="libmwaw-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158491" comment="libmwaw-tools-0.3.11-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158756" comment="libmwaw-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158492" comment="liborcus-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153325" comment="liborcus is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158493" comment="liborcus-0_12-0-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158757" comment="liborcus-0_12-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158494" comment="liborcus-devel-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153327" comment="liborcus-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158495" comment="liborcus-python3-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153328" comment="liborcus-python3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158496" comment="liborcus-tools-0.12.1-9.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153329" comment="liborcus-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164015" comment="libreoffice-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151462" comment="libreoffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164016" comment="libreoffice-base-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151463" comment="libreoffice-base is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164017" comment="libreoffice-base-drivers-mysql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151464" comment="libreoffice-base-drivers-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164018" comment="libreoffice-base-drivers-postgresql-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153330" comment="libreoffice-base-drivers-postgresql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164019" comment="libreoffice-branding-upstream-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151465" comment="libreoffice-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164020" comment="libreoffice-calc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151466" comment="libreoffice-calc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164021" comment="libreoffice-calc-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151467" comment="libreoffice-calc-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164022" comment="libreoffice-draw-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151468" comment="libreoffice-draw is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164023" comment="libreoffice-filters-optional-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151469" comment="libreoffice-filters-optional is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164024" comment="libreoffice-gdb-pretty-printers-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153331" comment="libreoffice-gdb-pretty-printers is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164025" comment="libreoffice-glade-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153332" comment="libreoffice-glade is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164026" comment="libreoffice-gnome-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151470" comment="libreoffice-gnome is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164027" comment="libreoffice-gtk3-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153333" comment="libreoffice-gtk3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164028" comment="libreoffice-icon-theme-breeze-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151471" comment="libreoffice-icon-theme-breeze is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164029" comment="libreoffice-icon-theme-galaxy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151472" comment="libreoffice-icon-theme-galaxy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164030" comment="libreoffice-icon-theme-hicontrast-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151473" comment="libreoffice-icon-theme-hicontrast is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164031" comment="libreoffice-icon-theme-oxygen-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151474" comment="libreoffice-icon-theme-oxygen is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164032" comment="libreoffice-icon-theme-sifr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151475" comment="libreoffice-icon-theme-sifr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164033" comment="libreoffice-icon-theme-tango-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151476" comment="libreoffice-icon-theme-tango is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164034" comment="libreoffice-impress-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151477" comment="libreoffice-impress is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164035" comment="libreoffice-kde4-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151478" comment="libreoffice-kde4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164036" comment="libreoffice-l10n-af-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153334" comment="libreoffice-l10n-af is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164037" comment="libreoffice-l10n-ar-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153335" comment="libreoffice-l10n-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164038" comment="libreoffice-l10n-as-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153336" comment="libreoffice-l10n-as is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164039" comment="libreoffice-l10n-bg-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153337" comment="libreoffice-l10n-bg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164040" comment="libreoffice-l10n-bn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153338" comment="libreoffice-l10n-bn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164041" comment="libreoffice-l10n-br-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153339" comment="libreoffice-l10n-br is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164042" comment="libreoffice-l10n-ca-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153340" comment="libreoffice-l10n-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164043" comment="libreoffice-l10n-cs-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151479" comment="libreoffice-l10n-cs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164044" comment="libreoffice-l10n-cy-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153341" comment="libreoffice-l10n-cy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164045" comment="libreoffice-l10n-da-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151480" comment="libreoffice-l10n-da is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164046" comment="libreoffice-l10n-de-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151481" comment="libreoffice-l10n-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164047" comment="libreoffice-l10n-dz-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153342" comment="libreoffice-l10n-dz is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164048" comment="libreoffice-l10n-el-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151482" comment="libreoffice-l10n-el is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164049" comment="libreoffice-l10n-en-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151483" comment="libreoffice-l10n-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164050" comment="libreoffice-l10n-es-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151484" comment="libreoffice-l10n-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164051" comment="libreoffice-l10n-et-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153343" comment="libreoffice-l10n-et is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164052" comment="libreoffice-l10n-eu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153344" comment="libreoffice-l10n-eu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164053" comment="libreoffice-l10n-fa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153345" comment="libreoffice-l10n-fa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164054" comment="libreoffice-l10n-fi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153346" comment="libreoffice-l10n-fi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164055" comment="libreoffice-l10n-fr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151485" comment="libreoffice-l10n-fr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164056" comment="libreoffice-l10n-ga-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153347" comment="libreoffice-l10n-ga is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164057" comment="libreoffice-l10n-gl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153348" comment="libreoffice-l10n-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164058" comment="libreoffice-l10n-gu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153349" comment="libreoffice-l10n-gu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164059" comment="libreoffice-l10n-he-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153350" comment="libreoffice-l10n-he is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164060" comment="libreoffice-l10n-hi-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153351" comment="libreoffice-l10n-hi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164061" comment="libreoffice-l10n-hr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153352" comment="libreoffice-l10n-hr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164062" comment="libreoffice-l10n-hu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151486" comment="libreoffice-l10n-hu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164063" comment="libreoffice-l10n-it-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151487" comment="libreoffice-l10n-it is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164064" comment="libreoffice-l10n-ja-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151488" comment="libreoffice-l10n-ja is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164065" comment="libreoffice-l10n-kk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153353" comment="libreoffice-l10n-kk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164066" comment="libreoffice-l10n-kn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153354" comment="libreoffice-l10n-kn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164067" comment="libreoffice-l10n-ko-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153355" comment="libreoffice-l10n-ko is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164068" comment="libreoffice-l10n-lt-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153356" comment="libreoffice-l10n-lt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164069" comment="libreoffice-l10n-lv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153357" comment="libreoffice-l10n-lv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164070" comment="libreoffice-l10n-mai-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153358" comment="libreoffice-l10n-mai is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164071" comment="libreoffice-l10n-ml-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153359" comment="libreoffice-l10n-ml is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164072" comment="libreoffice-l10n-mr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153360" comment="libreoffice-l10n-mr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164073" comment="libreoffice-l10n-nb-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153361" comment="libreoffice-l10n-nb is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164074" comment="libreoffice-l10n-nl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153362" comment="libreoffice-l10n-nl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164075" comment="libreoffice-l10n-nn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153363" comment="libreoffice-l10n-nn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164076" comment="libreoffice-l10n-nr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153364" comment="libreoffice-l10n-nr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164077" comment="libreoffice-l10n-nso-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153365" comment="libreoffice-l10n-nso is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164078" comment="libreoffice-l10n-or-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153366" comment="libreoffice-l10n-or is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164079" comment="libreoffice-l10n-pa-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153367" comment="libreoffice-l10n-pa is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164080" comment="libreoffice-l10n-pl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151489" comment="libreoffice-l10n-pl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164081" comment="libreoffice-l10n-pt_BR-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158758" comment="libreoffice-l10n-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164082" comment="libreoffice-l10n-pt_PT-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158759" comment="libreoffice-l10n-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164083" comment="libreoffice-l10n-ro-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153370" comment="libreoffice-l10n-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164084" comment="libreoffice-l10n-ru-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151490" comment="libreoffice-l10n-ru is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164085" comment="libreoffice-l10n-si-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153371" comment="libreoffice-l10n-si is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164086" comment="libreoffice-l10n-sk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153372" comment="libreoffice-l10n-sk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164087" comment="libreoffice-l10n-sl-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153373" comment="libreoffice-l10n-sl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164088" comment="libreoffice-l10n-sr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153374" comment="libreoffice-l10n-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164089" comment="libreoffice-l10n-ss-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153375" comment="libreoffice-l10n-ss is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164090" comment="libreoffice-l10n-st-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153376" comment="libreoffice-l10n-st is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164091" comment="libreoffice-l10n-sv-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153377" comment="libreoffice-l10n-sv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164092" comment="libreoffice-l10n-ta-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153378" comment="libreoffice-l10n-ta is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164093" comment="libreoffice-l10n-te-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153379" comment="libreoffice-l10n-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164094" comment="libreoffice-l10n-th-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153380" comment="libreoffice-l10n-th is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164095" comment="libreoffice-l10n-tn-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153381" comment="libreoffice-l10n-tn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164096" comment="libreoffice-l10n-tr-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153382" comment="libreoffice-l10n-tr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164097" comment="libreoffice-l10n-ts-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153383" comment="libreoffice-l10n-ts is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164098" comment="libreoffice-l10n-uk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153384" comment="libreoffice-l10n-uk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164099" comment="libreoffice-l10n-ve-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153385" comment="libreoffice-l10n-ve is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164100" comment="libreoffice-l10n-xh-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153386" comment="libreoffice-l10n-xh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164101" comment="libreoffice-l10n-zh_CN-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158760" comment="libreoffice-l10n-zh_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164102" comment="libreoffice-l10n-zh_TW-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158761" comment="libreoffice-l10n-zh_TW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164103" comment="libreoffice-l10n-zu-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153389" comment="libreoffice-l10n-zu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164104" comment="libreoffice-mailmerge-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151491" comment="libreoffice-mailmerge is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164105" comment="libreoffice-math-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151492" comment="libreoffice-math is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164106" comment="libreoffice-officebean-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153390" comment="libreoffice-officebean is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164107" comment="libreoffice-pyuno-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151493" comment="libreoffice-pyuno is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164108" comment="libreoffice-sdk-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153391" comment="libreoffice-sdk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164109" comment="libreoffice-sdk-doc-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153392" comment="libreoffice-sdk-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164110" comment="libreoffice-writer-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151494" comment="libreoffice-writer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164111" comment="libreoffice-writer-extensions-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151495" comment="libreoffice-writer-extensions is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164112" comment="libreofficekit-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153393" comment="libreofficekit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164113" comment="libreofficekit-devel-5.3.5.2-18.9.4 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153394" comment="libreofficekit-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158596" comment="libstaroffice-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158762" comment="libstaroffice is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158597" comment="libstaroffice-0_0-0-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158763" comment="libstaroffice-0_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158598" comment="libstaroffice-devel-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158764" comment="libstaroffice-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158599" comment="libstaroffice-devel-doc-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158765" comment="libstaroffice-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158600" comment="libstaroffice-tools-0.0.3-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158766" comment="libstaroffice-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158236" comment="libzmf-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158767" comment="libzmf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158237" comment="libzmf-0_0-0-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158768" comment="libzmf-0_0-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158601" comment="libzmf-devel-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158769" comment="libzmf-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158602" comment="libzmf-devel-doc-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158770" comment="libzmf-devel-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158603" comment="libzmf-tools-0.0.1-2.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158771" comment="libzmf-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158604" comment="myspell-af_NA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153406" comment="myspell-af_NA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158605" comment="myspell-af_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153407" comment="myspell-af_ZA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158606" comment="myspell-an-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153408" comment="myspell-an is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158607" comment="myspell-an_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153409" comment="myspell-an_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158608" comment="myspell-ar-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153410" comment="myspell-ar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158609" comment="myspell-ar_AE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153411" comment="myspell-ar_AE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158610" comment="myspell-ar_BH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153412" comment="myspell-ar_BH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158611" comment="myspell-ar_DZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153413" comment="myspell-ar_DZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158612" comment="myspell-ar_EG-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153414" comment="myspell-ar_EG is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158613" comment="myspell-ar_IQ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153415" comment="myspell-ar_IQ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158614" comment="myspell-ar_JO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153416" comment="myspell-ar_JO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158615" comment="myspell-ar_KW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153417" comment="myspell-ar_KW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158616" comment="myspell-ar_LB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153418" comment="myspell-ar_LB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158617" comment="myspell-ar_LY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153419" comment="myspell-ar_LY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158618" comment="myspell-ar_MA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153420" comment="myspell-ar_MA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158619" comment="myspell-ar_OM-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153421" comment="myspell-ar_OM is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158620" comment="myspell-ar_QA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153422" comment="myspell-ar_QA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158621" comment="myspell-ar_SA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153423" comment="myspell-ar_SA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158622" comment="myspell-ar_SD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153424" comment="myspell-ar_SD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158623" comment="myspell-ar_SY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153425" comment="myspell-ar_SY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158624" comment="myspell-ar_TN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153426" comment="myspell-ar_TN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158625" comment="myspell-ar_YE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153427" comment="myspell-ar_YE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158626" comment="myspell-be_BY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153428" comment="myspell-be_BY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158627" comment="myspell-bg_BG-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153429" comment="myspell-bg_BG is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158628" comment="myspell-bn_BD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153430" comment="myspell-bn_BD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158629" comment="myspell-bn_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153431" comment="myspell-bn_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158630" comment="myspell-bo-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158772" comment="myspell-bo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158631" comment="myspell-bo_CN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158773" comment="myspell-bo_CN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158632" comment="myspell-bo_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009158774" comment="myspell-bo_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158633" comment="myspell-br_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153432" comment="myspell-br_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158634" comment="myspell-bs-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153433" comment="myspell-bs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158635" comment="myspell-bs_BA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153434" comment="myspell-bs_BA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158636" comment="myspell-ca-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153435" comment="myspell-ca is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158637" comment="myspell-ca_AD-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153436" comment="myspell-ca_AD is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158638" comment="myspell-ca_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153437" comment="myspell-ca_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158639" comment="myspell-ca_ES_valencia-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153438" comment="myspell-ca_ES_valencia is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158640" comment="myspell-ca_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153439" comment="myspell-ca_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158641" comment="myspell-ca_IT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153440" comment="myspell-ca_IT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158642" comment="myspell-cs_CZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153441" comment="myspell-cs_CZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158643" comment="myspell-da_DK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153442" comment="myspell-da_DK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158644" comment="myspell-de-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153443" comment="myspell-de is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158645" comment="myspell-de_AT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153444" comment="myspell-de_AT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158646" comment="myspell-de_CH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153445" comment="myspell-de_CH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158647" comment="myspell-de_DE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153446" comment="myspell-de_DE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158648" comment="myspell-dictionaries-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153447" comment="myspell-dictionaries is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158649" comment="myspell-el_GR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153448" comment="myspell-el_GR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158650" comment="myspell-en-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153449" comment="myspell-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158651" comment="myspell-en_AU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153450" comment="myspell-en_AU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158652" comment="myspell-en_BS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153451" comment="myspell-en_BS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158653" comment="myspell-en_BZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153452" comment="myspell-en_BZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158654" comment="myspell-en_CA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153453" comment="myspell-en_CA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158655" comment="myspell-en_GB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153454" comment="myspell-en_GB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158656" comment="myspell-en_GH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153455" comment="myspell-en_GH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158657" comment="myspell-en_IE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153456" comment="myspell-en_IE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158658" comment="myspell-en_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153457" comment="myspell-en_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158659" comment="myspell-en_JM-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153458" comment="myspell-en_JM is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158660" comment="myspell-en_MW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153459" comment="myspell-en_MW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158661" comment="myspell-en_NA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153460" comment="myspell-en_NA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158662" comment="myspell-en_NZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153461" comment="myspell-en_NZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158663" comment="myspell-en_PH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153462" comment="myspell-en_PH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158664" comment="myspell-en_TT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153463" comment="myspell-en_TT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158665" comment="myspell-en_US-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153464" comment="myspell-en_US is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158666" comment="myspell-en_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153465" comment="myspell-en_ZA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158667" comment="myspell-en_ZW-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153466" comment="myspell-en_ZW is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158668" comment="myspell-es-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153467" comment="myspell-es is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158669" comment="myspell-es_AR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153468" comment="myspell-es_AR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158670" comment="myspell-es_BO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153469" comment="myspell-es_BO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158671" comment="myspell-es_CL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153470" comment="myspell-es_CL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158672" comment="myspell-es_CO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153471" comment="myspell-es_CO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158673" comment="myspell-es_CR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153472" comment="myspell-es_CR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158674" comment="myspell-es_CU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153473" comment="myspell-es_CU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158675" comment="myspell-es_DO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153474" comment="myspell-es_DO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158676" comment="myspell-es_EC-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153475" comment="myspell-es_EC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158677" comment="myspell-es_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153476" comment="myspell-es_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158678" comment="myspell-es_GT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153477" comment="myspell-es_GT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158679" comment="myspell-es_HN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153478" comment="myspell-es_HN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158680" comment="myspell-es_MX-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153479" comment="myspell-es_MX is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158681" comment="myspell-es_NI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153480" comment="myspell-es_NI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158682" comment="myspell-es_PA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153481" comment="myspell-es_PA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158683" comment="myspell-es_PE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153482" comment="myspell-es_PE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158684" comment="myspell-es_PR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153483" comment="myspell-es_PR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158685" comment="myspell-es_PY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153484" comment="myspell-es_PY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158686" comment="myspell-es_SV-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153485" comment="myspell-es_SV is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158687" comment="myspell-es_UY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153486" comment="myspell-es_UY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158688" comment="myspell-es_VE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153487" comment="myspell-es_VE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158689" comment="myspell-et_EE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153488" comment="myspell-et_EE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158690" comment="myspell-fr_BE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153489" comment="myspell-fr_BE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158691" comment="myspell-fr_CA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153490" comment="myspell-fr_CA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158692" comment="myspell-fr_CH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153491" comment="myspell-fr_CH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158693" comment="myspell-fr_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153492" comment="myspell-fr_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158694" comment="myspell-fr_LU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153493" comment="myspell-fr_LU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158695" comment="myspell-fr_MC-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153494" comment="myspell-fr_MC is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158696" comment="myspell-gd_GB-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153495" comment="myspell-gd_GB is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158697" comment="myspell-gl-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153496" comment="myspell-gl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158698" comment="myspell-gl_ES-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153497" comment="myspell-gl_ES is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158699" comment="myspell-gu_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153498" comment="myspell-gu_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158700" comment="myspell-gug-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153499" comment="myspell-gug is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158701" comment="myspell-gug_PY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153500" comment="myspell-gug_PY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158702" comment="myspell-he_IL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153501" comment="myspell-he_IL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158703" comment="myspell-hi_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153502" comment="myspell-hi_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158704" comment="myspell-hr_HR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153503" comment="myspell-hr_HR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158705" comment="myspell-hu_HU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153504" comment="myspell-hu_HU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158706" comment="myspell-is-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153505" comment="myspell-is is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158707" comment="myspell-is_IS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153506" comment="myspell-is_IS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158708" comment="myspell-it_IT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153507" comment="myspell-it_IT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158709" comment="myspell-kmr_Latn-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153508" comment="myspell-kmr_Latn is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158710" comment="myspell-kmr_Latn_SY-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153509" comment="myspell-kmr_Latn_SY is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158711" comment="myspell-kmr_Latn_TR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153510" comment="myspell-kmr_Latn_TR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158712" comment="myspell-lightproof-en-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153511" comment="myspell-lightproof-en is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158713" comment="myspell-lightproof-hu_HU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153512" comment="myspell-lightproof-hu_HU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158714" comment="myspell-lightproof-pt_BR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153513" comment="myspell-lightproof-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158715" comment="myspell-lightproof-ru_RU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153514" comment="myspell-lightproof-ru_RU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158716" comment="myspell-lo_LA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153515" comment="myspell-lo_LA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158717" comment="myspell-lt_LT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153516" comment="myspell-lt_LT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158718" comment="myspell-lv_LV-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153517" comment="myspell-lv_LV is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158719" comment="myspell-nb_NO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153518" comment="myspell-nb_NO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158720" comment="myspell-ne_NP-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153519" comment="myspell-ne_NP is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158721" comment="myspell-nl_BE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153520" comment="myspell-nl_BE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158722" comment="myspell-nl_NL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153521" comment="myspell-nl_NL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158723" comment="myspell-nn_NO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153522" comment="myspell-nn_NO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158724" comment="myspell-no-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153523" comment="myspell-no is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158725" comment="myspell-oc_FR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153524" comment="myspell-oc_FR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158726" comment="myspell-pl_PL-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153525" comment="myspell-pl_PL is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158727" comment="myspell-pt_AO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153526" comment="myspell-pt_AO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158728" comment="myspell-pt_BR-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153527" comment="myspell-pt_BR is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158729" comment="myspell-pt_PT-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153528" comment="myspell-pt_PT is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158730" comment="myspell-ro-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153529" comment="myspell-ro is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158731" comment="myspell-ro_RO-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153530" comment="myspell-ro_RO is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158732" comment="myspell-ru_RU-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153531" comment="myspell-ru_RU is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158733" comment="myspell-si_LK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153532" comment="myspell-si_LK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158734" comment="myspell-sk_SK-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153533" comment="myspell-sk_SK is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158735" comment="myspell-sl_SI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153534" comment="myspell-sl_SI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158736" comment="myspell-sr-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153535" comment="myspell-sr is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158737" comment="myspell-sr_CS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153536" comment="myspell-sr_CS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158738" comment="myspell-sr_Latn_CS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153537" comment="myspell-sr_Latn_CS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158739" comment="myspell-sr_Latn_RS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153538" comment="myspell-sr_Latn_RS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158740" comment="myspell-sr_RS-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153539" comment="myspell-sr_RS is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158741" comment="myspell-sv_FI-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153540" comment="myspell-sv_FI is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158742" comment="myspell-sv_SE-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153541" comment="myspell-sv_SE is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158743" comment="myspell-sw_TZ-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153542" comment="myspell-sw_TZ is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158744" comment="myspell-te-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153543" comment="myspell-te is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158745" comment="myspell-te_IN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153544" comment="myspell-te_IN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158746" comment="myspell-th_TH-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153545" comment="myspell-th_TH is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158747" comment="myspell-uk_UA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153546" comment="myspell-uk_UA is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158748" comment="myspell-vi-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153547" comment="myspell-vi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158749" comment="myspell-vi_VN-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153548" comment="myspell-vi_VN is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158750" comment="myspell-zu_ZA-20170511-6.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153549" comment="myspell-zu_ZA is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179439" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9439</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9439" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9439.html">CVE-2017-9439</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1042826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1042826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1042826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1042826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1042826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1042826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1042826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1042826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1042826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1042826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1042826</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9439">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162370" comment="ImageMagick-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162371" comment="ImageMagick-devel-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162372" comment="ImageMagick-devel-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162373" comment="ImageMagick-doc-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162374" comment="ImageMagick-extra-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162375" comment="libMagick++-6_Q16-3-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162376" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162377" comment="libMagick++-devel-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162378" comment="libMagick++-devel-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162379" comment="libMagickCore-6_Q16-1-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162380" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162381" comment="libMagickWand-6_Q16-1-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162382" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162383" comment="perl-PerlMagick-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179440" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9440</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9440" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9440.html">CVE-2017-9440</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9440">SUSE bug 1042812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9440">SUSE bug 1042812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9440">SUSE bug 1042812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9440">SUSE bug 1042812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9440">SUSE bug 1042812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9440">SUSE bug 1042812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9440">SUSE bug 1042812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9440">SUSE bug 1042812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9440">SUSE bug 1042812</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9440">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162370" comment="ImageMagick-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162371" comment="ImageMagick-devel-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162372" comment="ImageMagick-devel-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162373" comment="ImageMagick-doc-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162374" comment="ImageMagick-extra-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162375" comment="libMagick++-6_Q16-3-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162376" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162377" comment="libMagick++-devel-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162378" comment="libMagick++-devel-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162379" comment="libMagickCore-6_Q16-1-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162380" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162381" comment="libMagickWand-6_Q16-1-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162382" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162383" comment="perl-PerlMagick-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179462" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9462</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9462" source="CVE"/>
    <description>
    In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9462.html">CVE-2017-9462</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9462">SUSE bug 1043063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9462">SUSE bug 1043063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9462">SUSE bug 1043063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9462">SUSE bug 1043063</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9462">SUSE bug 1043063</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156817" comment="mercurial-3.8.3-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153633" comment="mercurial is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156818" comment="mercurial-lang-3.8.3-2.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153634" comment="mercurial-lang is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179468" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9468</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9468" source="CVE"/>
    <description>
    In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9468.html">CVE-2017-9468</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9468">SUSE bug 1043051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9468">SUSE bug 1043051</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9468">SUSE bug 1064540</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156741" comment="irssi-1.0.3-14.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156742" comment="irssi-devel-1.0.3-14.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179469" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9469</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9469" source="CVE"/>
    <description>
    In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9469.html">CVE-2017-9469</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9469">SUSE bug 1043052</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9469">SUSE bug 1043052</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156741" comment="irssi-1.0.3-14.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009156742" comment="irssi-devel-1.0.3-14.7.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179501" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9501</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9501" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9501" source="CVE"/>
    <description>
    In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9501.html">CVE-2017-9501</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1043289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1043289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1043289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1043289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1043289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1043289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1043289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1043289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1043289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1043289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1043289</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9501">SUSE bug 1053919</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162370" comment="ImageMagick-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162371" comment="ImageMagick-devel-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162372" comment="ImageMagick-devel-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162373" comment="ImageMagick-doc-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162374" comment="ImageMagick-extra-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162375" comment="libMagick++-6_Q16-3-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162376" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162377" comment="libMagick++-devel-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162378" comment="libMagick++-devel-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162379" comment="libMagickCore-6_Q16-1-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162380" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162381" comment="libMagickWand-6_Q16-1-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162382" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162383" comment="perl-PerlMagick-6.8.8.1-30.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179503" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9503</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9503" source="CVE"/>
    <description>
    QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.
    </description>
<advisory from="security@suse.de">
<severity>Low</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9503.html">CVE-2017-9503</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9503">SUSE bug 1043296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9503">SUSE bug 1043297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9503">SUSE bug 1043312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9503">SUSE bug 1043296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9503">SUSE bug 1043312</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9503">SUSE bug 1043297</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9503">SUSE bug 1043296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9503">SUSE bug 1043296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9503">SUSE bug 1043297</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158815" comment="qemu-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158816" comment="qemu-arm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158817" comment="qemu-block-curl-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158818" comment="qemu-block-dmg-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158819" comment="qemu-block-iscsi-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158820" comment="qemu-block-rbd-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158821" comment="qemu-block-ssh-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158822" comment="qemu-extra-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158823" comment="qemu-guest-agent-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158824" comment="qemu-ipxe-1.0.0-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158825" comment="qemu-kvm-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158826" comment="qemu-lang-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158827" comment="qemu-linux-user-2.6.2-31.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158828" comment="qemu-ppc-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158829" comment="qemu-s390-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158830" comment="qemu-seabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158831" comment="qemu-sgabios-8-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158832" comment="qemu-testsuite-2.6.2-31.3.6 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158833" comment="qemu-tools-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158834" comment="qemu-vgabios-1.9.1-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009158835" comment="qemu-x86-2.6.2-31.3.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179524" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9524</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9524" source="CVE"/>
    <description>
    The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to ensure that all initialization occurs before talking to a client in the nbd_negotiate function.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9524.html">CVE-2017-9524</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9524">SUSE bug 1043808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9524">SUSE bug 1043808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9524">SUSE bug 1043808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9524">SUSE bug 1043808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9524">SUSE bug 1043808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9524">SUSE bug 1043808</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9524">SUSE bug 1043808</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166546" comment="qemu-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151104" comment="qemu is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166547" comment="qemu-arm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151105" comment="qemu-arm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166548" comment="qemu-block-curl-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151106" comment="qemu-block-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166549" comment="qemu-block-dmg-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154081" comment="qemu-block-dmg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166550" comment="qemu-block-iscsi-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154082" comment="qemu-block-iscsi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166551" comment="qemu-block-rbd-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151107" comment="qemu-block-rbd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166552" comment="qemu-block-ssh-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154083" comment="qemu-block-ssh is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166553" comment="qemu-extra-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151108" comment="qemu-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166554" comment="qemu-guest-agent-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153019" comment="qemu-guest-agent is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166555" comment="qemu-ipxe-1.0.0-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151109" comment="qemu-ipxe is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166556" comment="qemu-kvm-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151110" comment="qemu-kvm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166557" comment="qemu-lang-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151111" comment="qemu-lang is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166558" comment="qemu-linux-user-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151112" comment="qemu-linux-user is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166559" comment="qemu-ppc-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151113" comment="qemu-ppc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166560" comment="qemu-s390-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151114" comment="qemu-s390 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166561" comment="qemu-seabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151115" comment="qemu-seabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166562" comment="qemu-sgabios-8-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151116" comment="qemu-sgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166563" comment="qemu-testsuite-2.6.2-31.9.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153020" comment="qemu-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166564" comment="qemu-tools-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151117" comment="qemu-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166565" comment="qemu-vgabios-1.9.1-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151118" comment="qemu-vgabios is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009166566" comment="qemu-x86-2.6.2-31.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151119" comment="qemu-x86 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179526" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9526</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9526" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9526" source="CVE"/>
    <description>
    In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9526.html">CVE-2017-9526</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9526">SUSE bug 1042326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9526">SUSE bug 1043777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9526">SUSE bug 1042326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9526">SUSE bug 1043777</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9526">SUSE bug 1042326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9526">SUSE bug 1042326</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9526">SUSE bug 1043777</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157561" comment="libgcrypt-1.6.1-34.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153047" comment="libgcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157562" comment="libgcrypt-cavs-1.6.1-34.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153048" comment="libgcrypt-cavs is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157563" comment="libgcrypt-devel-1.6.1-34.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151920" comment="libgcrypt-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157564" comment="libgcrypt-devel-32bit-1.6.1-34.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153049" comment="libgcrypt-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157565" comment="libgcrypt20-1.6.1-34.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151921" comment="libgcrypt20 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157566" comment="libgcrypt20-32bit-1.6.1-34.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151922" comment="libgcrypt20-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157567" comment="libgcrypt20-hmac-1.6.1-34.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153050" comment="libgcrypt20-hmac is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157568" comment="libgcrypt20-hmac-32bit-1.6.1-34.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153051" comment="libgcrypt20-hmac-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179604" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9604</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9604" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9604" source="CVE"/>
    <description>
    KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9604.html">CVE-2017-9604</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9604">SUSE bug 1044210</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157796" comment="akonadi-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157823" comment="akonadi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157810" comment="akonadi_resources-16.08.2-2.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157824" comment="akonadi_resources is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157797" comment="akregator-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157825" comment="akregator is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157811" comment="akregator5-16.08.2-2.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157826" comment="akregator5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157812" comment="blogilo5-16.08.2-2.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157827" comment="blogilo5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157798" comment="kaddressbook-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157828" comment="kaddressbook is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157813" comment="kaddressbook5-16.08.2-2.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157829" comment="kaddressbook5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157799" comment="kalarm-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157830" comment="kalarm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157814" comment="kalarm5-16.08.2-2.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157831" comment="kalarm5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157815" comment="kdepim-16.08.2-2.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157832" comment="kdepim is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157800" comment="kdepim-addons-16.08.2-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157833" comment="kdepim-addons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157801" comment="kdepim4-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157834" comment="kdepim4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157802" comment="kmail-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157835" comment="kmail is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157816" comment="kmail5-16.08.2-2.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157836" comment="kmail5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157803" comment="knode-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157837" comment="knode is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157804" comment="knotes-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157838" comment="knotes is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157817" comment="knotes5-16.08.2-2.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157839" comment="knotes5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157805" comment="kontact-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157840" comment="kontact is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157818" comment="kontact5-16.08.2-2.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157841" comment="kontact5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157806" comment="korganizer-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157842" comment="korganizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157819" comment="korganizer5-16.08.2-2.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157843" comment="korganizer5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157807" comment="ktimetracker-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157844" comment="ktimetracker is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157808" comment="ktnef-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157845" comment="ktnef is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157820" comment="ktnef5-16.08.2-2.5.3 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157846" comment="ktnef5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157809" comment="libkdepim4-4.14.10-6.5.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157847" comment="libkdepim4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157821" comment="messagelib-16.08.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157848" comment="messagelib is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009157822" comment="messagelib-devel-16.08.2-2.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009157849" comment="messagelib-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179746" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9746</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9746" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9746" source="CVE"/>
    <description>
    The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during "objdump -D" execution.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9746.html">CVE-2017-9746</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9746">SUSE bug 1044891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9746">SUSE bug 1044891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9746">SUSE bug 1044891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9746">SUSE bug 1044891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9746">SUSE bug 1044891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9746">SUSE bug 1044891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9746">SUSE bug 1044891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9746">SUSE bug 1044891</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9746">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179747" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9747</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9747" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9747" source="CVE"/>
    <description>
    The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9747.html">CVE-2017-9747</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9747">SUSE bug 1044897</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9747">SUSE bug 1044897</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9747">SUSE bug 1044897</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9747">SUSE bug 1044897</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9747">SUSE bug 1044897</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9747">SUSE bug 1044897</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9747">SUSE bug 1044897</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9747">SUSE bug 1044897</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9747">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179748" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9748</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9748" source="CVE"/>
    <description>
    The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9748.html">CVE-2017-9748</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9748">SUSE bug 1044901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9748">SUSE bug 1044901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9748">SUSE bug 1044901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9748">SUSE bug 1044901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9748">SUSE bug 1044901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9748">SUSE bug 1044901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9748">SUSE bug 1044901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9748">SUSE bug 1044901</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9748">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179750" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9750</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9750" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9750" source="CVE"/>
    <description>
    opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9750.html">CVE-2017-9750</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9750">SUSE bug 1044909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9750">SUSE bug 1044909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9750">SUSE bug 1044909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9750">SUSE bug 1044909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9750">SUSE bug 1044909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9750">SUSE bug 1044909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9750">SUSE bug 1044909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9750">SUSE bug 1044909</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9750">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179755" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9755</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9755" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9755" source="CVE"/>
    <description>
    opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9755.html">CVE-2017-9755</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9755">SUSE bug 1044925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9755">SUSE bug 1044925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9755">SUSE bug 1044925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9755">SUSE bug 1044925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9755">SUSE bug 1044925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9755">SUSE bug 1044925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9755">SUSE bug 1044925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9755">SUSE bug 1044925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9755">SUSE bug 1044925</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9755">SUSE bug 1030296</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9755">SUSE bug 1044925</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179756" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9756</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9756" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9756" source="CVE"/>
    <description>
    The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9756.html">CVE-2017-9756</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9756">SUSE bug 1044927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9756">SUSE bug 1044927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9756">SUSE bug 1044927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9756">SUSE bug 1044927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9756">SUSE bug 1044927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9756">SUSE bug 1044927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9756">SUSE bug 1044927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9756">SUSE bug 1044927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9756">SUSE bug 1044927</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9756">SUSE bug 1030296</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179765" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9765</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9765" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9765" source="CVE"/>
    <description>
    Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9765.html">CVE-2017-9765</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9765">SUSE bug 1049348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9765">SUSE bug 1049348</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9765">SUSE bug 1049348</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159472" comment="gsoap-2.8.33-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159473" comment="gsoap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159474" comment="gsoap-devel-2.8.33-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159475" comment="gsoap-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159458" comment="libgsoap-2_8_33-2.8.33-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009159476" comment="libgsoap-2_8_33 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179775" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9775</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775" source="CVE"/>
    <description>
    Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9775.html">CVE-2017-9775</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9775">SUSE bug 1045719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9775">SUSE bug 1045719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9775">SUSE bug 1045719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9775">SUSE bug 1045719</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9775">SUSE bug 1045719</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161472" comment="libpoppler-cpp0-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161473" comment="libpoppler-cpp0-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161474" comment="libpoppler-cpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161475" comment="libpoppler-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161476" comment="libpoppler-glib-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153236" comment="libpoppler-glib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161477" comment="libpoppler-glib8-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161478" comment="libpoppler-glib8-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161479" comment="libpoppler-glib8-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161480" comment="libpoppler-qt4-4-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161481" comment="libpoppler-qt4-4-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161482" comment="libpoppler-qt4-4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161483" comment="libpoppler-qt4-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153237" comment="libpoppler-qt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161484" comment="libpoppler-qt5-1-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161485" comment="libpoppler-qt5-1-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161486" comment="libpoppler-qt5-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161487" comment="libpoppler-qt5-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161488" comment="libpoppler60-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161489" comment="libpoppler60-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161490" comment="libpoppler60-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161491" comment="poppler-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153240" comment="poppler is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161492" comment="poppler-qt-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153241" comment="poppler-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161493" comment="poppler-qt5-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153242" comment="poppler-qt5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161494" comment="poppler-tools-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161495" comment="typelib-1_0-Poppler-0_18-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153243" comment="typelib-1_0-Poppler-0_18 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179776" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9776</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776" source="CVE"/>
    <description>
    Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9776.html">CVE-2017-9776</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9776">SUSE bug 1045721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9776">SUSE bug 1045721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9776">SUSE bug 1045721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9776">SUSE bug 1045721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9776">SUSE bug 1045721</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9776">SUSE bug 1045721</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161472" comment="libpoppler-cpp0-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153235" comment="libpoppler-cpp0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161473" comment="libpoppler-cpp0-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161474" comment="libpoppler-cpp0-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161475" comment="libpoppler-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151223" comment="libpoppler-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161476" comment="libpoppler-glib-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153236" comment="libpoppler-glib-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161477" comment="libpoppler-glib8-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151224" comment="libpoppler-glib8 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161478" comment="libpoppler-glib8-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161479" comment="libpoppler-glib8-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161480" comment="libpoppler-qt4-4-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151225" comment="libpoppler-qt4-4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161481" comment="libpoppler-qt4-4-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161482" comment="libpoppler-qt4-4-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161483" comment="libpoppler-qt4-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153237" comment="libpoppler-qt4-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161484" comment="libpoppler-qt5-1-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153238" comment="libpoppler-qt5-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161485" comment="libpoppler-qt5-1-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161486" comment="libpoppler-qt5-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161487" comment="libpoppler-qt5-devel-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153239" comment="libpoppler-qt5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161488" comment="libpoppler60-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154084" comment="libpoppler60 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161489" comment="libpoppler60-32bit-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009161490" comment="libpoppler60-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161491" comment="poppler-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153240" comment="poppler is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161492" comment="poppler-qt-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153241" comment="poppler-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161493" comment="poppler-qt5-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153242" comment="poppler-qt5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161494" comment="poppler-tools-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151227" comment="poppler-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009161495" comment="typelib-1_0-Poppler-0_18-0.43.0-2.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153243" comment="typelib-1_0-Poppler-0_18 is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179788" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9788</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9788" source="CVE"/>
    <description>
    In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9788.html">CVE-2017-9788</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1052635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1052635</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1060041</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9788">SUSE bug 1048576</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159599" comment="apache2-2.4.23-8.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159600" comment="apache2-devel-2.4.23-8.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159601" comment="apache2-doc-2.4.23-8.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159602" comment="apache2-event-2.4.23-8.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153274" comment="apache2-event is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159603" comment="apache2-example-pages-2.4.23-8.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159604" comment="apache2-prefork-2.4.23-8.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159605" comment="apache2-utils-2.4.23-8.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009159606" comment="apache2-worker-2.4.23-8.9.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153275" comment="apache2-worker is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179798" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9798</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798" source="CVE"/>
    <description>
    Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9798.html">CVE-2017-9798</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1060757</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1058058</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1078450</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1077582</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1089997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1089997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1089997</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9798">SUSE bug 1089997</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164721" comment="apache2-2.4.23-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151165" comment="apache2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164722" comment="apache2-devel-2.4.23-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151166" comment="apache2-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164723" comment="apache2-doc-2.4.23-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151167" comment="apache2-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164724" comment="apache2-event-2.4.23-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153274" comment="apache2-event is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164725" comment="apache2-example-pages-2.4.23-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151168" comment="apache2-example-pages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164726" comment="apache2-prefork-2.4.23-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151169" comment="apache2-prefork is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164727" comment="apache2-utils-2.4.23-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151170" comment="apache2-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009164728" comment="apache2-worker-2.4.23-8.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153275" comment="apache2-worker is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179800" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9800</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9800" source="CVE"/>
    <description>
    A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server's repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9800.html">CVE-2017-9800</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1052696</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1052481</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1052932</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1051362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1053364</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1066430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1066430</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9800">SUSE bug 1071709</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162065" comment="libsvn_auth_gnome_keyring-1-0-1.9.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152695" comment="libsvn_auth_gnome_keyring-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162066" comment="libsvn_auth_kwallet-1-0-1.9.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152696" comment="libsvn_auth_kwallet-1-0 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162067" comment="subversion-1.9.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151320" comment="subversion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162068" comment="subversion-bash-completion-1.9.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152697" comment="subversion-bash-completion is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162069" comment="subversion-devel-1.9.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151321" comment="subversion-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162070" comment="subversion-perl-1.9.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151322" comment="subversion-perl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162071" comment="subversion-python-1.9.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151323" comment="subversion-python is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162072" comment="subversion-python-ctypes-1.9.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009154271" comment="subversion-python-ctypes is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162073" comment="subversion-ruby-1.9.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152698" comment="subversion-ruby is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162074" comment="subversion-server-1.9.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151324" comment="subversion-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009162075" comment="subversion-tools-1.9.7-5.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151325" comment="subversion-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179954" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9954</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9954" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9954" source="CVE"/>
    <description>
    The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9954.html">CVE-2017-9954</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9954">SUSE bug 1052061</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9954">SUSE bug 1052061</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20179955" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2017-9955</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2017-9955" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9955" source="CVE"/>
    <description>
    The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file in which a certain size field is larger than a corresponding data field, as demonstrated by mishandling within the objdump program.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2017-9955.html">CVE-2017-9955</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9955">SUSE bug 1046094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9955">SUSE bug 1046094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9955">SUSE bug 1046094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9955">SUSE bug 1046094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9955">SUSE bug 1046094</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2017-9955">SUSE bug 1046094</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167587" comment="binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152512" comment="binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167588" comment="binutils-devel-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152513" comment="binutils-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167589" comment="binutils-devel-32bit-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167590" comment="binutils-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167591" comment="binutils-gold-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167592" comment="binutils-gold is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167593" comment="cross-aarch64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167594" comment="cross-aarch64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167595" comment="cross-arm-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167596" comment="cross-arm-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167597" comment="cross-avr-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167598" comment="cross-avr-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167599" comment="cross-hppa-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167600" comment="cross-hppa-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167601" comment="cross-hppa64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167602" comment="cross-hppa64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167603" comment="cross-i386-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167604" comment="cross-i386-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167605" comment="cross-ia64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167606" comment="cross-ia64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167607" comment="cross-m68k-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167608" comment="cross-m68k-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167609" comment="cross-mips-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167610" comment="cross-mips-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167611" comment="cross-ppc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167612" comment="cross-ppc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167613" comment="cross-ppc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167614" comment="cross-ppc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167615" comment="cross-ppc64le-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167616" comment="cross-ppc64le-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167617" comment="cross-s390-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167618" comment="cross-s390-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167619" comment="cross-s390x-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167620" comment="cross-s390x-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167621" comment="cross-sparc-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167622" comment="cross-sparc-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167623" comment="cross-sparc64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167624" comment="cross-sparc64-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167625" comment="cross-spu-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167626" comment="cross-spu-binutils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009167627" comment="cross-x86_64-binutils-2.29.1-9.6.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009167628" comment="cross-x86_64-binutils is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20180486" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-0486</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-0486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0486" source="CVE"/>
    <description>
    Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-0486.html">CVE-2018-0486</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-0486">SUSE bug 1075975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-0486">SUSE bug 1075975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-0486">SUSE bug 1075975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-0486">SUSE bug 1083247</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169952" comment="libxmltooling-devel-1.5.6-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169953" comment="libxmltooling-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169954" comment="libxmltooling6-1.5.6-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169955" comment="libxmltooling6 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169956" comment="xmltooling-1.5.6-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169957" comment="xmltooling is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169958" comment="xmltooling-schemas-1.5.6-3.3.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009169959" comment="xmltooling-schemas is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000001" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000001</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-1000001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000001" source="CVE"/>
    <description>
    In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-1000001.html">CVE-2018-1000001</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000001">SUSE bug 1074293</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169693" comment="glibc-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151368" comment="glibc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169694" comment="glibc-devel-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151370" comment="glibc-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169695" comment="glibc-devel-static-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152567" comment="glibc-devel-static is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169696" comment="glibc-extra-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151371" comment="glibc-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169697" comment="glibc-html-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152569" comment="glibc-html is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169698" comment="glibc-i18ndata-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152570" comment="glibc-i18ndata is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169699" comment="glibc-info-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151372" comment="glibc-info is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169700" comment="glibc-locale-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151373" comment="glibc-locale is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169701" comment="glibc-obsolete-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152571" comment="glibc-obsolete is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169702" comment="glibc-profile-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152572" comment="glibc-profile is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169703" comment="glibc-testsuite-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152574" comment="glibc-testsuite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169704" comment="glibc-utils-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152575" comment="glibc-utils is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169705" comment="glibc-utils-32bit-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152576" comment="glibc-utils-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169706" comment="nscd-2.22-4.12.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151375" comment="nscd is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20181000007" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-1000007</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-1000007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000007" source="CVE"/>
    <description>
    libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequest hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-1000007.html">CVE-2018-1000007</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000007">SUSE bug 1077001</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000007">SUSE bug 1077001</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000007">SUSE bug 1077001</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000007">SUSE bug 1077001</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000007">SUSE bug 1077001</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000007">SUSE bug 1077001</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000007">SUSE bug 1077001</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000007">SUSE bug 1077001</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-1000007">SUSE bug 1077001</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170362" comment="curl-7.37.0-16.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151177" comment="curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170363" comment="libcurl-devel-7.37.0-16.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151178" comment="libcurl-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170364" comment="libcurl-devel-32bit-7.37.0-16.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153284" comment="libcurl-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170365" comment="libcurl4-7.37.0-16.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151179" comment="libcurl4 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170366" comment="libcurl4-32bit-7.37.0-16.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153285" comment="libcurl4-32bit is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182562" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2562</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2562" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2562" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2562.html">CVE-2018-2562</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2562">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2562">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2562">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2562">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2562">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2562">SUSE bug 1078431</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182573" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2573</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2573" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2573" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: GIS). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2573.html">CVE-2018-2573</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2573">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2573">SUSE bug 1076369</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182583" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2583</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2583" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Stored Procedure). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.8 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2583.html">CVE-2018-2583</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2583">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2583">SUSE bug 1076369</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182590" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2590</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2590" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2590.html">CVE-2018-2590</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2590">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2590">SUSE bug 1076369</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182591" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2591</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2591" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition). Supported versions that are affected are 5.6.38 and prior and 5.7.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2591.html">CVE-2018-2591</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2591">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2591">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2591">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2591">SUSE bug 1076369</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182612" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2612</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2612" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2612" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2612.html">CVE-2018-2612</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2612">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2612">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2612">SUSE bug 1078431</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182622" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2622</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2622" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2622" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2622.html">CVE-2018-2622</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2622">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2622">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2622">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2622">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2622">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2622">SUSE bug 1078431</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182640" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2640</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2640" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2640" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2640.html">CVE-2018-2640</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2640">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2640">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2640">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2640">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2640">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2640">SUSE bug 1078431</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182645" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2645</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2645" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2645" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2645.html">CVE-2018-2645</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2645">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2645">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2645">SUSE bug 1076369</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182647" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2647</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2647" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2647" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2647.html">CVE-2018-2647</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2647">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2647">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2647">SUSE bug 1076369</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182665" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2665</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2665" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2665" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2665.html">CVE-2018-2665</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2665">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2665">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2665">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2665">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2665">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2665">SUSE bug 1078431</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182668" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2668</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2668" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2668" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2668.html">CVE-2018-2668</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2668">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2668">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2668">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2668">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2668">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2668">SUSE bug 1078431</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182676" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2676</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2676" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2676" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2676.html">CVE-2018-2676</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2676">SUSE bug 1076372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170020" comment="python-virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170021" comment="virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170022" comment="virtualbox-devel-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170023" comment="virtualbox-guest-desktop-icons-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170024" comment="virtualbox-guest-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170025" comment="virtualbox-guest-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170026" comment="virtualbox-guest-tools-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170027" comment="virtualbox-guest-x11-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170028" comment="virtualbox-host-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170029" comment="virtualbox-host-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170030" comment="virtualbox-qt-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170031" comment="virtualbox-vnc-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170032" comment="virtualbox-websrv-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182685" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2685</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2685" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2685" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2685.html">CVE-2018-2685</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2685">SUSE bug 1076372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170020" comment="python-virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170021" comment="virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170022" comment="virtualbox-devel-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170023" comment="virtualbox-guest-desktop-icons-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170024" comment="virtualbox-guest-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170025" comment="virtualbox-guest-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170026" comment="virtualbox-guest-tools-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170027" comment="virtualbox-guest-x11-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170028" comment="virtualbox-host-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170029" comment="virtualbox-host-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170030" comment="virtualbox-qt-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170031" comment="virtualbox-vnc-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170032" comment="virtualbox-websrv-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2686</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2686" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2686.html">CVE-2018-2686</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2686">SUSE bug 1076372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170020" comment="python-virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170021" comment="virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170022" comment="virtualbox-devel-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170023" comment="virtualbox-guest-desktop-icons-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170024" comment="virtualbox-guest-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170025" comment="virtualbox-guest-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170026" comment="virtualbox-guest-tools-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170027" comment="virtualbox-guest-x11-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170028" comment="virtualbox-host-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170029" comment="virtualbox-host-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170030" comment="virtualbox-qt-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170031" comment="virtualbox-vnc-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170032" comment="virtualbox-websrv-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182687" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2687</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2687" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2687" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2687.html">CVE-2018-2687</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2687">SUSE bug 1076372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170020" comment="python-virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170021" comment="virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170022" comment="virtualbox-devel-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170023" comment="virtualbox-guest-desktop-icons-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170024" comment="virtualbox-guest-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170025" comment="virtualbox-guest-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170026" comment="virtualbox-guest-tools-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170027" comment="virtualbox-guest-x11-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170028" comment="virtualbox-host-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170029" comment="virtualbox-host-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170030" comment="virtualbox-qt-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170031" comment="virtualbox-vnc-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170032" comment="virtualbox-websrv-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182688" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2688</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2688" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2688.html">CVE-2018-2688</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2688">SUSE bug 1076372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170020" comment="python-virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170021" comment="virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170022" comment="virtualbox-devel-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170023" comment="virtualbox-guest-desktop-icons-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170024" comment="virtualbox-guest-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170025" comment="virtualbox-guest-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170026" comment="virtualbox-guest-tools-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170027" comment="virtualbox-guest-x11-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170028" comment="virtualbox-host-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170029" comment="virtualbox-host-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170030" comment="virtualbox-qt-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170031" comment="virtualbox-vnc-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170032" comment="virtualbox-websrv-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182689" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2689</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2689" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2689.html">CVE-2018-2689</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2689">SUSE bug 1076372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170020" comment="python-virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170021" comment="virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170022" comment="virtualbox-devel-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170023" comment="virtualbox-guest-desktop-icons-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170024" comment="virtualbox-guest-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170025" comment="virtualbox-guest-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170026" comment="virtualbox-guest-tools-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170027" comment="virtualbox-guest-x11-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170028" comment="virtualbox-host-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170029" comment="virtualbox-host-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170030" comment="virtualbox-qt-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170031" comment="virtualbox-vnc-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170032" comment="virtualbox-websrv-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182690" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2690</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2690" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2690.html">CVE-2018-2690</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2690">SUSE bug 1076372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170020" comment="python-virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170021" comment="virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170022" comment="virtualbox-devel-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170023" comment="virtualbox-guest-desktop-icons-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170024" comment="virtualbox-guest-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170025" comment="virtualbox-guest-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170026" comment="virtualbox-guest-tools-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170027" comment="virtualbox-guest-x11-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170028" comment="virtualbox-host-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170029" comment="virtualbox-host-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170030" comment="virtualbox-qt-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170031" comment="virtualbox-vnc-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170032" comment="virtualbox-websrv-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182693" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2693</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2693" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Guest Additions). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2693.html">CVE-2018-2693</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2693">SUSE bug 1076372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170020" comment="python-virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170021" comment="virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170022" comment="virtualbox-devel-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170023" comment="virtualbox-guest-desktop-icons-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170024" comment="virtualbox-guest-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170025" comment="virtualbox-guest-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170026" comment="virtualbox-guest-tools-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170027" comment="virtualbox-guest-x11-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170028" comment="virtualbox-host-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170029" comment="virtualbox-host-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170030" comment="virtualbox-qt-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170031" comment="virtualbox-vnc-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170032" comment="virtualbox-websrv-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182694" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2694</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2694" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2694.html">CVE-2018-2694</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2694">SUSE bug 1076372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170020" comment="python-virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170021" comment="virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170022" comment="virtualbox-devel-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170023" comment="virtualbox-guest-desktop-icons-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170024" comment="virtualbox-guest-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170025" comment="virtualbox-guest-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170026" comment="virtualbox-guest-tools-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170027" comment="virtualbox-guest-x11-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170028" comment="virtualbox-host-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170029" comment="virtualbox-host-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170030" comment="virtualbox-qt-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170031" comment="virtualbox-vnc-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170032" comment="virtualbox-websrv-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182696" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2696</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2696" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2696" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2696.html">CVE-2018-2696</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2696">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2696">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2696">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2696">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2696">SUSE bug 1076369</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182698" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2698</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2698" source="CVE"/>
    <description>
    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2698.html">CVE-2018-2698</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2698">SUSE bug 1076372</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170020" comment="python-virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153266" comment="python-virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170021" comment="virtualbox-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152062" comment="virtualbox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170022" comment="virtualbox-devel-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153267" comment="virtualbox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170023" comment="virtualbox-guest-desktop-icons-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153268" comment="virtualbox-guest-desktop-icons is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170024" comment="virtualbox-guest-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152063" comment="virtualbox-guest-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170025" comment="virtualbox-guest-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166864" comment="virtualbox-guest-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170026" comment="virtualbox-guest-tools-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152064" comment="virtualbox-guest-tools is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170027" comment="virtualbox-guest-x11-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152065" comment="virtualbox-guest-x11 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170028" comment="virtualbox-host-kmp-default-5.1.32_k4.4.104_18.44-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152066" comment="virtualbox-host-kmp-default is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170029" comment="virtualbox-host-source-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153269" comment="virtualbox-host-source is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170030" comment="virtualbox-qt-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152067" comment="virtualbox-qt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170031" comment="virtualbox-vnc-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009166871" comment="virtualbox-vnc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170032" comment="virtualbox-websrv-5.1.32-19.49.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153270" comment="virtualbox-websrv is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20182703" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-2703</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-2703" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2703" source="CVE"/>
    <description>
    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-2703.html">CVE-2018-2703</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2703">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2703">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2703">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2703">SUSE bug 1076369</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-2703">SUSE bug 1076369</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170234" comment="libmysql56client18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152609" comment="libmysql56client18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170235" comment="libmysql56client18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152610" comment="libmysql56client18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170236" comment="libmysql56client_r18-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152611" comment="libmysql56client_r18 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170237" comment="libmysql56client_r18-32bit-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152612" comment="libmysql56client_r18-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170238" comment="mysql-community-server-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152613" comment="mysql-community-server is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170239" comment="mysql-community-server-bench-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152614" comment="mysql-community-server-bench is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170240" comment="mysql-community-server-client-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152615" comment="mysql-community-server-client is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170241" comment="mysql-community-server-errormessages-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152616" comment="mysql-community-server-errormessages is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170242" comment="mysql-community-server-test-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152617" comment="mysql-community-server-test is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170243" comment="mysql-community-server-tools-5.6.39-24.15.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152618" comment="mysql-community-server-tools is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185089" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5089</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5089" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5089.html">CVE-2018-5089</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5089">SUSE bug 1077291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5089">SUSE bug 1077291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170060" comment="MozillaFirefox-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170061" comment="MozillaFirefox-branding-upstream-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170062" comment="MozillaFirefox-buildsymbols-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170063" comment="MozillaFirefox-devel-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170064" comment="MozillaFirefox-translations-common-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170065" comment="MozillaFirefox-translations-other-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185091" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5091</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5091" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5091.html">CVE-2018-5091</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5091">SUSE bug 1077291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5091">SUSE bug 1077291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170060" comment="MozillaFirefox-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170061" comment="MozillaFirefox-branding-upstream-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170062" comment="MozillaFirefox-buildsymbols-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170063" comment="MozillaFirefox-devel-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170064" comment="MozillaFirefox-translations-common-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170065" comment="MozillaFirefox-translations-other-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185095" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5095</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5095" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5095.html">CVE-2018-5095</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5095">SUSE bug 1077291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5095">SUSE bug 1077291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170060" comment="MozillaFirefox-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170061" comment="MozillaFirefox-branding-upstream-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170062" comment="MozillaFirefox-buildsymbols-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170063" comment="MozillaFirefox-devel-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170064" comment="MozillaFirefox-translations-common-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170065" comment="MozillaFirefox-translations-other-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185096" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5096</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5096" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5096.html">CVE-2018-5096</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5096">SUSE bug 1077291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5096">SUSE bug 1077291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170060" comment="MozillaFirefox-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170061" comment="MozillaFirefox-branding-upstream-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170062" comment="MozillaFirefox-buildsymbols-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170063" comment="MozillaFirefox-devel-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170064" comment="MozillaFirefox-translations-common-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170065" comment="MozillaFirefox-translations-other-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185097" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5097</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5097" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5097.html">CVE-2018-5097</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5097">SUSE bug 1077291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5097">SUSE bug 1077291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170060" comment="MozillaFirefox-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170061" comment="MozillaFirefox-branding-upstream-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170062" comment="MozillaFirefox-buildsymbols-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170063" comment="MozillaFirefox-devel-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170064" comment="MozillaFirefox-translations-common-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170065" comment="MozillaFirefox-translations-other-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185098" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5098</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5098" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5098.html">CVE-2018-5098</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5098">SUSE bug 1077291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5098">SUSE bug 1077291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170060" comment="MozillaFirefox-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170061" comment="MozillaFirefox-branding-upstream-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170062" comment="MozillaFirefox-buildsymbols-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170063" comment="MozillaFirefox-devel-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170064" comment="MozillaFirefox-translations-common-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170065" comment="MozillaFirefox-translations-other-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185099" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5099</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5099" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5099.html">CVE-2018-5099</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5099">SUSE bug 1077291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5099">SUSE bug 1077291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170060" comment="MozillaFirefox-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170061" comment="MozillaFirefox-branding-upstream-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170062" comment="MozillaFirefox-buildsymbols-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170063" comment="MozillaFirefox-devel-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170064" comment="MozillaFirefox-translations-common-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170065" comment="MozillaFirefox-translations-other-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185102" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5102</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5102" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5102" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5102.html">CVE-2018-5102</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5102">SUSE bug 1077291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5102">SUSE bug 1077291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170060" comment="MozillaFirefox-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170061" comment="MozillaFirefox-branding-upstream-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170062" comment="MozillaFirefox-buildsymbols-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170063" comment="MozillaFirefox-devel-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170064" comment="MozillaFirefox-translations-common-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170065" comment="MozillaFirefox-translations-other-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185103" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5103</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5103" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5103.html">CVE-2018-5103</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5103">SUSE bug 1077291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5103">SUSE bug 1077291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170060" comment="MozillaFirefox-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170061" comment="MozillaFirefox-branding-upstream-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170062" comment="MozillaFirefox-buildsymbols-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170063" comment="MozillaFirefox-devel-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170064" comment="MozillaFirefox-translations-common-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170065" comment="MozillaFirefox-translations-other-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185104" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5104</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5104" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5104.html">CVE-2018-5104</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5104">SUSE bug 1077291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5104">SUSE bug 1077291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170060" comment="MozillaFirefox-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170061" comment="MozillaFirefox-branding-upstream-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170062" comment="MozillaFirefox-buildsymbols-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170063" comment="MozillaFirefox-devel-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170064" comment="MozillaFirefox-translations-common-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170065" comment="MozillaFirefox-translations-other-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185117" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5117</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5117" source="CVE"/>
    <description>
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5117.html">CVE-2018-5117</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5117">SUSE bug 1077291</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5117">SUSE bug 1077291</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170060" comment="MozillaFirefox-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151161" comment="MozillaFirefox is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170061" comment="MozillaFirefox-branding-upstream-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152806" comment="MozillaFirefox-branding-upstream is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170062" comment="MozillaFirefox-buildsymbols-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152807" comment="MozillaFirefox-buildsymbols is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170063" comment="MozillaFirefox-devel-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152808" comment="MozillaFirefox-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170064" comment="MozillaFirefox-translations-common-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151162" comment="MozillaFirefox-translations-common is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170065" comment="MozillaFirefox-translations-other-52.6-57.30.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152809" comment="MozillaFirefox-translations-other is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185205" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5205</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5205" source="CVE"/>
    <description>
    When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5205.html">CVE-2018-5205</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5205">SUSE bug 1074958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5205">SUSE bug 1074958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5205">SUSE bug 1074958</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169432" comment="irssi-1.0.6-14.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169433" comment="irssi-devel-1.0.6-14.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185206" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5206</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5206" source="CVE"/>
    <description>
    When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5206.html">CVE-2018-5206</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5206">SUSE bug 1074958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5206">SUSE bug 1074958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5206">SUSE bug 1074958</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169432" comment="irssi-1.0.6-14.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169433" comment="irssi-devel-1.0.6-14.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185207" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5207</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5207" source="CVE"/>
    <description>
    When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5207.html">CVE-2018-5207</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5207">SUSE bug 1074958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5207">SUSE bug 1074958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5207">SUSE bug 1074958</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169432" comment="irssi-1.0.6-14.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169433" comment="irssi-devel-1.0.6-14.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185208" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5208</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5208" source="CVE"/>
    <description>
    In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.
    </description>
<advisory from="security@suse.de">
<severity>Important</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5208.html">CVE-2018-5208</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5208">SUSE bug 1074958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5208">SUSE bug 1074958</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5208">SUSE bug 1074958</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169432" comment="irssi-1.0.6-14.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151315" comment="irssi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169433" comment="irssi-devel-1.0.6-14.18.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153798" comment="irssi-devel is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185246" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5246</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5246" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5246" source="CVE"/>
    <description>
    In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5246.html">CVE-2018-5246</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5246">SUSE bug 1074973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5246">SUSE bug 1074973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5246">SUSE bug 1074973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5246">SUSE bug 1074973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5246">SUSE bug 1074973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5246">SUSE bug 1074973</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5246">SUSE bug 1074973</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185247" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5247</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5247" source="CVE"/>
    <description>
    In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5247.html">CVE-2018-5247</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5247">SUSE bug 1074969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5247">SUSE bug 1074969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5247">SUSE bug 1074975</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5247">SUSE bug 1074969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5247">SUSE bug 1074969</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5247">SUSE bug 1074969</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169915" comment="ImageMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151674" comment="ImageMagick is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169916" comment="ImageMagick-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151675" comment="ImageMagick-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169917" comment="ImageMagick-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152592" comment="ImageMagick-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169918" comment="ImageMagick-doc-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151676" comment="ImageMagick-doc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169919" comment="ImageMagick-extra-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151677" comment="ImageMagick-extra is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169920" comment="libMagick++-6_Q16-3-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151678" comment="libMagick++-6_Q16-3 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169921" comment="libMagick++-6_Q16-3-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152595" comment="libMagick++-6_Q16-3-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169922" comment="libMagick++-devel-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152596" comment="libMagick++-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169923" comment="libMagick++-devel-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152597" comment="libMagick++-devel-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169924" comment="libMagickCore-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151679" comment="libMagickCore-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169925" comment="libMagickCore-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152598" comment="libMagickCore-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169926" comment="libMagickWand-6_Q16-1-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151680" comment="libMagickWand-6_Q16-1 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169927" comment="libMagickWand-6_Q16-1-32bit-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152599" comment="libMagickWand-6_Q16-1-32bit is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169928" comment="perl-PerlMagick-6.8.8.1-30.21.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151681" comment="perl-PerlMagick is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185334" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5334</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5334" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5334" source="CVE"/>
    <description>
    In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by correcting the signature timestamp bounds checks.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5334.html">CVE-2018-5334</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5334">SUSE bug 1075737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5334">SUSE bug 1075737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5334">SUSE bug 1075737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5334">SUSE bug 1075737</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5334">SUSE bug 1075737</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169742" comment="wireshark-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169743" comment="wireshark-devel-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169744" comment="wireshark-ui-gtk-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169745" comment="wireshark-ui-qt-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185335" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5335</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5335" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5335" source="CVE"/>
    <description>
    In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in epan/dissectors/packet-wcp.c by validating the available buffer length.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5335.html">CVE-2018-5335</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5335">SUSE bug 1075738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5335">SUSE bug 1075738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5335">SUSE bug 1075738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5335">SUSE bug 1075738</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5335">SUSE bug 1075738</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169742" comment="wireshark-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169743" comment="wireshark-devel-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169744" comment="wireshark-ui-gtk-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169745" comment="wireshark-ui-qt-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185336" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5336</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5336" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5336" source="CVE"/>
    <description>
    In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was addressed in epan/tvbparse.c by limiting the recursion depth.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5336.html">CVE-2018-5336</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5336">SUSE bug 1075739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5336">SUSE bug 1075739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5336">SUSE bug 1075739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5336">SUSE bug 1075739</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5336">SUSE bug 1075739</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169742" comment="wireshark-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151250" comment="wireshark is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169743" comment="wireshark-devel-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153033" comment="wireshark-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169744" comment="wireshark-ui-gtk-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151251" comment="wireshark-ui-gtk is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009169745" comment="wireshark-ui-qt-2.2.12-14.24.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153034" comment="wireshark-ui-qt is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185686" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5686</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5686" source="CVE"/>
    <description>
    In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdf_parse_array function (pdf/pdf-parse.c) because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5686.html">CVE-2018-5686</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5686">SUSE bug 1075936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5686">SUSE bug 1075936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5686">SUSE bug 1075936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5686">SUSE bug 1075936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5686">SUSE bug 1075936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5686">SUSE bug 1075936</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5686">SUSE bug 1075936</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170232" comment="mupdf-1.12.0-13.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153561" comment="mupdf is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170233" comment="mupdf-devel-static-1.12.0-13.10.1 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009153562" comment="mupdf-devel-static is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185711" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5711</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5711" source="CVE"/>
    <description>
    gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5711.html">CVE-2018-5711</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5711">SUSE bug 1076391</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170367" comment="apache2-mod_php5-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170368" comment="php5-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170369" comment="php5-bcmath-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170370" comment="php5-bz2-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170371" comment="php5-calendar-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170372" comment="php5-ctype-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170373" comment="php5-curl-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170374" comment="php5-dba-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170375" comment="php5-devel-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170376" comment="php5-dom-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170377" comment="php5-enchant-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170378" comment="php5-exif-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170379" comment="php5-fastcgi-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170380" comment="php5-fileinfo-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170381" comment="php5-firebird-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170382" comment="php5-fpm-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170383" comment="php5-ftp-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170384" comment="php5-gd-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170385" comment="php5-gettext-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170386" comment="php5-gmp-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170387" comment="php5-iconv-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170388" comment="php5-imap-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170389" comment="php5-intl-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170390" comment="php5-json-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170391" comment="php5-ldap-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170392" comment="php5-mbstring-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170393" comment="php5-mcrypt-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170394" comment="php5-mssql-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170395" comment="php5-mysql-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170396" comment="php5-odbc-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170397" comment="php5-opcache-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170398" comment="php5-openssl-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170399" comment="php5-pcntl-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170400" comment="php5-pdo-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170401" comment="php5-pear-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170402" comment="php5-pgsql-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170403" comment="php5-phar-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170404" comment="php5-posix-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170405" comment="php5-pspell-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170406" comment="php5-readline-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170407" comment="php5-shmop-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170408" comment="php5-snmp-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170409" comment="php5-soap-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170410" comment="php5-sockets-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170411" comment="php5-sqlite-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170412" comment="php5-suhosin-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170413" comment="php5-sysvmsg-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170414" comment="php5-sysvsem-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170415" comment="php5-sysvshm-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170416" comment="php5-tidy-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170417" comment="php5-tokenizer-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170418" comment="php5-wddx-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170419" comment="php5-xmlreader-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170420" comment="php5-xmlrpc-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170421" comment="php5-xmlwriter-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170422" comment="php5-xsl-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170423" comment="php5-zip-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170424" comment="php5-zlib-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
<definition id="oval:org.opensuse.security:def:20185712" version="1" class="vulnerability">
 <metadata>
 <title>CVE-2018-5712</title>
    <affected family="unix">
            <platform>openSUSE Leap 42.2</platform>
    </affected>
    <reference ref_id="CVE-2018-5712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5712" source="CVE"/>
    <description>
    An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file.
    </description>
<advisory from="security@suse.de">
<severity>Moderate</severity>
<cve href="https://www.suse.com/security/cve/CVE-2018-5712.html">CVE-2018-5712</cve>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076391</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1076220</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1091362</bugzilla>
<bugzilla href="https://bugzilla.suse.com/CVE-2018-5712">SUSE bug 1091362</bugzilla>
</advisory>
 </metadata>
    <criteria operator="AND">
      <criterion test_ref="oval:org.opensuse.security:tst:2009135734" comment="openSUSE Leap 42.2 is installed"/>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170367" comment="apache2-mod_php5-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151021" comment="apache2-mod_php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170368" comment="php5-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151022" comment="php5 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170369" comment="php5-bcmath-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151023" comment="php5-bcmath is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170370" comment="php5-bz2-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151024" comment="php5-bz2 is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170371" comment="php5-calendar-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151025" comment="php5-calendar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170372" comment="php5-ctype-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151026" comment="php5-ctype is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170373" comment="php5-curl-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151027" comment="php5-curl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170374" comment="php5-dba-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151028" comment="php5-dba is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170375" comment="php5-devel-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151029" comment="php5-devel is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170376" comment="php5-dom-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151030" comment="php5-dom is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170377" comment="php5-enchant-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152034" comment="php5-enchant is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170378" comment="php5-exif-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151031" comment="php5-exif is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170379" comment="php5-fastcgi-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151032" comment="php5-fastcgi is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170380" comment="php5-fileinfo-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152035" comment="php5-fileinfo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170381" comment="php5-firebird-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152036" comment="php5-firebird is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170382" comment="php5-fpm-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152037" comment="php5-fpm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170383" comment="php5-ftp-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151033" comment="php5-ftp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170384" comment="php5-gd-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151034" comment="php5-gd is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170385" comment="php5-gettext-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151035" comment="php5-gettext is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170386" comment="php5-gmp-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151036" comment="php5-gmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170387" comment="php5-iconv-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151037" comment="php5-iconv is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170388" comment="php5-imap-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151038" comment="php5-imap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170389" comment="php5-intl-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152038" comment="php5-intl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170390" comment="php5-json-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151039" comment="php5-json is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170391" comment="php5-ldap-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151040" comment="php5-ldap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170392" comment="php5-mbstring-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151041" comment="php5-mbstring is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170393" comment="php5-mcrypt-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151042" comment="php5-mcrypt is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170394" comment="php5-mssql-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152039" comment="php5-mssql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170395" comment="php5-mysql-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151043" comment="php5-mysql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170396" comment="php5-odbc-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151044" comment="php5-odbc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170397" comment="php5-opcache-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152040" comment="php5-opcache is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170398" comment="php5-openssl-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151045" comment="php5-openssl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170399" comment="php5-pcntl-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152041" comment="php5-pcntl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170400" comment="php5-pdo-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151046" comment="php5-pdo is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170401" comment="php5-pear-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151047" comment="php5-pear is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170402" comment="php5-pgsql-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151048" comment="php5-pgsql is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170403" comment="php5-phar-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152042" comment="php5-phar is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170404" comment="php5-posix-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152043" comment="php5-posix is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170405" comment="php5-pspell-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152044" comment="php5-pspell is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170406" comment="php5-readline-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152045" comment="php5-readline is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170407" comment="php5-shmop-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151049" comment="php5-shmop is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170408" comment="php5-snmp-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151050" comment="php5-snmp is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170409" comment="php5-soap-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152046" comment="php5-soap is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170410" comment="php5-sockets-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151051" comment="php5-sockets is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170411" comment="php5-sqlite-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151052" comment="php5-sqlite is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170412" comment="php5-suhosin-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151053" comment="php5-suhosin is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170413" comment="php5-sysvmsg-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152047" comment="php5-sysvmsg is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170414" comment="php5-sysvsem-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151054" comment="php5-sysvsem is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170415" comment="php5-sysvshm-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151055" comment="php5-sysvshm is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170416" comment="php5-tidy-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151056" comment="php5-tidy is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170417" comment="php5-tokenizer-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151057" comment="php5-tokenizer is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170418" comment="php5-wddx-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151058" comment="php5-wddx is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170419" comment="php5-xmlreader-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151059" comment="php5-xmlreader is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170420" comment="php5-xmlrpc-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009152048" comment="php5-xmlrpc is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170421" comment="php5-xmlwriter-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151060" comment="php5-xmlwriter is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170422" comment="php5-xsl-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151061" comment="php5-xsl is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170423" comment="php5-zip-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151062" comment="php5-zip is signed with openSUSE key"/>
        </criteria>
        <criteria operator="AND">
          <criterion test_ref="oval:org.opensuse.security:tst:2009170424" comment="php5-zlib-5.5.14-77.18.2 is installed"/>
          <criterion test_ref="oval:org.opensuse.security:tst:2009151063" comment="php5-zlib is signed with openSUSE key"/>
        </criteria>
      </criteria>
    </criteria>
</definition>
</definitions>
<tests>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171505" version="1" comment="kinit is &lt;5.20.0-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039996"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171506" version="1" comment="kinit-devel is &lt;5.20.0-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039998"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171507" version="1" comment="kinit-lang is &lt;5.20.0-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118803" version="1" comment="sles-release is ==12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030884"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046486"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171508" version="1" comment="chromedriver is &lt;53.0.2785.89-96.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035396"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053783"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171509" version="1" comment="chromium is &lt;53.0.2785.89-96.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035398"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053783"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171510" version="1" comment="chromium-desktop-gnome is &lt;53.0.2785.89-96.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035401"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053783"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171511" version="1" comment="chromium-desktop-kde is &lt;53.0.2785.89-96.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035402"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053783"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171512" version="1" comment="chromium-ffmpegsumo is &lt;53.0.2785.89-96.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053783"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116126" version="1" comment="sles-release is ==12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030884"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045919"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171513" version="1" comment="irssi is &lt;0.8.20-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053784"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171514" version="1" comment="irssi-devel is &lt;0.8.20-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053784"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171515" version="1" comment="chromedriver is &lt;54.0.2840.59-109.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035396"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171516" version="1" comment="chromium is &lt;54.0.2840.59-109.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035398"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171517" version="1" comment="chromium-ffmpegsumo is &lt;54.0.2840.59-109.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147478" version="1" comment="haproxy is &lt;1.5.4-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038990"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117479" version="1" comment="suse-sle12-cloud-compute-release is ==5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046241"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147479" version="1" comment="openstack-cinder is &lt;2014.2.3.dev13-1.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036493"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147480" version="1" comment="openstack-cinder-volume is &lt;2014.2.3.dev13-1.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147481" version="1" comment="python-cinder is &lt;2014.2.3.dev13-1.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147482" version="1" comment="openstack-neutron is &lt;2014.2.2.dev26-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147483" version="1" comment="openstack-neutron-dhcp-agent is &lt;2014.2.2.dev26-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038099"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147484" version="1" comment="openstack-neutron-ha-tool is &lt;2014.2.2.dev26-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038100"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147485" version="1" comment="openstack-neutron-l3-agent is &lt;2014.2.2.dev26-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038102"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147486" version="1" comment="openstack-neutron-lbaas-agent is &lt;2014.2.2.dev26-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038103"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147487" version="1" comment="openstack-neutron-linuxbridge-agent is &lt;2014.2.2.dev26-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038104"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147488" version="1" comment="openstack-neutron-metadata-agent is &lt;2014.2.2.dev26-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038105"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147489" version="1" comment="openstack-neutron-metering-agent is &lt;2014.2.2.dev26-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038106"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147490" version="1" comment="openstack-neutron-openvswitch-agent is &lt;2014.2.2.dev26-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038109"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147491" version="1" comment="openstack-neutron-vpn-agent is &lt;2014.2.2.dev26-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038115"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147492" version="1" comment="python-neutron is &lt;2014.2.2.dev26-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038116"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147493" version="1" comment="python-Beaker is &lt;1.6.4-0.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041394"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051034"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147494" version="1" comment="python-keystoneclient is &lt;1.0.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147495" version="1" comment="python-keystoneclient-doc is &lt;1.0.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036541"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144245" version="1" comment="python-pycrypto is &lt;2.6.1-1.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050694"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147496" version="1" comment="python-pymongo is &lt;2.6.3-2.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051035"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144246" version="1" comment="python-requests is &lt;2.3.0-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050695"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147497" version="1" comment="ruby2.1-rubygem-chef is &lt;10.32.2-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041395"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147498" version="1" comment="rubygem-chef is &lt;10.32.2-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041396"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141196" version="1" comment="ImageMagick is &lt;6.8.8.1-5.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050013"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141197" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-5.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050013"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141198" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-5.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050013"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141199" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-5.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050013"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141200" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-5.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050013"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116183" version="1" comment="sled-release is ==12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045919"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141201" version="1" comment="MozillaFirefox is &lt;31.1.0esr-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050014"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141202" version="1" comment="MozillaFirefox-translations is &lt;31.1.0esr-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050014"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141203" version="1" comment="aaa_base is &lt;13.2+git20140911.61c1681-1.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050015"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141204" version="1" comment="aaa_base-extras is &lt;13.2+git20140911.61c1681-1.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034235"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050015"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141205" version="1" comment="accountsservice is &lt;0.6.35-1.126" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037053"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050016"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141206" version="1" comment="accountsservice-lang is &lt;0.6.35-1.126" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050016"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141207" version="1" comment="libaccountsservice0 is &lt;0.6.35-1.126" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050016"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141208" version="1" comment="typelib-1_0-AccountsService-1_0 is &lt;0.6.35-1.126" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050016"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141209" version="1" comment="alsa is &lt;1.0.27.2-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040936"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141210" version="1" comment="libasound2 is &lt;1.0.27.2-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040938"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140446" version="1" comment="libasound2-32bit is &lt;1.0.27.2-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040939"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141211" version="1" comment="argyllcms is &lt;1.6.3-1.179" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050017"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141212" version="1" comment="avahi is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031847"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141213" version="1" comment="avahi-lang is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033592"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141214" version="1" comment="libavahi-client3 is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033066"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141215" version="1" comment="libavahi-client3-32bit is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033064"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141216" version="1" comment="libavahi-common3 is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033069"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141217" version="1" comment="libavahi-common3-32bit is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141218" version="1" comment="libavahi-core7 is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040951"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141219" version="1" comment="libdns_sd is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033081"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141220" version="1" comment="libdns_sd-32bit is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033079"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141221" version="1" comment="bash is &lt;4.2-75.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032478"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050019"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141222" version="1" comment="bash-doc is &lt;4.2-75.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034959"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050019"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141223" version="1" comment="bash-lang is &lt;4.2-75.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037113"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050019"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141224" version="1" comment="libreadline6 is &lt;6.2-75.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037117"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141225" version="1" comment="libreadline6-32bit is &lt;6.2-75.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037116"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141226" version="1" comment="readline-doc is &lt;6.2-75.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141227" version="1" comment="bind-libs is &lt;9.9.5P1-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141228" version="1" comment="bind-libs-32bit is &lt;9.9.5P1-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141229" version="1" comment="bind-utils is &lt;9.9.5P1-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141230" version="1" comment="bogofilter is &lt;1.2.4-3.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032197"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141231" version="1" comment="bzip2 is &lt;1.0.6-27.1129" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030508"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050023"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141232" version="1" comment="libbz2-1 is &lt;1.0.6-27.1129" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031657"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050023"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141233" version="1" comment="libbz2-1-32bit is &lt;1.0.6-27.1129" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031655"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050023"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141234" version="1" comment="cifs-utils is &lt;6.4-3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050024"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141235" version="1" comment="clamav is &lt;0.98.4-1.46" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050025"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141236" version="1" comment="colord is &lt;1.1.7-2.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050026"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141237" version="1" comment="colord-gtk-lang is &lt;0.1.25-3.113" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041037"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050027"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141238" version="1" comment="colord-lang is &lt;1.1.7-2.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050026"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141239" version="1" comment="libcolord-gtk1 is &lt;0.1.25-3.113" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050027"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141240" version="1" comment="libcolord2 is &lt;1.1.7-2.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050026"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141241" version="1" comment="libcolord2-32bit is &lt;1.1.7-2.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050026"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141242" version="1" comment="libcolorhug2 is &lt;1.1.7-2.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040963"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050026"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140495" version="1" comment="coolkey is &lt;1.1.0-147.71" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041097"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049792"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141243" version="1" comment="coreutils is &lt;8.22-5.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050028"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141244" version="1" comment="coreutils-lang is &lt;8.22-5.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034779"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050028"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141245" version="1" comment="cpio is &lt;2.11-26.182" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050029"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141246" version="1" comment="cpio-lang is &lt;2.11-26.182" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050029"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141247" version="1" comment="tar is &lt;1.27.1-2.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030401"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141248" version="1" comment="tar-lang is &lt;1.27.1-2.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033728"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141249" version="1" comment="cpp48 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141250" version="1" comment="gcc48 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141251" version="1" comment="gcc48-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141252" version="1" comment="gcc48-c++ is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039005"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141253" version="1" comment="gcc48-gij is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039027"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141254" version="1" comment="gcc48-gij-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039026"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141255" version="1" comment="gcc48-info is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039007"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141256" version="1" comment="libasan0 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039012"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141257" version="1" comment="libasan0-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141258" version="1" comment="libatomic1 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141259" version="1" comment="libatomic1-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040367"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141260" version="1" comment="libffi4 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141261" version="1" comment="libffi4-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141262" version="1" comment="libgcc_s1 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141263" version="1" comment="libgcc_s1-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040359"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141264" version="1" comment="libgcj48 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039030"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141265" version="1" comment="libgcj48-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039029"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141266" version="1" comment="libgcj48-jar is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039033"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141267" version="1" comment="libgcj_bc1 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039034"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141268" version="1" comment="libgfortran3 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040348"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141269" version="1" comment="libgomp1 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141270" version="1" comment="libgomp1-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141271" version="1" comment="libitm1 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040349"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141272" version="1" comment="libitm1-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141273" version="1" comment="libquadmath0 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040352"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141274" version="1" comment="libstdc++48-devel is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141275" version="1" comment="libstdc++48-devel-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141276" version="1" comment="libstdc++6 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040364"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141277" version="1" comment="libstdc++6-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040365"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141278" version="1" comment="libtsan0 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040355"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141279" version="1" comment="cron is &lt;4.2-55.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030630"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141280" version="1" comment="cronie is &lt;1.4.11-55.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141281" version="1" comment="cups is &lt;1.7.5-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030428"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050034"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141282" version="1" comment="cups-client is &lt;1.7.5-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050034"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141283" version="1" comment="cups-libs is &lt;1.7.5-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030427"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050034"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141284" version="1" comment="cups-libs-32bit is &lt;1.7.5-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030730"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050034"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141285" version="1" comment="cups-filters is &lt;1.0.58-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038657"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050035"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141286" version="1" comment="cups-filters-cups-browsed is &lt;1.0.58-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038658"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050035"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141287" version="1" comment="cups-filters-foomatic-rip is &lt;1.0.58-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038660"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050035"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141288" version="1" comment="cups-filters-ghostscript is &lt;1.0.58-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050035"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140514" version="1" comment="cups-pk-helper is &lt;0.2.5-3.75" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140515" version="1" comment="cups-pk-helper-lang is &lt;0.2.5-3.75" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141289" version="1" comment="curl is &lt;7.37.0-2.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141290" version="1" comment="libcurl4 is &lt;7.37.0-2.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141291" version="1" comment="libcurl4-32bit is &lt;7.37.0-2.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140516" version="1" comment="cvs is &lt;1.12.12-181.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031943"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049799"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140518" version="1" comment="cyrus-sasl is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030478"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140519" version="1" comment="cyrus-sasl-32bit is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030877"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140520" version="1" comment="cyrus-sasl-crammd5 is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140521" version="1" comment="cyrus-sasl-crammd5-32bit is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031025"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140522" version="1" comment="cyrus-sasl-digestmd5 is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030615"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141292" version="1" comment="cyrus-sasl-digestmd5-32bit is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031903"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140523" version="1" comment="cyrus-sasl-gssapi is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030881"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140524" version="1" comment="cyrus-sasl-gssapi-32bit is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031027"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140527" version="1" comment="cyrus-sasl-plain is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030883"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140528" version="1" comment="cyrus-sasl-plain-32bit is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031031"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140529" version="1" comment="cyrus-sasl-saslauthd is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140532" version="1" comment="libsasl2-3 is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140533" version="1" comment="libsasl2-3-32bit is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040966"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141293" version="1" comment="dbus-1 is &lt;1.8.8-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141294" version="1" comment="dbus-1-x11 is &lt;1.8.8-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141295" version="1" comment="libdbus-1-3 is &lt;1.8.8-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050038"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141296" version="1" comment="libdbus-1-3-32bit is &lt;1.8.8-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050038"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140539" version="1" comment="dbus-1-glib is &lt;0.100.2-3.58" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031626"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049803"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140540" version="1" comment="dbus-1-glib-32bit is &lt;0.100.2-3.58" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049803"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141297" version="1" comment="dhcp is &lt;4.2.6-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050039"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141298" version="1" comment="dhcp-client is &lt;4.2.6-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030726"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050039"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141299" version="1" comment="dia is &lt;0.97.2-13.253" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030607"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050040"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141300" version="1" comment="dia-lang is &lt;0.97.2-13.253" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040967"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050040"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141301" version="1" comment="dracut is &lt;037-34.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141302" version="1" comment="ecryptfs-utils is &lt;103-5.35" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141303" version="1" comment="ecryptfs-utils-32bit is &lt;103-5.35" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141304" version="1" comment="elfutils is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141305" version="1" comment="libasm1 is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141306" version="1" comment="libdw1 is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038060"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141307" version="1" comment="libdw1-32bit is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141308" version="1" comment="libebl1 is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141309" version="1" comment="libebl1-32bit is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038064"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141310" version="1" comment="libelf1 is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141311" version="1" comment="libelf1-32bit is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038068"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141312" version="1" comment="emacs is &lt;24.3-14.44" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030850"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050044"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141313" version="1" comment="emacs-info is &lt;24.3-14.44" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030848"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050044"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141314" version="1" comment="emacs-x11 is &lt;24.3-14.44" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050044"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141315" version="1" comment="etags is &lt;24.3-14.44" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038236"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050044"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141316" version="1" comment="empathy is &lt;3.10.3-1.131" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034740"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050045"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141317" version="1" comment="empathy-lang is &lt;3.10.3-1.131" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034739"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050045"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141318" version="1" comment="telepathy-mission-control-plugin-goa is &lt;3.10.3-1.131" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050045"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141319" version="1" comment="evince is &lt;3.10.3-1.213" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050046"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141320" version="1" comment="evince-lang is &lt;3.10.3-1.213" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050046"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141321" version="1" comment="libevdocument3-4 is &lt;3.10.3-1.213" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040970"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050046"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141322" version="1" comment="libevview3-3 is &lt;3.10.3-1.213" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040971"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050046"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141323" version="1" comment="typelib-1_0-EvinceDocument-3_0 is &lt;3.10.3-1.213" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040972"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050046"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141324" version="1" comment="typelib-1_0-EvinceView-3_0 is &lt;3.10.3-1.213" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040973"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050046"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141325" version="1" comment="expat is &lt;2.1.0-13.232" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050047"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141326" version="1" comment="libexpat1 is &lt;2.1.0-13.232" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050047"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141327" version="1" comment="libexpat1-32bit is &lt;2.1.0-13.232" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050047"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141328" version="1" comment="facter is &lt;2.0.2-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037327"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141329" version="1" comment="fetchmail is &lt;6.3.26-5.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050049"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141330" version="1" comment="file is &lt;5.19-2.149" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030456"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050050"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141331" version="1" comment="file-magic is &lt;5.19-2.149" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037852"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050050"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141332" version="1" comment="libmagic1 is &lt;5.19-2.149" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037850"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050050"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141333" version="1" comment="libmagic1-32bit is &lt;5.19-2.149" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050050"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141334" version="1" comment="finch is &lt;2.10.9-5.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031748"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141335" version="1" comment="libpurple is &lt;2.10.9-5.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031423"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141336" version="1" comment="libpurple-lang is &lt;2.10.9-5.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141337" version="1" comment="libpurple-meanwhile is &lt;2.10.9-5.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031749"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141338" version="1" comment="libpurple-tcl is &lt;2.10.9-5.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033532"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141339" version="1" comment="pidgin is &lt;2.10.9-5.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141340" version="1" comment="flash-player is &lt;11.2.202.406-1.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050052"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141341" version="1" comment="flash-player-gnome is &lt;11.2.202.406-1.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050052"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141342" version="1" comment="freerdp is &lt;1.0.2-7.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050053"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141343" version="1" comment="libfreerdp-1_0 is &lt;1.0.2-7.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050053"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141344" version="1" comment="libfreerdp-1_0-plugins is &lt;1.0.2-7.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050053"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141345" version="1" comment="ft2demos is &lt;2.5.3-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034838"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050054"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141346" version="1" comment="fuse is &lt;2.9.3-3.65" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033599"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050055"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141347" version="1" comment="libfuse2 is &lt;2.9.3-3.65" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050055"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141348" version="1" comment="g3utils is &lt;1.1.36-54.100" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050056"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141349" version="1" comment="mgetty is &lt;1.1.36-54.100" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050056"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141350" version="1" comment="gd is &lt;2.1.0-3.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050057"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141351" version="1" comment="gd-32bit is &lt;2.1.0-3.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050057"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141352" version="1" comment="gdk-pixbuf-lang is &lt;2.30.6-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037124"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050058"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141353" version="1" comment="gdk-pixbuf-query-loaders is &lt;2.30.6-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050058"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141354" version="1" comment="gdk-pixbuf-query-loaders-32bit is &lt;2.30.6-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050058"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141355" version="1" comment="libgdk_pixbuf-2_0-0 is &lt;2.30.6-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037131"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050058"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141356" version="1" comment="libgdk_pixbuf-2_0-0-32bit is &lt;2.30.6-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037132"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050058"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141357" version="1" comment="typelib-1_0-GdkPixbuf-2_0 is &lt;2.30.6-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038954"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050058"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141358" version="1" comment="gdk-pixbuf-loader-rsvg is &lt;2.40.2-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034698"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050059"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141359" version="1" comment="librsvg-2-2 is &lt;2.40.2-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034702"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050059"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141360" version="1" comment="librsvg-2-2-32bit is &lt;2.40.2-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050059"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141361" version="1" comment="rsvg-view is &lt;2.40.2-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034663"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050059"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141362" version="1" comment="gdm is &lt;3.10.0.1-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030629"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050060"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141363" version="1" comment="gdm-branding-upstream is &lt;3.10.0.1-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033988"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050060"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141364" version="1" comment="gdm-lang is &lt;3.10.0.1-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033989"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050060"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141365" version="1" comment="gdmflexiserver is &lt;3.10.0.1-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050060"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141366" version="1" comment="libgdm1 is &lt;3.10.0.1-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038574"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050060"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141367" version="1" comment="typelib-1_0-Gdm-1_0 is &lt;3.10.0.1-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038575"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050060"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141368" version="1" comment="gimp is &lt;2.8.10-1.164" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030642"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050061"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141369" version="1" comment="gimp-lang is &lt;2.8.10-1.164" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050061"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141370" version="1" comment="gimp-plugins-python is &lt;2.8.10-1.164" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050061"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141371" version="1" comment="libgimp-2_0-0 is &lt;2.8.10-1.164" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050061"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141372" version="1" comment="libgimpui-2_0-0 is &lt;2.8.10-1.164" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034558"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050061"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141373" version="1" comment="glib2-lang is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030893"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141374" version="1" comment="glib2-tools is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141375" version="1" comment="libgio-2_0-0 is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030896"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141376" version="1" comment="libgio-2_0-0-32bit is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030894"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141377" version="1" comment="libgio-fam is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141378" version="1" comment="libglib-2_0-0 is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030899"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141379" version="1" comment="libglib-2_0-0-32bit is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030897"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141380" version="1" comment="libgmodule-2_0-0 is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030902"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141381" version="1" comment="libgmodule-2_0-0-32bit is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030900"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141382" version="1" comment="libgobject-2_0-0 is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141383" version="1" comment="libgobject-2_0-0-32bit is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030903"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141384" version="1" comment="libgthread-2_0-0 is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030908"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141385" version="1" comment="libgthread-2_0-0-32bit is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030906"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141386" version="1" comment="glibc is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141387" version="1" comment="glibc-32bit is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141388" version="1" comment="glibc-devel is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141389" version="1" comment="glibc-devel-32bit is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141390" version="1" comment="glibc-i18ndata is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141391" version="1" comment="glibc-locale is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141392" version="1" comment="glibc-locale-32bit is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141393" version="1" comment="nscd is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141394" version="1" comment="gnome-keyring is &lt;3.10.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032328"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050064"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141395" version="1" comment="gnome-keyring-32bit is &lt;3.10.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032326"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050064"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141396" version="1" comment="gnome-keyring-lang is &lt;3.10.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050064"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141397" version="1" comment="gnome-keyring-pam is &lt;3.10.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036411"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050064"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141398" version="1" comment="gnome-keyring-pam-32bit is &lt;3.10.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036412"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050064"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141399" version="1" comment="libgck-modules-gnome-keyring is &lt;3.10.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036415"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050064"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141400" version="1" comment="gnome-online-accounts is &lt;3.10.5-1.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035605"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050065"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141401" version="1" comment="gnome-online-accounts-lang is &lt;3.10.5-1.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035609"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050065"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141402" version="1" comment="libgoa-1_0-0 is &lt;3.10.5-1.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035610"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050065"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141403" version="1" comment="libgoa-backend-1_0-1 is &lt;3.10.5-1.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050065"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141404" version="1" comment="typelib-1_0-Goa-1_0 is &lt;3.10.5-1.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035618"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050065"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141405" version="1" comment="gnome-shell is &lt;3.10.4-22.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040981"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141406" version="1" comment="gnome-shell-browser-plugin is &lt;3.10.4-22.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040982"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141407" version="1" comment="gnome-shell-calendar is &lt;3.10.4-22.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141408" version="1" comment="gnome-shell-lang is &lt;3.10.4-22.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041040"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141409" version="1" comment="gnutls is &lt;3.2.15-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030524"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141410" version="1" comment="libgnutls28 is &lt;3.2.15-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141411" version="1" comment="libgnutls28-32bit is &lt;3.2.15-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141412" version="1" comment="gpg2 is &lt;2.0.24-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030602"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050068"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141413" version="1" comment="gpg2-lang is &lt;2.0.24-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033865"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050068"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140643" version="1" comment="gpgme is &lt;1.5.1-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038077"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049827"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140644" version="1" comment="libgpgme11 is &lt;1.5.1-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038079"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049827"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140645" version="1" comment="groff is &lt;1.22.2-5.429" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140673" version="1" comment="gvim is &lt;7.4.326-2.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030753"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049834"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140674" version="1" comment="vim is &lt;7.4.326-2.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032775"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049834"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140675" version="1" comment="vim-data is &lt;7.4.326-2.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031745"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049834"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140677" version="1" comment="gzip is &lt;1.6-7.392" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030647"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049836"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140678" version="1" comment="hardlink is &lt;1.0-6.45" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040987"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049837"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141414" version="1" comment="hplip is &lt;3.14.6-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141415" version="1" comment="hplip-hpijs is &lt;3.14.6-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031434"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141416" version="1" comment="hplip-sane is &lt;3.14.6-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037412"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141417" version="1" comment="ibus-chewing is &lt;1.4.10.1-2.25" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037591"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050070"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141418" version="1" comment="ibus-pinyin is &lt;1.5.0-2.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050071"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140686" version="1" comment="iputils is &lt;s20121221-2.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049843"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141419" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.65-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050072"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141420" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.65-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050072"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141421" version="1" comment="java-1_7_0-openjdk-plugin is &lt;1.5.1-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050073"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141422" version="1" comment="kbd is &lt;1.15.5-7.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050074"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141423" version="1" comment="kernel-default is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141424" version="1" comment="kernel-default-devel is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141425" version="1" comment="kernel-default-extra is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141426" version="1" comment="kernel-devel is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141427" version="1" comment="kernel-macros is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141428" version="1" comment="kernel-source is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141429" version="1" comment="kernel-syms is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141430" version="1" comment="kernel-xen is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141431" version="1" comment="kernel-xen-devel is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141432" version="1" comment="krb5 is &lt;1.12.1-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141433" version="1" comment="krb5-32bit is &lt;1.12.1-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141434" version="1" comment="krb5-client is &lt;1.12.1-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140711" version="1" comment="krb5-appl-clients is &lt;1.0.3-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034718"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049852"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141435" version="1" comment="lcms is &lt;1.19-17.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030988"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049853"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140713" version="1" comment="liblcms1 is &lt;1.19-17.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049853"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140714" version="1" comment="liblcms1-32bit is &lt;1.19-17.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030989"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049853"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140717" version="1" comment="libHX28 is &lt;3.18-1.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040993"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049855"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140718" version="1" comment="libHX28-32bit is &lt;3.18-1.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049855"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140719" version="1" comment="libIlmImf-Imf_2_1-21 is &lt;2.1.0-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049856"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141436" version="1" comment="libIlmImf-Imf_2_1-21-32bit is &lt;2.1.0-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041123"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049856"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140720" version="1" comment="openexr is &lt;2.1.0-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049856"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140739" version="1" comment="libX11-6 is &lt;1.6.2-4.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049859"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140740" version="1" comment="libX11-6-32bit is &lt;1.6.2-4.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049859"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140741" version="1" comment="libX11-data is &lt;1.6.2-4.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036218"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049859"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140742" version="1" comment="libX11-xcb1 is &lt;1.6.2-4.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049859"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140743" version="1" comment="libX11-xcb1-32bit is &lt;1.6.2-4.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049859"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140744" version="1" comment="libXRes1 is &lt;1.0.7-3.54" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049860"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140745" version="1" comment="libXRes1-32bit is &lt;1.0.7-3.54" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036166"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049860"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140746" version="1" comment="libXcursor1 is &lt;1.1.14-3.60" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049861"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140747" version="1" comment="libXcursor1-32bit is &lt;1.1.14-3.60" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049861"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140748" version="1" comment="libXext6 is &lt;1.3.2-3.61" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049862"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140749" version="1" comment="libXext6-32bit is &lt;1.3.2-3.61" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036076"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049862"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140750" version="1" comment="libXfixes3 is &lt;5.0.1-3.53" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049863"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140751" version="1" comment="libXfixes3-32bit is &lt;5.0.1-3.53" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049863"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141437" version="1" comment="libXfont1 is &lt;1.4.7-2.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050077"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141438" version="1" comment="libXi6 is &lt;1.7.2-3.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036145"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050078"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141439" version="1" comment="libXi6-32bit is &lt;1.7.2-3.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036146"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050078"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140755" version="1" comment="libXinerama1 is &lt;1.1.3-3.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049866"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140756" version="1" comment="libXinerama1-32bit is &lt;1.1.3-3.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036154"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049866"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140757" version="1" comment="libXp6 is &lt;1.0.2-3.58" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140758" version="1" comment="libXp6-32bit is &lt;1.0.2-3.58" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036092"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141440" version="1" comment="libXrandr2 is &lt;1.4.2-3.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050079"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141441" version="1" comment="libXrandr2-32bit is &lt;1.4.2-3.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036162"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050079"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140761" version="1" comment="libXrender1 is &lt;0.9.8-3.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036099"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049869"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140762" version="1" comment="libXrender1-32bit is &lt;0.9.8-3.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036100"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049869"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140763" version="1" comment="libXt6 is &lt;1.1.4-3.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036107"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049870"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140764" version="1" comment="libXt6-32bit is &lt;1.1.4-3.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036108"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049870"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140765" version="1" comment="libXtst6 is &lt;1.2.2-3.60" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036177"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049871"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140766" version="1" comment="libXtst6-32bit is &lt;1.2.2-3.60" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036178"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049871"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140767" version="1" comment="libXv1 is &lt;1.0.10-3.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036115"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049872"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140768" version="1" comment="libXv1-32bit is &lt;1.0.10-3.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036116"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049872"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140769" version="1" comment="libXvMC1 is &lt;1.0.8-3.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036185"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140773" version="1" comment="libXxf86dga1 is &lt;1.1.4-3.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049870"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140774" version="1" comment="libXxf86vm1 is &lt;1.1.3-3.54" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049875"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140775" version="1" comment="libXxf86vm1-32bit is &lt;1.1.3-3.54" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049875"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141442" version="1" comment="libaugeas0 is &lt;1.2.0-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050080"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141443" version="1" comment="libblkid1 is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141444" version="1" comment="libblkid1-32bit is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141445" version="1" comment="libmount1 is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141446" version="1" comment="libmount1-32bit is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038355"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141447" version="1" comment="libsmartcols1 is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141448" version="1" comment="libuuid-devel is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141449" version="1" comment="libuuid1 is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141450" version="1" comment="libuuid1-32bit is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141451" version="1" comment="python-libmount is &lt;2.25-6.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050082"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141452" version="1" comment="util-linux is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141453" version="1" comment="util-linux-lang is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141454" version="1" comment="util-linux-systemd is &lt;2.25-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050083"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141455" version="1" comment="uuidd is &lt;2.25-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050083"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141456" version="1" comment="libcgroup1 is &lt;0.41.rc1-1.30" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034326"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050084"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141457" version="1" comment="libdcerpc-binding0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141458" version="1" comment="libdcerpc-binding0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141459" version="1" comment="libdcerpc0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141460" version="1" comment="libdcerpc0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141461" version="1" comment="libgensec0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141462" version="1" comment="libgensec0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141463" version="1" comment="libndr-krb5pac0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141464" version="1" comment="libndr-krb5pac0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141465" version="1" comment="libndr-nbt0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141466" version="1" comment="libndr-nbt0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141467" version="1" comment="libndr-standard0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141468" version="1" comment="libndr-standard0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141469" version="1" comment="libndr0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141470" version="1" comment="libndr0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141471" version="1" comment="libnetapi0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141472" version="1" comment="libnetapi0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141473" version="1" comment="libpdb0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037471"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141474" version="1" comment="libpdb0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037470"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141475" version="1" comment="libregistry0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141476" version="1" comment="libsamba-credentials0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141477" version="1" comment="libsamba-credentials0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141478" version="1" comment="libsamba-hostconfig0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141479" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141480" version="1" comment="libsamba-util0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141481" version="1" comment="libsamba-util0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141482" version="1" comment="libsamdb0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141483" version="1" comment="libsamdb0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141484" version="1" comment="libsmbclient-raw0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141485" version="1" comment="libsmbclient-raw0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141486" version="1" comment="libsmbclient0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141487" version="1" comment="libsmbclient0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141488" version="1" comment="libsmbconf0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141489" version="1" comment="libsmbconf0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141490" version="1" comment="libsmbldap0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141491" version="1" comment="libsmbldap0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141492" version="1" comment="libtevent-util0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141493" version="1" comment="libtevent-util0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141494" version="1" comment="libwbclient0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141495" version="1" comment="libwbclient0-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141496" version="1" comment="samba is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141497" version="1" comment="samba-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141498" version="1" comment="samba-client is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141499" version="1" comment="samba-client-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141500" version="1" comment="samba-doc is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141501" version="1" comment="samba-libs is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141502" version="1" comment="samba-libs-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141503" version="1" comment="samba-winbind is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141504" version="1" comment="samba-winbind-32bit is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140838" version="1" comment="libdmx1 is &lt;1.1.3-3.52" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036209"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141505" version="1" comment="libecpg6 is &lt;9.3.5-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141506" version="1" comment="libpq5 is &lt;9.3.5-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141507" version="1" comment="libpq5-32bit is &lt;9.3.5-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141508" version="1" comment="postgresql93 is &lt;9.3.5-2.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038473"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140839" version="1" comment="libevent-2_0-5 is &lt;2.0.21-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049884"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140840" version="1" comment="libexif12 is &lt;0.6.21-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140841" version="1" comment="libexif12-32bit is &lt;0.6.21-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141509" version="1" comment="libfbembed2_5 is &lt;2.5.2.26539-13.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035737"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050088"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141510" version="1" comment="libfreebl3 is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141511" version="1" comment="libfreebl3-32bit is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141512" version="1" comment="libsoftokn3 is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141513" version="1" comment="libsoftokn3-32bit is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141514" version="1" comment="mozilla-nss is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141515" version="1" comment="mozilla-nss-32bit is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141516" version="1" comment="mozilla-nss-certs is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141517" version="1" comment="mozilla-nss-certs-32bit is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141518" version="1" comment="mozilla-nss-tools is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141519" version="1" comment="libfreetype6 is &lt;2.5.3-2.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033880"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050090"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141520" version="1" comment="libfreetype6-32bit is &lt;2.5.3-2.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050090"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141521" version="1" comment="libgadu3 is &lt;1.11.4-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037949"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050091"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140590" version="1" comment="libgc1 is &lt;7.2d-3.77" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049817"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141522" version="1" comment="libgcrypt20 is &lt;1.6.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050092"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141523" version="1" comment="libgcrypt20-32bit is &lt;1.6.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038772"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050092"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141524" version="1" comment="libgnomesu is &lt;1.0.0-352.84" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032348"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050093"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141525" version="1" comment="libgnomesu-lang is &lt;1.0.0-352.84" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034574"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050093"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141526" version="1" comment="libgnomesu0 is &lt;1.0.0-352.84" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034575"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050093"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140845" version="1" comment="libgssglue1 is &lt;0.4-3.83" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034912"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049887"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140846" version="1" comment="libgssglue1-32bit is &lt;0.4-3.83" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041116"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049887"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141527" version="1" comment="libgudev-1_0-0 is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141528" version="1" comment="libgudev-1_0-0-32bit is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037376"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141529" version="1" comment="libudev1 is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141530" version="1" comment="libudev1-32bit is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141531" version="1" comment="systemd is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141532" version="1" comment="systemd-32bit is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141533" version="1" comment="systemd-bash-completion is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141534" version="1" comment="systemd-sysvinit is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141535" version="1" comment="udev is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141536" version="1" comment="libid3tag0 is &lt;0.15.1b-182.58" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141537" version="1" comment="libipa_hbac0 is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141538" version="1" comment="libsss_idmap0 is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141539" version="1" comment="python-sssd-config is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141540" version="1" comment="sssd is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034052"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141541" version="1" comment="sssd-32bit is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141542" version="1" comment="sssd-ad is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141543" version="1" comment="sssd-ipa is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141544" version="1" comment="sssd-krb5 is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038196"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141545" version="1" comment="sssd-krb5-common is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038197"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141546" version="1" comment="sssd-ldap is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038198"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141547" version="1" comment="sssd-proxy is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141548" version="1" comment="sssd-tools is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141549" version="1" comment="libjavascriptcoregtk-1_0-0 is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038615"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141550" version="1" comment="libjavascriptcoregtk-1_0-0-32bit is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038616"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141551" version="1" comment="libjavascriptcoregtk-3_0-0 is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038625"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141552" version="1" comment="libwebkit2gtk-3_0-25 is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038627"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141553" version="1" comment="libwebkitgtk-1_0-0 is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038617"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141554" version="1" comment="libwebkitgtk-1_0-0-32bit is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038618"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141555" version="1" comment="libwebkitgtk-3_0-0 is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141556" version="1" comment="libwebkitgtk2-lang is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141557" version="1" comment="libwebkitgtk3-lang is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141558" version="1" comment="typelib-1_0-JavaScriptCore-3_0 is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141559" version="1" comment="typelib-1_0-WebKit-3_0 is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141560" version="1" comment="libjbig2 is &lt;2.0-12.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038053"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049846"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140690" version="1" comment="libjbig2-32bit is &lt;2.0-12.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038054"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049846"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140691" version="1" comment="libjson-c2 is &lt;0.11-2.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049847"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140692" version="1" comment="libjson-c2-32bit is &lt;0.11-2.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041001"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049847"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140875" version="1" comment="libltdl7 is &lt;2.4.2-14.60" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033552"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049894"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140876" version="1" comment="libltdl7-32bit is &lt;2.4.2-14.60" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033550"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049894"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140879" version="1" comment="liblua5_2 is &lt;5.2.2-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038155"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049895"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140881" version="1" comment="lua is &lt;5.2.2-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038156"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049895"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141561" version="1" comment="liblzo2-2 is &lt;2.08-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038032"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049897"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140883" version="1" comment="liblzo2-2-32bit is &lt;2.08-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038030"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049897"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141562" version="1" comment="libmikmod3 is &lt;3.2.0-4.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141563" version="1" comment="libmikmod3-32bit is &lt;3.2.0-4.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041124"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140884" version="1" comment="libmms0 is &lt;0.6.2-15.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037887"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049898"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140885" version="1" comment="libmodplug1 is &lt;0.8.8.4-13.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037421"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049899"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141564" version="1" comment="libmspack0 is &lt;0.4-3.64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038420"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050099"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140886" version="1" comment="libmusicbrainz4 is &lt;2.1.5-27.86" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049900"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141565" version="1" comment="libmysqlclient18 is &lt;10.0.11-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141566" version="1" comment="libmysqlclient18-32bit is &lt;10.0.11-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141567" version="1" comment="libmysqlclient_r18 is &lt;10.0.11-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141568" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.11-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141569" version="1" comment="mariadb is &lt;10.0.11-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141570" version="1" comment="mariadb-client is &lt;10.0.11-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141571" version="1" comment="mariadb-errormessages is &lt;10.0.11-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140887" version="1" comment="libneon27 is &lt;0.30.0-3.65" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049901"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141572" version="1" comment="libopenssl0_9_8 is &lt;0.9.8j-59.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050101"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141573" version="1" comment="libopenssl0_9_8-32bit is &lt;0.9.8j-59.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050101"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141574" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141575" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141576" version="1" comment="openssl is &lt;1.0.1i-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141577" version="1" comment="libpango-1_0-0 is &lt;1.36.3-4.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041004"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141578" version="1" comment="libpango-1_0-0-32bit is &lt;1.36.3-4.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041005"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141579" version="1" comment="pango-modules is &lt;1.36.3-4.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141580" version="1" comment="pango-modules-32bit is &lt;1.36.3-4.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141581" version="1" comment="typelib-1_0-Pango-1_0 is &lt;1.36.3-4.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140900" version="1" comment="libpcsclite1 is &lt;1.8.10-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033875"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141582" version="1" comment="libpcsclite1-32bit is &lt;1.8.10-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140901" version="1" comment="pcsc-lite is &lt;1.8.10-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032526"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141583" version="1" comment="libpng12-0 is &lt;1.2.50-8.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030967"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050104"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141584" version="1" comment="libpng12-0-32bit is &lt;1.2.50-8.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050104"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141585" version="1" comment="libpng16-16 is &lt;1.6.8-2.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037593"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050105"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141586" version="1" comment="libpng16-16-32bit is &lt;1.6.8-2.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037594"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050105"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141587" version="1" comment="libpolkit0 is &lt;0.112-2.189" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034515"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050106"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141588" version="1" comment="libpolkit0-32bit is &lt;0.112-2.189" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034514"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050106"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141589" version="1" comment="polkit is &lt;0.112-2.189" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034518"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050106"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141590" version="1" comment="typelib-1_0-Polkit-1_0 is &lt;0.112-2.189" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038998"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050106"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141591" version="1" comment="libpoppler-glib8 is &lt;0.24.4-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141592" version="1" comment="libpoppler-qt4-4 is &lt;0.24.4-3.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037283"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050108"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141593" version="1" comment="libpoppler44 is &lt;0.24.4-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141594" version="1" comment="poppler-tools is &lt;0.24.4-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141595" version="1" comment="libproxy1 is &lt;0.4.11-11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036471"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141596" version="1" comment="libproxy1-32bit is &lt;0.4.11-11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141597" version="1" comment="libproxy1-config-gnome3 is &lt;0.4.11-11.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141598" version="1" comment="libproxy1-config-gnome3-32bit is &lt;0.4.11-11.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037241"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141599" version="1" comment="libproxy1-networkmanager is &lt;0.4.11-11.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036484"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141600" version="1" comment="libproxy1-networkmanager-32bit is &lt;0.4.11-11.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140915" version="1" comment="libpulse-mainloop-glib0 is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033659"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140916" version="1" comment="libpulse-mainloop-glib0-32bit is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140917" version="1" comment="libpulse0 is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140918" version="1" comment="libpulse0-32bit is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033660"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140919" version="1" comment="pulseaudio is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032767"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140920" version="1" comment="pulseaudio-esound-compat is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033662"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140921" version="1" comment="pulseaudio-gdm-hooks is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033663"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140922" version="1" comment="pulseaudio-lang is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033664"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141601" version="1" comment="pulseaudio-module-bluetooth is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033665"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141602" version="1" comment="pulseaudio-module-gconf is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033666"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141603" version="1" comment="pulseaudio-module-jack is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033667"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141604" version="1" comment="pulseaudio-module-lirc is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033668"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140923" version="1" comment="pulseaudio-module-x11 is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033669"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140924" version="1" comment="pulseaudio-module-zeroconf is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033670"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140925" version="1" comment="pulseaudio-utils is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033671"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141605" version="1" comment="libpython2_7-1_0 is &lt;2.7.7-2.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141606" version="1" comment="libpython2_7-1_0-32bit is &lt;2.7.7-2.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034538"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141607" version="1" comment="python-base is &lt;2.7.7-2.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141608" version="1" comment="python-devel is &lt;2.7.7-2.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141609" version="1" comment="python-xml is &lt;2.7.7-2.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141610" version="1" comment="libpython3_4m1_0 is &lt;3.4.1-2.38" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050112"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141611" version="1" comment="python3-base is &lt;3.4.1-2.38" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050112"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141612" version="1" comment="libqt4 is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031513"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141613" version="1" comment="libqt4-32bit is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141614" version="1" comment="libqt4-qt3support is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141615" version="1" comment="libqt4-qt3support-32bit is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141616" version="1" comment="libqt4-sql is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141617" version="1" comment="libqt4-sql-32bit is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141618" version="1" comment="libqt4-sql-mysql is &lt;4.8.6-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034705"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141619" version="1" comment="libqt4-sql-mysql-32bit is &lt;4.8.6-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034707"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141620" version="1" comment="libqt4-sql-postgresql is &lt;4.8.6-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034711"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141621" version="1" comment="libqt4-sql-postgresql-32bit is &lt;4.8.6-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034709"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141622" version="1" comment="libqt4-sql-sqlite is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141623" version="1" comment="libqt4-sql-sqlite-32bit is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141624" version="1" comment="libqt4-sql-unixODBC is &lt;4.8.6-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034714"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141625" version="1" comment="libqt4-sql-unixODBC-32bit is &lt;4.8.6-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034712"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141626" version="1" comment="libqt4-x11 is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031512"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141627" version="1" comment="libqt4-x11-32bit is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140928" version="1" comment="libraptor2-0 is &lt;2.0.10-3.67" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041009"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049912"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141628" version="1" comment="raptor is &lt;2.0.10-3.67" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034836"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049912"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141629" version="1" comment="libraw9 is &lt;0.15.4-3.88" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038719"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050115"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141630" version="1" comment="libreoffice is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141631" version="1" comment="libreoffice-base is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141632" version="1" comment="libreoffice-base-drivers-mysql is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141633" version="1" comment="libreoffice-base-drivers-postgresql is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141634" version="1" comment="libreoffice-calc is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141635" version="1" comment="libreoffice-calc-extensions is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141636" version="1" comment="libreoffice-draw is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141637" version="1" comment="libreoffice-filters-optional is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141638" version="1" comment="libreoffice-gnome is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141639" version="1" comment="libreoffice-icon-theme-tango is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141640" version="1" comment="libreoffice-impress is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141641" version="1" comment="libreoffice-l10n-af is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141642" version="1" comment="libreoffice-l10n-ar is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141643" version="1" comment="libreoffice-l10n-ca is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141644" version="1" comment="libreoffice-l10n-cs is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141645" version="1" comment="libreoffice-l10n-da is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141646" version="1" comment="libreoffice-l10n-de is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141647" version="1" comment="libreoffice-l10n-en is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141648" version="1" comment="libreoffice-l10n-es is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141649" version="1" comment="libreoffice-l10n-fi is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141650" version="1" comment="libreoffice-l10n-fr is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141651" version="1" comment="libreoffice-l10n-gu is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141652" version="1" comment="libreoffice-l10n-hi is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141653" version="1" comment="libreoffice-l10n-hu is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141654" version="1" comment="libreoffice-l10n-it is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141655" version="1" comment="libreoffice-l10n-ja is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141656" version="1" comment="libreoffice-l10n-ko is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141657" version="1" comment="libreoffice-l10n-nb is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141658" version="1" comment="libreoffice-l10n-nl is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141659" version="1" comment="libreoffice-l10n-nn is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141660" version="1" comment="libreoffice-l10n-pl is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141661" version="1" comment="libreoffice-l10n-pt-BR is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034145"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141662" version="1" comment="libreoffice-l10n-pt-PT is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141663" version="1" comment="libreoffice-l10n-ru is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141664" version="1" comment="libreoffice-l10n-sk is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141665" version="1" comment="libreoffice-l10n-sv is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141666" version="1" comment="libreoffice-l10n-xh is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141667" version="1" comment="libreoffice-l10n-zh-Hans is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038231"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141668" version="1" comment="libreoffice-l10n-zh-Hant is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141669" version="1" comment="libreoffice-l10n-zu is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141670" version="1" comment="libreoffice-mailmerge is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141671" version="1" comment="libreoffice-math is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141672" version="1" comment="libreoffice-officebean is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141673" version="1" comment="libreoffice-pyuno is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141674" version="1" comment="libreoffice-writer is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141675" version="1" comment="libreoffice-writer-extensions is &lt;4.3.1.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141676" version="1" comment="librpcsecgss3 is &lt;0.19-16.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141677" version="1" comment="libsilc-1_1-2 is &lt;1.1.10-24.128" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041010"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141678" version="1" comment="libsilcclient-1_1-3 is &lt;1.1.10-24.128" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141679" version="1" comment="silc-toolkit is &lt;1.1.10-24.128" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140932" version="1" comment="libsmi is &lt;0.4.8-18.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034035"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140933" version="1" comment="libsmi2 is &lt;0.4.8-18.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041012"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141680" version="1" comment="libsndfile1 is &lt;1.0.25-18.75" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050119"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141681" version="1" comment="libsndfile1-32bit is &lt;1.0.25-18.75" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038351"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050119"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141682" version="1" comment="libsnmp30 is &lt;5.7.2.1-3.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037001"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141683" version="1" comment="libsnmp30-32bit is &lt;5.7.2.1-3.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141684" version="1" comment="net-snmp is &lt;5.7.2.1-3.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030550"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141685" version="1" comment="perl-SNMP is &lt;5.7.2.1-3.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030792"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141686" version="1" comment="snmp-mibs is &lt;5.7.2.1-3.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031643"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141687" version="1" comment="libsoup-2_4-1 is &lt;2.44.2-1.46" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034629"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141688" version="1" comment="libsoup-2_4-1-32bit is &lt;2.44.2-1.46" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034627"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141689" version="1" comment="libsoup-lang is &lt;2.44.2-1.46" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041047"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141690" version="1" comment="typelib-1_0-Soup-2_4 is &lt;2.44.2-1.46" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041013"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141691" version="1" comment="libspice-client-glib-2_0-8 is &lt;0.25-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050122"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141692" version="1" comment="libspice-client-gtk-2_0-4 is &lt;0.25-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037407"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050122"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141693" version="1" comment="libspice-client-gtk-3_0-4 is &lt;0.25-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037408"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050122"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141694" version="1" comment="libspice-controller0 is &lt;0.25-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037398"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050122"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141695" version="1" comment="typelib-1_0-SpiceClientGlib-2_0 is &lt;0.25-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050122"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141696" version="1" comment="typelib-1_0-SpiceClientGtk-3_0 is &lt;0.25-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050122"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141697" version="1" comment="libssh4 is &lt;0.6.3-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035367"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050123"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140963" version="1" comment="libtag1 is &lt;1.9.1-1.265" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036958"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049922"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141698" version="1" comment="libtag1-32bit is &lt;1.9.1-1.265" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036959"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049922"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140964" version="1" comment="libtag_c0 is &lt;1.9.1-1.265" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049922"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141699" version="1" comment="libtag_c0-32bit is &lt;1.9.1-1.265" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049922"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140965" version="1" comment="taglib is &lt;1.9.1-1.265" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034909"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049922"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141700" version="1" comment="libtasn1 is &lt;3.7-2.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050124"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141701" version="1" comment="libtasn1-6 is &lt;3.7-2.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038681"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050124"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141702" version="1" comment="libtasn1-6-32bit is &lt;3.7-2.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038682"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050124"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141703" version="1" comment="libtiff5 is &lt;4.0.3-9.78" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141704" version="1" comment="libtiff5-32bit is &lt;4.0.3-9.78" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140969" version="1" comment="libudisks2-0 is &lt;2.1.3-1.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037861"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049924"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140970" version="1" comment="udisks2 is &lt;2.1.3-1.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049924"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140971" version="1" comment="udisks2-lang is &lt;2.1.3-1.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037865"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049924"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141705" version="1" comment="libvirt is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141706" version="1" comment="libvirt-client is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141707" version="1" comment="libvirt-client-32bit is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141708" version="1" comment="libvirt-daemon is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141709" version="1" comment="libvirt-daemon-config-network is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141710" version="1" comment="libvirt-daemon-config-nwfilter is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141711" version="1" comment="libvirt-daemon-driver-interface is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141712" version="1" comment="libvirt-daemon-driver-libxl is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141713" version="1" comment="libvirt-daemon-driver-lxc is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141714" version="1" comment="libvirt-daemon-driver-network is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141715" version="1" comment="libvirt-daemon-driver-nodedev is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141716" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141717" version="1" comment="libvirt-daemon-driver-qemu is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141718" version="1" comment="libvirt-daemon-driver-secret is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141719" version="1" comment="libvirt-daemon-driver-storage is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141720" version="1" comment="libvirt-daemon-lxc is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141721" version="1" comment="libvirt-daemon-qemu is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141722" version="1" comment="libvirt-daemon-xen is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141723" version="1" comment="libvirt-doc is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141724" version="1" comment="libvorbis0 is &lt;1.3.3-8.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034804"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140999" version="1" comment="libvorbis0-32bit is &lt;1.3.3-8.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034803"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141725" version="1" comment="libvorbisenc2 is &lt;1.3.3-8.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034806"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141001" version="1" comment="libvorbisenc2-32bit is &lt;1.3.3-8.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034805"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141726" version="1" comment="libvorbisfile3 is &lt;1.3.3-8.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034808"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141003" version="1" comment="libvorbisfile3-32bit is &lt;1.3.3-8.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034807"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141727" version="1" comment="libvte9 is &lt;0.28.2-17.83" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037174"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141728" version="1" comment="libxcb-dri2-0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141729" version="1" comment="libxcb-dri2-0-32bit is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035996"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141730" version="1" comment="libxcb-glx0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141731" version="1" comment="libxcb-glx0-32bit is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141732" version="1" comment="libxcb-randr0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141733" version="1" comment="libxcb-render0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141734" version="1" comment="libxcb-render0-32bit is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036012"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141735" version="1" comment="libxcb-shape0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036023"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141736" version="1" comment="libxcb-shm0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036027"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141737" version="1" comment="libxcb-shm0-32bit is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036028"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141738" version="1" comment="libxcb-sync1 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040931"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141739" version="1" comment="libxcb-xf86dri0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141740" version="1" comment="libxcb-xfixes0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036043"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141741" version="1" comment="libxcb-xfixes0-32bit is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141742" version="1" comment="libxcb-xkb1 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141743" version="1" comment="libxcb-xkb1-32bit is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040934"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141744" version="1" comment="libxcb-xv0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141745" version="1" comment="libxcb1 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141746" version="1" comment="libxcb1-32bit is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036068"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141747" version="1" comment="libxerces-c-3_1 is &lt;3.1.1-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038592"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050129"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141748" version="1" comment="libxerces-c-3_1-32bit is &lt;3.1.1-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038593"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050129"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141749" version="1" comment="libxml2-2 is &lt;2.9.1-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141750" version="1" comment="libxml2-2-32bit is &lt;2.9.1-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141751" version="1" comment="libxml2-tools is &lt;2.9.1-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141752" version="1" comment="libyaml-0-2 is &lt;0.1.6-1.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050131"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141753" version="1" comment="libzip2 is &lt;0.11.1-4.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050132"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141754" version="1" comment="libzmq3 is &lt;4.0.4-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038947"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141038" version="1" comment="logrotate is &lt;3.8.7-3.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034546"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049936"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140466" version="1" comment="m4 is &lt;1.4.16-15.74" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040949"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049781"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141042" version="1" comment="mipv6d is &lt;2.0.2.umip.0.4-19.77" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033973"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049940"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141755" version="1" comment="mozilla-nspr is &lt;4.10.7-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050134"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141756" version="1" comment="mozilla-nspr-32bit is &lt;4.10.7-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050134"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141757" version="1" comment="mutt is &lt;1.5.21-44.38" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050135"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141758" version="1" comment="ntp is &lt;4.2.6p5-24.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050136"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141759" version="1" comment="ntp-doc is &lt;4.2.6p5-24.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050136"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141044" version="1" comment="opensc is &lt;0.13.0-1.122" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030852"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141760" version="1" comment="openslp is &lt;2.0.0-2.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141761" version="1" comment="openslp-32bit is &lt;2.0.0-2.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141762" version="1" comment="openssh is &lt;6.6p1-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050138"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141763" version="1" comment="openssh-helpers is &lt;6.6p1-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050138"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141764" version="1" comment="pam is &lt;1.1.8-11.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032521"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050139"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141765" version="1" comment="pam-32bit is &lt;1.1.8-11.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032517"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050139"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141766" version="1" comment="pam-doc is &lt;1.1.8-11.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034725"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050139"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141767" version="1" comment="pam-modules is &lt;12.1-23.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032520"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141060" version="1" comment="pam-modules-32bit is &lt;12.1-23.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032519"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141061" version="1" comment="pam_krb5 is &lt;2.4.4-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031798"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141062" version="1" comment="pam_krb5-32bit is &lt;2.4.4-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031796"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141063" version="1" comment="pam_ssh is &lt;2.0-1.40" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041017"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141064" version="1" comment="pam_ssh-32bit is &lt;2.0-1.40" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141768" version="1" comment="patch is &lt;2.7.1-5.191" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050140"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141065" version="1" comment="pcsc-ccid is &lt;1.4.14-1.45" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049952"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141769" version="1" comment="perl is &lt;5.18.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141770" version="1" comment="perl-32bit is &lt;5.18.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030599"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141771" version="1" comment="perl-base is &lt;5.18.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031056"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141772" version="1" comment="perl-doc is &lt;5.18.2-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141066" version="1" comment="perl-Config-IniFiles is &lt;2.82-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041019"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141067" version="1" comment="perl-HTML-Parser is &lt;3.71-1.178" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033545"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049954"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141068" version="1" comment="perl-LWP-Protocol-https is &lt;6.04-5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141069" version="1" comment="perl-Tk is &lt;804.031-3.82" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030651"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141773" version="1" comment="perl-YAML-LibYAML is &lt;0.38-7.61" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141774" version="1" comment="pidgin-otr is &lt;4.0.0-6.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033522"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141072" version="1" comment="ppp is &lt;2.4.7-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031955"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049959"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141775" version="1" comment="procmail is &lt;3.22-267.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038135"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141776" version="1" comment="puppet is &lt;3.6.2-3.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033794"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050145"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141777" version="1" comment="python is &lt;2.7.7-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050146"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141778" version="1" comment="python-curses is &lt;2.7.7-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050146"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141779" version="1" comment="python-tk is &lt;2.7.7-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050146"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141780" version="1" comment="python3 is &lt;3.4.1-2.76" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050147"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141781" version="1" comment="python-cupshelpers is &lt;1.4.5-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034773"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050148"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141782" version="1" comment="system-config-printer is &lt;1.4.5-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034775"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050148"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141783" version="1" comment="system-config-printer-common is &lt;1.4.5-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036659"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050148"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141784" version="1" comment="system-config-printer-common-lang is &lt;1.4.5-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036660"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050148"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141785" version="1" comment="system-config-printer-dbus-service is &lt;1.4.5-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050148"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141786" version="1" comment="udev-configure-printer is &lt;1.4.5-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034776"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050148"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141787" version="1" comment="python-imaging is &lt;1.1.7-21.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037883"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050149"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141788" version="1" comment="python-libxml2 is &lt;2.9.1-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141789" version="1" comment="python-pyOpenSSL is &lt;0.14-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037424"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141085" version="1" comment="python-pywbem is &lt;0.7.0-4.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037881"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049964"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141790" version="1" comment="qemu is &lt;2.0.0-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141791" version="1" comment="qemu-block-curl is &lt;2.0.0-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141792" version="1" comment="qemu-ipxe is &lt;1.0.0-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141793" version="1" comment="qemu-kvm is &lt;2.0.0-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141794" version="1" comment="qemu-seabios is &lt;1.7.4-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050153"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141795" version="1" comment="qemu-sgabios is &lt;8-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050154"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141796" version="1" comment="qemu-tools is &lt;2.0.0-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141797" version="1" comment="qemu-vgabios is &lt;1.7.4-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050153"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141798" version="1" comment="qemu-x86 is &lt;2.0.0-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141103" version="1" comment="radvd is &lt;1.9.7-2.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034726"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141799" version="1" comment="rhythmbox is &lt;3.0.2-1.92" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050155"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141800" version="1" comment="rhythmbox-lang is &lt;3.0.2-1.92" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037164"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050155"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141801" version="1" comment="rsync is &lt;3.1.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030761"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141802" version="1" comment="rsyslog is &lt;8.4.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033100"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141122" version="1" comment="rtkit is &lt;0.11_git201205151338-8.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037388"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141123" version="1" comment="ruby is &lt;2.1-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030431"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049977"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141803" version="1" comment="shim is &lt;0.7-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038277"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050158"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141804" version="1" comment="socat is &lt;1.7.2.4-1.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050159"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141805" version="1" comment="squashfs is &lt;4.3-1.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041022"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050160"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141806" version="1" comment="strongswan is &lt;5.1.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031037"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050161"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141807" version="1" comment="strongswan-doc is &lt;5.1.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031036"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050161"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141808" version="1" comment="strongswan-ipsec is &lt;5.1.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033871"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050161"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141809" version="1" comment="strongswan-libs0 is &lt;5.1.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033872"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050161"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141810" version="1" comment="sudo is &lt;1.8.10p3-1.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030544"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050162"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141811" version="1" comment="sysconfig is &lt;0.83.7-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032547"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050163"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141812" version="1" comment="sysconfig-netconfig is &lt;0.83.7-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041023"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050163"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141134" version="1" comment="syslog-service is &lt;2.0-778.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049986"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141813" version="1" comment="sysvinit-tools is &lt;2.88+-94.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041024"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050164"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141139" version="1" comment="whois is &lt;5.1.1-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049989"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141814" version="1" comment="telepathy-gabble is &lt;0.18.1-3.268" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034325"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141815" version="1" comment="telepathy-idle is &lt;0.2.0-1.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035952"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050166"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141816" version="1" comment="tftp is &lt;5.2-8.84" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034593"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050167"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141817" version="1" comment="tigervnc is &lt;1.3.0-17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050168"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141818" version="1" comment="xorg-x11-Xvnc is &lt;1.3.0-17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050168"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141819" version="1" comment="unixODBC is &lt;2.3.1-4.95" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050169"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141820" version="1" comment="unixODBC-32bit is &lt;2.3.1-4.95" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050169"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141821" version="1" comment="vino is &lt;3.10.1-1.86" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034537"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141822" version="1" comment="vino-lang is &lt;3.10.1-1.86" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034536"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141823" version="1" comment="vorbis-tools is &lt;1.4.0-16.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030840"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050171"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141824" version="1" comment="vorbis-tools-lang is &lt;1.4.0-16.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038438"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050171"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141825" version="1" comment="w3m is &lt;0.5.3-153.145" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030675"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140672" version="1" comment="wdiff is &lt;1.2.1-3.64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040985"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049833"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141826" version="1" comment="wget is &lt;1.14-4.83" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030457"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050173"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141827" version="1" comment="wireshark is &lt;1.10.9-1.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050174"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141828" version="1" comment="xalan-j2 is &lt;2.7.0-264.133" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037987"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141829" version="1" comment="xen is &lt;4.4.1_06-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050176"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141830" version="1" comment="xen-kmp-default is &lt;4.4.1_06_k3.12.28_4-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050177"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141831" version="1" comment="xen-libs is &lt;4.4.1_06-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050176"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141832" version="1" comment="xen-libs-32bit is &lt;4.4.1_06-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050176"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141833" version="1" comment="xf86-video-intel is &lt;2.99.914-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041025"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050178"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141167" version="1" comment="xinetd is &lt;2.3.15-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031953"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141168" version="1" comment="xlockmore is &lt;5.43-5.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041026"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050003"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141834" version="1" comment="xorg-x11 is &lt;7.6_1-14.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031335"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050179"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141835" version="1" comment="xorg-x11-essentials is &lt;7.6_1-14.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041027"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050179"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141171" version="1" comment="xrdb is &lt;1.1.0-3.58" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041028"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050005"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141836" version="1" comment="xorg-x11-libs is &lt;7.6-45.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141837" version="1" comment="xorg-x11-server is &lt;7.6_1.15.2-12.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050181"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141838" version="1" comment="xorg-x11-server-extra is &lt;7.6_1.15.2-12.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050181"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141839" version="1" comment="yast2 is &lt;3.1.108-1.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032603"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050182"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141840" version="1" comment="yast2-core is &lt;3.1.11-1.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030808"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050183"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141178" version="1" comment="zoo is &lt;2.10-1020.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030614"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050011"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109224" version="1" comment="DirectFB is &lt;1.7.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038662"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044963"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109231" version="1" comment="lib++dfb-1_7-1 is &lt;1.7.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044963"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109233" version="1" comment="libdirectfb-1_7-1 is &lt;1.7.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044963"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109234" version="1" comment="libdirectfb-1_7-1-32bit is &lt;1.7.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038680"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044963"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118774" version="1" comment="sled-release is ==12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046486"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102628" version="1" comment="ImageMagick is &lt;6.8.8.1-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102634" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102638" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102637" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102640" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116011" version="1" comment="MozillaFirefox is &lt;38.4.0esr-51.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045901"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116014" version="1" comment="MozillaFirefox-translations is &lt;38.4.0esr-51.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045901"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141841" version="1" comment="aaa_base is &lt;13.2+git20140911.61c1681-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141842" version="1" comment="aaa_base-extras is &lt;13.2+git20140911.61c1681-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034235"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141843" version="1" comment="accountsservice is &lt;0.6.35-3.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037053"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050185"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141844" version="1" comment="accountsservice-lang is &lt;0.6.35-3.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050185"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141845" version="1" comment="libaccountsservice0 is &lt;0.6.35-3.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050185"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141846" version="1" comment="typelib-1_0-AccountsService-1_0 is &lt;0.6.35-3.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050185"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110200" version="1" comment="autofs is &lt;5.0.9-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045083"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141847" version="1" comment="bind-libs is &lt;9.9.6P1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141848" version="1" comment="bind-libs-32bit is &lt;9.9.6P1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141849" version="1" comment="bind-utils is &lt;9.9.6P1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141850" version="1" comment="binutils is &lt;2.25.0-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030609"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050187"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113975" version="1" comment="busybox is &lt;1.21.1-3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038761"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045592"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141851" version="1" comment="cifs-utils is &lt;6.4-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050188"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109618" version="1" comment="clamav is &lt;0.98.7-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044990"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141852" version="1" comment="colord is &lt;1.1.7-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141853" version="1" comment="colord-lang is &lt;1.1.7-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141854" version="1" comment="libcolord2 is &lt;1.1.7-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141855" version="1" comment="libcolord2-32bit is &lt;1.1.7-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141856" version="1" comment="libcolorhug2 is &lt;1.1.7-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040963"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114699" version="1" comment="coreutils is &lt;8.22-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045689"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114700" version="1" comment="coreutils-lang is &lt;8.22-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034779"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045689"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102938" version="1" comment="cpio is &lt;2.11-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102939" version="1" comment="cpio-lang is &lt;2.11-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115214" version="1" comment="cpp48 is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115215" version="1" comment="gcc48 is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115258" version="1" comment="gcc48-32bit is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115217" version="1" comment="gcc48-c++ is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039005"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115239" version="1" comment="gcc48-gij is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039027"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115238" version="1" comment="gcc48-gij-32bit is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039026"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115219" version="1" comment="gcc48-info is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039007"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115224" version="1" comment="libasan0 is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039012"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115263" version="1" comment="libasan0-32bit is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115242" version="1" comment="libgcj48 is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039030"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115241" version="1" comment="libgcj48-32bit is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039029"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115245" version="1" comment="libgcj48-jar is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039033"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115246" version="1" comment="libgcj_bc1 is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039034"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115232" version="1" comment="libstdc++48-devel is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115271" version="1" comment="libstdc++48-devel-32bit is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140508" version="1" comment="cron is &lt;4.2-58.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030630"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049795"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140509" version="1" comment="cronie is &lt;1.4.11-58.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049796"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110315" version="1" comment="cups is &lt;1.7.5-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030428"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045101"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110316" version="1" comment="cups-client is &lt;1.7.5-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045101"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110319" version="1" comment="cups-libs is &lt;1.7.5-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030427"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045101"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110320" version="1" comment="cups-libs-32bit is &lt;1.7.5-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030730"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045101"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113515" version="1" comment="cups-filters is &lt;1.0.58-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038657"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045529"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113516" version="1" comment="cups-filters-cups-browsed is &lt;1.0.58-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038658"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045529"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113518" version="1" comment="cups-filters-foomatic-rip is &lt;1.0.58-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038660"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045529"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113519" version="1" comment="cups-filters-ghostscript is &lt;1.0.58-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045529"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110168" version="1" comment="curl is &lt;7.37.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045078"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110172" version="1" comment="libcurl4 is &lt;7.37.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045078"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110171" version="1" comment="libcurl4-32bit is &lt;7.37.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045078"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107559" version="1" comment="dbus-1 is &lt;1.8.16-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044679"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107561" version="1" comment="dbus-1-x11 is &lt;1.8.16-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044679"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107564" version="1" comment="libdbus-1-3 is &lt;1.8.16-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044679"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107565" version="1" comment="libdbus-1-3-32bit is &lt;1.8.16-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044679"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141857" version="1" comment="dhcp is &lt;4.3.3-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141858" version="1" comment="dhcp-client is &lt;4.3.3-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030726"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141859" version="1" comment="dnsmasq is &lt;2.71-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031669"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050191"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009138243" version="1" comment="dracut is &lt;037-66.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113256" version="1" comment="e2fsprogs is &lt;1.42.11-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113260" version="1" comment="libcom_err2 is &lt;1.42.11-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113261" version="1" comment="libcom_err2-32bit is &lt;1.42.11-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031457"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113264" version="1" comment="libext2fs2 is &lt;1.42.11-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106094" version="1" comment="elfutils is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106096" version="1" comment="libasm1 is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106099" version="1" comment="libdw1 is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038060"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106100" version="1" comment="libdw1-32bit is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106102" version="1" comment="libebl1 is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106103" version="1" comment="libebl1-32bit is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038064"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106106" version="1" comment="libelf1 is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106107" version="1" comment="libelf1-32bit is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038068"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141860" version="1" comment="facter is &lt;2.0.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037327"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050192"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103557" version="1" comment="file is &lt;5.19-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030456"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103559" version="1" comment="file-magic is &lt;5.19-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037852"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103561" version="1" comment="libmagic1 is &lt;5.19-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037850"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103560" version="1" comment="libmagic1-32bit is &lt;5.19-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102676" version="1" comment="finch is &lt;2.10.9-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031748"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102678" version="1" comment="libpurple is &lt;2.10.9-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031423"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102681" version="1" comment="libpurple-lang is &lt;2.10.9-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102682" version="1" comment="libpurple-meanwhile is &lt;2.10.9-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031749"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102683" version="1" comment="libpurple-tcl is &lt;2.10.9-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033532"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102684" version="1" comment="pidgin is &lt;2.10.9-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116120" version="1" comment="flash-player is &lt;11.2.202.548-111.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045917"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116121" version="1" comment="flash-player-gnome is &lt;11.2.202.548-111.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045917"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141861" version="1" comment="ft2demos is &lt;2.5.5-7.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034838"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050193"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110488" version="1" comment="fuse is &lt;2.9.3-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033599"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110491" version="1" comment="libfuse2 is &lt;2.9.3-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109545" version="1" comment="gd is &lt;2.1.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109546" version="1" comment="gd-32bit is &lt;2.1.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141862" version="1" comment="gdm is &lt;3.10.0.1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030629"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050194"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141863" version="1" comment="gdm-branding-upstream is &lt;3.10.0.1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033988"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050194"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141864" version="1" comment="gdm-lang is &lt;3.10.0.1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033989"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050194"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141865" version="1" comment="gdmflexiserver is &lt;3.10.0.1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050194"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141866" version="1" comment="libgdm1 is &lt;3.10.0.1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038574"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050194"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141867" version="1" comment="typelib-1_0-Gdm-1_0 is &lt;3.10.0.1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038575"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050194"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141868" version="1" comment="glibc is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141869" version="1" comment="glibc-32bit is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141870" version="1" comment="glibc-devel is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141871" version="1" comment="glibc-devel-32bit is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141872" version="1" comment="glibc-i18ndata is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141873" version="1" comment="glibc-locale is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141874" version="1" comment="glibc-locale-32bit is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141875" version="1" comment="nscd is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141876" version="1" comment="gnome-keyring is &lt;3.10.1-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032328"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050196"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141877" version="1" comment="gnome-keyring-32bit is &lt;3.10.1-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032326"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050196"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141878" version="1" comment="gnome-keyring-lang is &lt;3.10.1-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050196"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141879" version="1" comment="gnome-keyring-pam is &lt;3.10.1-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036411"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050196"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141880" version="1" comment="gnome-keyring-pam-32bit is &lt;3.10.1-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036412"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050196"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141881" version="1" comment="libgck-modules-gnome-keyring is &lt;3.10.1-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036415"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050196"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107802" version="1" comment="gnome-settings-daemon is &lt;3.10.2-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038173"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044720"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107804" version="1" comment="gnome-settings-daemon-lang is &lt;3.10.2-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038175"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044720"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141882" version="1" comment="gnome-shell is &lt;3.10.4-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040981"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050197"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141883" version="1" comment="gnome-shell-browser-plugin is &lt;3.10.4-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040982"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050197"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141884" version="1" comment="gnome-shell-calendar is &lt;3.10.4-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050197"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141885" version="1" comment="gnome-shell-lang is &lt;3.10.4-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041040"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050197"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114253" version="1" comment="gnutls is &lt;3.2.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030524"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114258" version="1" comment="libgnutls28 is &lt;3.2.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114259" version="1" comment="libgnutls28-32bit is &lt;3.2.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109841" version="1" comment="gstreamer-0_10-plugins-bad is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109845" version="1" comment="gstreamer-0_10-plugins-bad-lang is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109846" version="1" comment="libgstbasecamerabinsrc-0_10-23 is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038732"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109847" version="1" comment="libgstbasecamerabinsrc-0_10-23-32bit is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038733"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109848" version="1" comment="libgstbasevideo-0_10-23 is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038734"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109849" version="1" comment="libgstbasevideo-0_10-23-32bit is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038735"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109850" version="1" comment="libgstcodecparsers-0_10-23 is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038736"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109852" version="1" comment="libgstphotography-0_10-23 is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038738"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109853" version="1" comment="libgstphotography-0_10-23-32bit is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038739"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109854" version="1" comment="libgstsignalprocessor-0_10-23 is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038740"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109855" version="1" comment="libgstsignalprocessor-0_10-23-32bit is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038741"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109856" version="1" comment="libgstvdp-0_10-23 is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038742"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109857" version="1" comment="libgstvdp-0_10-23-32bit is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038743"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141886" version="1" comment="hyper-v is &lt;6-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050198"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107566" version="1" comment="icu is &lt;52.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030777"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044680"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107572" version="1" comment="libicu52_1 is &lt;52.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044680"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107571" version="1" comment="libicu52_1-32bit is &lt;52.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038487"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044680"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107573" version="1" comment="libicu52_1-data is &lt;52.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044680"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115439" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.91-21.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115443" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.91-21.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114769" version="1" comment="java-1_7_0-openjdk-plugin is &lt;1.6.1-2.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045703"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141887" version="1" comment="java-1_8_0-openjdk-plugin is &lt;1.6.1-2.4.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050199"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141888" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.65-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050200"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141889" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.65-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050200"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141890" version="1" comment="kbd is &lt;1.15.5-8.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141891" version="1" comment="kernel-default is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141892" version="1" comment="kernel-default-devel is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141893" version="1" comment="kernel-default-extra is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141894" version="1" comment="kernel-devel is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141895" version="1" comment="kernel-macros is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141896" version="1" comment="kernel-source is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141897" version="1" comment="kernel-syms is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141898" version="1" comment="kernel-xen is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141899" version="1" comment="kernel-xen-devel is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115941" version="1" comment="krb5 is &lt;1.12.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115942" version="1" comment="krb5-32bit is &lt;1.12.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115943" version="1" comment="krb5-client is &lt;1.12.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102936" version="1" comment="libFLAC8 is &lt;1.3.0-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031366"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102937" version="1" comment="libFLAC8-32bit is &lt;1.3.0-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031364"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141900" version="1" comment="libQt5Core5 is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141901" version="1" comment="libQt5DBus5 is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038896"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141902" version="1" comment="libQt5Gui5 is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037608"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141903" version="1" comment="libQt5Widgets5 is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037614"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108654" version="1" comment="libXfont1 is &lt;1.4.7-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044832"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140753" version="1" comment="libXi6 is &lt;1.7.4-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036145"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049865"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140754" version="1" comment="libXi6-32bit is &lt;1.7.4-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036146"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049865"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108423" version="1" comment="libarchive13 is &lt;3.1.2-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111372" version="1" comment="libaugeas0 is &lt;1.2.0-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141904" version="1" comment="libblkid1 is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141905" version="1" comment="libblkid1-32bit is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141906" version="1" comment="libmount1 is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141907" version="1" comment="libmount1-32bit is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038355"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141908" version="1" comment="libsmartcols1 is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141909" version="1" comment="libuuid-devel is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141910" version="1" comment="libuuid1 is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141911" version="1" comment="libuuid1-32bit is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141912" version="1" comment="python-libmount is &lt;2.25-30.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050205"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141913" version="1" comment="util-linux is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141914" version="1" comment="util-linux-lang is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141915" version="1" comment="util-linux-systemd is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141916" version="1" comment="uuidd is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140793" version="1" comment="libcgroup1 is &lt;0.41.rc1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034326"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049881"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141917" version="1" comment="libdcerpc-binding0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141918" version="1" comment="libdcerpc-binding0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141919" version="1" comment="libdcerpc0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141920" version="1" comment="libdcerpc0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141921" version="1" comment="libgensec0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141922" version="1" comment="libgensec0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141923" version="1" comment="libndr-krb5pac0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141924" version="1" comment="libndr-krb5pac0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141925" version="1" comment="libndr-nbt0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141926" version="1" comment="libndr-nbt0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141927" version="1" comment="libndr-standard0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141928" version="1" comment="libndr-standard0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141929" version="1" comment="libndr0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141930" version="1" comment="libndr0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141931" version="1" comment="libnetapi0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141932" version="1" comment="libnetapi0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141933" version="1" comment="libregistry0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141934" version="1" comment="libsamba-credentials0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141935" version="1" comment="libsamba-credentials0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141936" version="1" comment="libsamba-hostconfig0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141937" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141938" version="1" comment="libsamba-passdb0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141939" version="1" comment="libsamba-passdb0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141940" version="1" comment="libsamba-util0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141941" version="1" comment="libsamba-util0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141942" version="1" comment="libsamdb0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141943" version="1" comment="libsamdb0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141944" version="1" comment="libsmbclient-raw0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141945" version="1" comment="libsmbclient-raw0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141946" version="1" comment="libsmbclient0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141947" version="1" comment="libsmbclient0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141948" version="1" comment="libsmbconf0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141949" version="1" comment="libsmbconf0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141950" version="1" comment="libsmbldap0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141951" version="1" comment="libsmbldap0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141952" version="1" comment="libtevent-util0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141953" version="1" comment="libtevent-util0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141954" version="1" comment="libwbclient0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141955" version="1" comment="libwbclient0-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141956" version="1" comment="samba is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141957" version="1" comment="samba-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141958" version="1" comment="samba-client is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141959" version="1" comment="samba-client-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141960" version="1" comment="samba-doc is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141961" version="1" comment="samba-libs is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141962" version="1" comment="samba-libs-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141963" version="1" comment="samba-winbind is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141964" version="1" comment="samba-winbind-32bit is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141965" version="1" comment="libecpg6 is &lt;9.4.5-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050207"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141966" version="1" comment="libpq5 is &lt;9.4.5-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050207"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141967" version="1" comment="libpq5-32bit is &lt;9.4.5-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050207"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141968" version="1" comment="postgresql94 is &lt;9.4.5-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039800"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050208"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116018" version="1" comment="libfreebl3 is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116019" version="1" comment="libfreebl3-32bit is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116022" version="1" comment="libsoftokn3 is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116023" version="1" comment="libsoftokn3-32bit is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116026" version="1" comment="mozilla-nss is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116027" version="1" comment="mozilla-nss-32bit is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116029" version="1" comment="mozilla-nss-certs is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116030" version="1" comment="mozilla-nss-certs-32bit is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116032" version="1" comment="mozilla-nss-sysinit is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116033" version="1" comment="mozilla-nss-sysinit-32bit is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116034" version="1" comment="mozilla-nss-tools is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141969" version="1" comment="libfreetype6 is &lt;2.5.5-7.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033880"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050193"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141970" version="1" comment="libfreetype6-32bit is &lt;2.5.5-7.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050193"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114243" version="1" comment="libgcrypt20 is &lt;1.6.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045634"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114244" version="1" comment="libgcrypt20-32bit is &lt;1.6.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038772"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045634"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141971" version="1" comment="libgudev-1_0-0 is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141972" version="1" comment="libgudev-1_0-0-32bit is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037376"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141973" version="1" comment="libudev1 is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141974" version="1" comment="libudev1-32bit is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141975" version="1" comment="systemd is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141976" version="1" comment="systemd-32bit is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141977" version="1" comment="systemd-bash-completion is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141978" version="1" comment="systemd-sysvinit is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141979" version="1" comment="udev is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141980" version="1" comment="libipa_hbac0 is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141981" version="1" comment="libsss_idmap0 is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141982" version="1" comment="libsss_sudo is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141983" version="1" comment="python-sssd-config is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141984" version="1" comment="sssd is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034052"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141985" version="1" comment="sssd-32bit is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141986" version="1" comment="sssd-ad is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141987" version="1" comment="sssd-ipa is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141988" version="1" comment="sssd-krb5 is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038196"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141989" version="1" comment="sssd-krb5-common is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038197"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141990" version="1" comment="sssd-ldap is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038198"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141991" version="1" comment="sssd-proxy is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141992" version="1" comment="sssd-tools is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106110" version="1" comment="libjasper1 is &lt;1.900.1-170.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034778"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106111" version="1" comment="libjasper1-32bit is &lt;1.900.1-170.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034777"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108618" version="1" comment="libjavascriptcoregtk-1_0-0 is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038615"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108619" version="1" comment="libjavascriptcoregtk-1_0-0-32bit is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038616"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108628" version="1" comment="libjavascriptcoregtk-3_0-0 is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038625"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108630" version="1" comment="libwebkit2gtk-3_0-25 is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038627"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108620" version="1" comment="libwebkitgtk-1_0-0 is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038617"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108621" version="1" comment="libwebkitgtk-1_0-0-32bit is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038618"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108631" version="1" comment="libwebkitgtk-3_0-0 is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108623" version="1" comment="libwebkitgtk2-lang is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108634" version="1" comment="libwebkitgtk3-lang is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108635" version="1" comment="typelib-1_0-JavaScriptCore-3_0 is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108636" version="1" comment="typelib-1_0-WebKit-3_0 is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105080" version="1" comment="libjpeg-turbo is &lt;1.3.1-30.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044368"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105088" version="1" comment="libjpeg62 is &lt;62.1.0-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044370"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105087" version="1" comment="libjpeg62-32bit is &lt;62.1.0-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044370"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105091" version="1" comment="libjpeg62-turbo is &lt;1.3.1-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038282"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044371"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105082" version="1" comment="libjpeg8 is &lt;8.0.2-30.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038279"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044369"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105081" version="1" comment="libjpeg8-32bit is &lt;8.0.2-30.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038278"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044369"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105086" version="1" comment="libturbojpeg0 is &lt;8.0.2-30.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038290"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044369"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105094" version="1" comment="libksba8 is &lt;1.3.0-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044372"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105814" version="1" comment="libmpfr4 is &lt;3.1.2-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038430"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044491"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107709" version="1" comment="libmspack0 is &lt;0.4-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038420"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044713"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141993" version="1" comment="libmysqlclient18 is &lt;10.0.21-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141994" version="1" comment="libmysqlclient18-32bit is &lt;10.0.21-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141995" version="1" comment="libmysqlclient_r18 is &lt;10.0.21-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141996" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.21-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141997" version="1" comment="mariadb is &lt;10.0.21-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141998" version="1" comment="mariadb-client is &lt;10.0.21-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141999" version="1" comment="mariadb-errormessages is &lt;10.0.21-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142000" version="1" comment="libopenssl0_9_8 is &lt;0.9.8j-81.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050212"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142001" version="1" comment="libopenssl0_9_8-32bit is &lt;0.9.8j-81.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050212"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142002" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050213"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142003" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050213"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142004" version="1" comment="openssl is &lt;1.0.1i-34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050213"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142005" version="1" comment="libpng15-15 is &lt;1.5.22-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037892"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050214"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105438" version="1" comment="libpng16-16 is &lt;1.6.8-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037593"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044433"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105439" version="1" comment="libpng16-16-32bit is &lt;1.6.8-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037594"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044433"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115371" version="1" comment="libpolkit0 is &lt;0.113-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034515"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115372" version="1" comment="libpolkit0-32bit is &lt;0.113-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034514"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115373" version="1" comment="polkit is &lt;0.113-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034518"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115376" version="1" comment="typelib-1_0-Polkit-1_0 is &lt;0.113-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038998"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142006" version="1" comment="libpython2_7-1_0 is &lt;2.7.9-20.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050215"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142007" version="1" comment="libpython2_7-1_0-32bit is &lt;2.7.9-20.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034538"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050215"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142008" version="1" comment="python-base is &lt;2.7.9-20.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050215"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142009" version="1" comment="python-devel is &lt;2.7.9-20.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050215"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142010" version="1" comment="python-xml is &lt;2.7.9-20.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050215"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140926" version="1" comment="libpython3_4m1_0 is &lt;3.4.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140927" version="1" comment="python3-base is &lt;3.4.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113431" version="1" comment="libqt4 is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031513"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113430" version="1" comment="libqt4-32bit is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113436" version="1" comment="libqt4-qt3support is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113435" version="1" comment="libqt4-qt3support-32bit is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113438" version="1" comment="libqt4-sql is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113437" version="1" comment="libqt4-sql-32bit is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113424" version="1" comment="libqt4-sql-mysql is &lt;4.8.6-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034705"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113423" version="1" comment="libqt4-sql-mysql-32bit is &lt;4.8.6-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034707"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113427" version="1" comment="libqt4-sql-postgresql is &lt;4.8.6-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034711"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113426" version="1" comment="libqt4-sql-postgresql-32bit is &lt;4.8.6-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034709"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113440" version="1" comment="libqt4-sql-sqlite is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113439" version="1" comment="libqt4-sql-sqlite-32bit is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113429" version="1" comment="libqt4-sql-unixODBC is &lt;4.8.6-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034714"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113428" version="1" comment="libqt4-sql-unixODBC-32bit is &lt;4.8.6-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034712"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113442" version="1" comment="libqt4-x11 is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031512"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113441" version="1" comment="libqt4-x11-32bit is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115661" version="1" comment="libreoffice is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115662" version="1" comment="libreoffice-base is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115663" version="1" comment="libreoffice-base-drivers-mysql is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115664" version="1" comment="libreoffice-base-drivers-postgresql is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115666" version="1" comment="libreoffice-calc is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115667" version="1" comment="libreoffice-calc-extensions is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115668" version="1" comment="libreoffice-draw is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115669" version="1" comment="libreoffice-filters-optional is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115670" version="1" comment="libreoffice-gnome is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115677" version="1" comment="libreoffice-icon-theme-tango is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115678" version="1" comment="libreoffice-impress is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115680" version="1" comment="libreoffice-l10n-af is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115681" version="1" comment="libreoffice-l10n-ar is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115686" version="1" comment="libreoffice-l10n-ca is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115687" version="1" comment="libreoffice-l10n-cs is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115689" version="1" comment="libreoffice-l10n-da is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115690" version="1" comment="libreoffice-l10n-de is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115693" version="1" comment="libreoffice-l10n-en is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115694" version="1" comment="libreoffice-l10n-es is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115698" version="1" comment="libreoffice-l10n-fi is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115699" version="1" comment="libreoffice-l10n-fr is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115702" version="1" comment="libreoffice-l10n-gu is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115704" version="1" comment="libreoffice-l10n-hi is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115706" version="1" comment="libreoffice-l10n-hu is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115707" version="1" comment="libreoffice-l10n-it is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115708" version="1" comment="libreoffice-l10n-ja is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115711" version="1" comment="libreoffice-l10n-ko is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115717" version="1" comment="libreoffice-l10n-nb is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115718" version="1" comment="libreoffice-l10n-nl is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115719" version="1" comment="libreoffice-l10n-nn is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115724" version="1" comment="libreoffice-l10n-pl is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115725" version="1" comment="libreoffice-l10n-pt-BR is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034145"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115726" version="1" comment="libreoffice-l10n-pt-PT is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115728" version="1" comment="libreoffice-l10n-ru is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115730" version="1" comment="libreoffice-l10n-sk is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115735" version="1" comment="libreoffice-l10n-sv is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115744" version="1" comment="libreoffice-l10n-xh is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115745" version="1" comment="libreoffice-l10n-zh-Hans is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038231"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115746" version="1" comment="libreoffice-l10n-zh-Hant is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115747" version="1" comment="libreoffice-l10n-zu is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115748" version="1" comment="libreoffice-mailmerge is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115749" version="1" comment="libreoffice-math is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115750" version="1" comment="libreoffice-officebean is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115751" version="1" comment="libreoffice-pyuno is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115754" version="1" comment="libreoffice-writer is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115755" version="1" comment="libreoffice-writer-extensions is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105408" version="1" comment="libruby2_1-2_1 is &lt;2.1.2-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044429"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105409" version="1" comment="ruby2.1 is &lt;2.1.2-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044429"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105414" version="1" comment="ruby2.1-stdlib is &lt;2.1.2-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038315"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044429"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105600" version="1" comment="libsndfile1 is &lt;1.0.25-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044452"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105601" version="1" comment="libsndfile1-32bit is &lt;1.0.25-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038351"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044452"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140934" version="1" comment="libsnmp30 is &lt;5.7.3-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037001"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049915"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140935" version="1" comment="libsnmp30-32bit is &lt;5.7.3-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049915"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140936" version="1" comment="net-snmp is &lt;5.7.3-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030550"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049915"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140937" version="1" comment="perl-SNMP is &lt;5.7.3-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030792"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049915"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140938" version="1" comment="snmp-mibs is &lt;5.7.3-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031643"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049915"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142011" version="1" comment="libspice-client-glib-2_0-8 is &lt;0.29-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050216"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142012" version="1" comment="libspice-client-gtk-2_0-4 is &lt;0.29-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037407"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050216"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142013" version="1" comment="libspice-client-gtk-3_0-4 is &lt;0.29-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037408"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050216"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142014" version="1" comment="libspice-controller0 is &lt;0.29-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037398"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050216"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142015" version="1" comment="typelib-1_0-SpiceClientGlib-2_0 is &lt;0.29-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050216"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142016" version="1" comment="typelib-1_0-SpiceClientGtk-3_0 is &lt;0.29-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050216"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142017" version="1" comment="libspice-server1 is &lt;0.12.5-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050217"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108425" version="1" comment="libssh2-1 is &lt;1.4.3-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038580"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108426" version="1" comment="libssh2-1-32bit is &lt;1.4.3-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114957" version="1" comment="libssh4 is &lt;0.6.3-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035367"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045734"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109692" version="1" comment="libtasn1 is &lt;3.7-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109693" version="1" comment="libtasn1-6 is &lt;3.7-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038681"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109694" version="1" comment="libtasn1-6-32bit is &lt;3.7-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038682"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114060" version="1" comment="libtiff5 is &lt;4.0.4-12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045603"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114059" version="1" comment="libtiff5-32bit is &lt;4.0.4-12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045603"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115565" version="1" comment="libvdpau1 is &lt;0.8-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038959"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115566" version="1" comment="libvdpau1-32bit is &lt;0.8-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038960"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142018" version="1" comment="libvirt is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142019" version="1" comment="libvirt-client is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142020" version="1" comment="libvirt-client-32bit is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142021" version="1" comment="libvirt-daemon is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142022" version="1" comment="libvirt-daemon-config-network is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142023" version="1" comment="libvirt-daemon-config-nwfilter is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142024" version="1" comment="libvirt-daemon-driver-interface is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142025" version="1" comment="libvirt-daemon-driver-libxl is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142026" version="1" comment="libvirt-daemon-driver-lxc is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142027" version="1" comment="libvirt-daemon-driver-network is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142028" version="1" comment="libvirt-daemon-driver-nodedev is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142029" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142030" version="1" comment="libvirt-daemon-driver-qemu is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142031" version="1" comment="libvirt-daemon-driver-secret is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142032" version="1" comment="libvirt-daemon-driver-storage is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142033" version="1" comment="libvirt-daemon-lxc is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142034" version="1" comment="libvirt-daemon-qemu is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142035" version="1" comment="libvirt-daemon-xen is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142036" version="1" comment="libvirt-doc is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114120" version="1" comment="libwmf-0_2-7 is &lt;0.2.8.4-242.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038763"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108092" version="1" comment="libxerces-c-3_1 is &lt;3.1.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038592"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108093" version="1" comment="libxerces-c-3_1-32bit is &lt;3.1.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038593"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103731" version="1" comment="libxml2-2 is &lt;2.9.1-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103732" version="1" comment="libxml2-2-32bit is &lt;2.9.1-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103737" version="1" comment="libxml2-tools is &lt;2.9.1-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141036" version="1" comment="libyaml-0-2 is &lt;0.1.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142037" version="1" comment="libzip2 is &lt;0.11.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050219"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114236" version="1" comment="libzmq3 is &lt;4.0.4-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038947"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045633"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142038" version="1" comment="mailx is &lt;12.5-25.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050220"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116016" version="1" comment="mozilla-nspr is &lt;4.10.10-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116015" version="1" comment="mozilla-nspr-32bit is &lt;4.10.10-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105068" version="1" comment="mutt is &lt;1.5.21-49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044363"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142039" version="1" comment="ntp is &lt;4.2.8p4-1.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142040" version="1" comment="ntp-doc is &lt;4.2.8p4-1.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142041" version="1" comment="openslp is &lt;2.0.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050222"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142042" version="1" comment="openslp-32bit is &lt;2.0.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050222"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114322" version="1" comment="openssh is &lt;6.6p1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045651"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114325" version="1" comment="openssh-helpers is &lt;6.6p1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045651"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142043" version="1" comment="openvpn is &lt;2.3.8-16.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050223"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113958" version="1" comment="p7zip is &lt;9.20.1-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038766"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045586"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141056" version="1" comment="pam is &lt;1.1.8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032521"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049947"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141057" version="1" comment="pam-32bit is &lt;1.1.8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032517"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049947"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141058" version="1" comment="pam-doc is &lt;1.1.8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034725"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049947"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110205" version="1" comment="patch is &lt;2.7.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113959" version="1" comment="perl-XML-LibXML is &lt;2.0019-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109959" version="1" comment="perl-YAML-LibYAML is &lt;0.38-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045057"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108432" version="1" comment="pigz is &lt;2.3-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035818"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142044" version="1" comment="python is &lt;2.7.9-20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050224"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142045" version="1" comment="python-curses is &lt;2.7.9-20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050224"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142046" version="1" comment="python-tk is &lt;2.7.9-20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050224"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141074" version="1" comment="python3 is &lt;3.4.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103738" version="1" comment="python-libxml2 is &lt;2.9.1-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142047" version="1" comment="python-requests is &lt;2.3.0-6.5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050225"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142048" version="1" comment="qemu is &lt;2.3.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142049" version="1" comment="qemu-block-curl is &lt;2.3.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142050" version="1" comment="qemu-ipxe is &lt;1.0.0-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050227"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142051" version="1" comment="qemu-kvm is &lt;2.3.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142052" version="1" comment="qemu-seabios is &lt;1.8.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050228"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142053" version="1" comment="qemu-sgabios is &lt;8-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050229"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142054" version="1" comment="qemu-tools is &lt;2.3.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142055" version="1" comment="qemu-vgabios is &lt;1.8.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050228"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142056" version="1" comment="qemu-x86 is &lt;2.3.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142057" version="1" comment="rpcbind is &lt;0.2.1_rc4-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105405" version="1" comment="rpm is &lt;4.11.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032541"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044428"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105404" version="1" comment="rpm-32bit is &lt;4.11.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033901"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044428"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105406" version="1" comment="rpm-build is &lt;4.11.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044428"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142058" version="1" comment="rsyslog is &lt;8.4.0-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033100"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141124" version="1" comment="sblim-sfcb is &lt;1.4.8-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142059" version="1" comment="shim is &lt;0.9-2.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038277"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050232"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110995" version="1" comment="strongswan is &lt;5.1.3-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031037"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110997" version="1" comment="strongswan-doc is &lt;5.1.3-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031036"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110999" version="1" comment="strongswan-ipsec is &lt;5.1.3-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033871"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111000" version="1" comment="strongswan-libs0 is &lt;5.1.3-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033872"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142060" version="1" comment="sysconfig is &lt;0.83.8-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032547"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142061" version="1" comment="sysconfig-netconfig is &lt;0.83.8-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041023"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009139103" version="1" comment="tar is &lt;1.27.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030401"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049359"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009139104" version="1" comment="tar-lang is &lt;1.27.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033728"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049359"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108642" version="1" comment="tcpdump is &lt;4.5.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044829"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141141" version="1" comment="tftp is &lt;5.2-10.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034593"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049991"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142062" version="1" comment="tigervnc is &lt;1.4.3-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050234"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142063" version="1" comment="xorg-x11-Xvnc is &lt;1.4.3-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050234"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106381" version="1" comment="unzip is &lt;6.00-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031638"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044576"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115051" version="1" comment="vorbis-tools is &lt;1.4.0-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030840"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045757"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115052" version="1" comment="vorbis-tools-lang is &lt;1.4.0-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038438"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045757"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102008" version="1" comment="wget is &lt;1.14-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030457"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043881"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114951" version="1" comment="wireshark is &lt;1.12.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045732"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110201" version="1" comment="wpa_supplicant is &lt;2.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034744"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045084"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106065" version="1" comment="xdg-utils is &lt;20140630-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031618"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044530"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142064" version="1" comment="xen is &lt;4.5.1_12-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142065" version="1" comment="xen-kmp-default is &lt;4.5.1_12_k3.12.49_11-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142066" version="1" comment="xen-libs is &lt;4.5.1_12-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142067" version="1" comment="xen-libs-32bit is &lt;4.5.1_12-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142068" version="1" comment="xf86-video-intel is &lt;2.99.914-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041025"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050237"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142069" version="1" comment="xorg-x11-server is &lt;7.6_1.15.2-36.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050238"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142070" version="1" comment="xorg-x11-server-extra is &lt;7.6_1.15.2-36.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050238"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142071" version="1" comment="yast2 is &lt;3.1.155-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032603"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050239"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142072" version="1" comment="yast2-core is &lt;3.1.18-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030808"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050240"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140428" version="1" comment="DirectFB is &lt;1.7.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038662"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140429" version="1" comment="lib++dfb-1_7-1 is &lt;1.7.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140430" version="1" comment="libdirectfb-1_7-1 is &lt;1.7.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142073" version="1" comment="libdirectfb-1_7-1-32bit is &lt;1.7.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038680"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128016" version="1" comment="sled-release is ==12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047590"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130983" version="1" comment="ImageMagick is &lt;6.8.8.1-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130984" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130985" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130986" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130987" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131144" version="1" comment="MozillaFirefox is &lt;45.4.0esr-81.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047985"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131145" version="1" comment="MozillaFirefox-translations is &lt;45.4.0esr-81.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047985"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142074" version="1" comment="NetworkManager is &lt;1.0.12-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030981"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142075" version="1" comment="NetworkManager-lang is &lt;1.0.12-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034747"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140431" version="1" comment="libnm-glib-vpn1 is &lt;1.0.12-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037014"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140432" version="1" comment="libnm-glib4 is &lt;1.0.12-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037015"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140433" version="1" comment="libnm-util2 is &lt;1.0.12-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140434" version="1" comment="libnm0 is &lt;1.0.12-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041030"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142076" version="1" comment="typelib-1_0-NM-1_0 is &lt;1.0.12-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041031"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140435" version="1" comment="typelib-1_0-NMClient-1_0 is &lt;1.0.12-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041032"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140436" version="1" comment="typelib-1_0-NetworkManager-1_0 is &lt;1.0.12-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041033"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140437" version="1" comment="aaa_base is &lt;13.2+git20140911.61c1681-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140438" version="1" comment="aaa_base-extras is &lt;13.2+git20140911.61c1681-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034235"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140439" version="1" comment="accountsservice is &lt;0.6.42-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037053"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140440" version="1" comment="accountsservice-lang is &lt;0.6.42-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140441" version="1" comment="libaccountsservice0 is &lt;0.6.42-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140442" version="1" comment="typelib-1_0-AccountsService-1_0 is &lt;0.6.42-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142077" version="1" comment="argyllcms is &lt;1.6.3-3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050241"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131107" version="1" comment="at is &lt;3.1.14-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131109" version="1" comment="libQtWebKit4 is &lt;4.8.6+2.3.3-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047977"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131110" version="1" comment="libQtWebKit4-32bit is &lt;4.8.6+2.3.3-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034703"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047977"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131111" version="1" comment="libbonobo is &lt;2.32.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040624"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131112" version="1" comment="libbonobo-32bit is &lt;2.32.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040625"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131113" version="1" comment="libbonobo-lang is &lt;2.32.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040626"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131114" version="1" comment="libkde4 is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031693"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131115" version="1" comment="libkde4-32bit is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031690"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131116" version="1" comment="libkdecore4 is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031697"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131117" version="1" comment="libkdecore4-32bit is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031694"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131118" version="1" comment="libksuseinstall1 is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034319"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131119" version="1" comment="libksuseinstall1-32bit is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034318"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131120" version="1" comment="libnetpbm11 is &lt;10.66.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040627"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047979"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131121" version="1" comment="libnetpbm11-32bit is &lt;10.66.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047979"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131122" version="1" comment="netpbm is &lt;10.66.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030553"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047979"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140461" version="1" comment="augeas is &lt;1.2.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049778"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140462" version="1" comment="augeas-lenses is &lt;1.2.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038073"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049778"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140463" version="1" comment="libaugeas0 is &lt;1.2.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049778"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140464" version="1" comment="autofs is &lt;5.0.9-21.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049779"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140467" version="1" comment="avahi is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031847"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140468" version="1" comment="avahi-lang is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033592"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140470" version="1" comment="libavahi-client3 is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033066"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140471" version="1" comment="libavahi-client3-32bit is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033064"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140472" version="1" comment="libavahi-common3 is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033069"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140473" version="1" comment="libavahi-common3-32bit is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140474" version="1" comment="libavahi-core7 is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040951"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140475" version="1" comment="libdns_sd is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033081"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140476" version="1" comment="libdns_sd-32bit is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033079"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140477" version="1" comment="bash is &lt;4.3-78.39" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032478"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049783"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140478" version="1" comment="bash-doc is &lt;4.3-78.39" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034959"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049783"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142078" version="1" comment="bash-lang is &lt;4.3-78.39" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037113"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049783"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140479" version="1" comment="libreadline6 is &lt;6.3-78.39" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037117"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049784"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140480" version="1" comment="libreadline6-32bit is &lt;6.3-78.39" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037116"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049784"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140481" version="1" comment="readline-doc is &lt;6.3-78.39" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049784"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131136" version="1" comment="bind-libs is &lt;9.9.9P1-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131137" version="1" comment="bind-libs-32bit is &lt;9.9.9P1-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131138" version="1" comment="bind-utils is &lt;9.9.9P1-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140482" version="1" comment="binutils is &lt;2.26.1-9.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030609"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131108" version="1" comment="bogofilter is &lt;1.2.4-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032197"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140483" version="1" comment="bzip2 is &lt;1.0.6-29.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030508"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049786"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140485" version="1" comment="libbz2-1 is &lt;1.0.6-29.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031657"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049786"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140486" version="1" comment="libbz2-1-32bit is &lt;1.0.6-29.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031655"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049786"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140488" version="1" comment="cifs-utils is &lt;6.5-8.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049788"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140489" version="1" comment="clamav is &lt;0.99.2-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142079" version="1" comment="colord is &lt;1.3.3-10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140490" version="1" comment="colord-gtk-lang is &lt;0.1.26-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041037"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049790"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142080" version="1" comment="colord-lang is &lt;1.3.3-10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140491" version="1" comment="libcolord-gtk1 is &lt;0.1.26-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049790"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140492" version="1" comment="libcolord2 is &lt;1.3.3-10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140493" version="1" comment="libcolord2-32bit is &lt;1.3.3-10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140494" version="1" comment="libcolorhug2 is &lt;1.3.3-10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040963"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140496" version="1" comment="coreutils is &lt;8.25-12.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049793"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140497" version="1" comment="coreutils-lang is &lt;8.25-12.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034779"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049793"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140498" version="1" comment="cpp48 is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140499" version="1" comment="gcc48 is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140500" version="1" comment="gcc48-32bit is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140501" version="1" comment="gcc48-c++ is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039005"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142081" version="1" comment="gcc48-gij is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039027"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142082" version="1" comment="gcc48-gij-32bit is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039026"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140502" version="1" comment="gcc48-info is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039007"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140504" version="1" comment="libasan0 is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039012"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140505" version="1" comment="libasan0-32bit is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142083" version="1" comment="libgcj48 is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039030"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142084" version="1" comment="libgcj48-32bit is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039029"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142085" version="1" comment="libgcj48-jar is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039033"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142086" version="1" comment="libgcj_bc1 is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039034"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140506" version="1" comment="libstdc++48-devel is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140507" version="1" comment="libstdc++48-devel-32bit is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130930" version="1" comment="cracklib is &lt;2.9.0-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040610"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047936"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131013" version="1" comment="libcrack2 is &lt;2.9.0-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040619"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047936"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131014" version="1" comment="libcrack2-32bit is &lt;2.9.0-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047936"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130995" version="1" comment="ctags is &lt;5.8-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040618"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047954"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140510" version="1" comment="cups is &lt;1.7.5-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030428"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049797"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140511" version="1" comment="cups-client is &lt;1.7.5-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049797"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140512" version="1" comment="cups-libs is &lt;1.7.5-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030427"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049797"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140513" version="1" comment="cups-libs-32bit is &lt;1.7.5-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030730"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049797"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119506" version="1" comment="cups-filters is &lt;1.0.58-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038657"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046597"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119507" version="1" comment="cups-filters-cups-browsed is &lt;1.0.58-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038658"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046597"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119508" version="1" comment="cups-filters-foomatic-rip is &lt;1.0.58-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038660"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046597"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119509" version="1" comment="cups-filters-ghostscript is &lt;1.0.58-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046597"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131101" version="1" comment="curl is &lt;7.37.0-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047973"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131102" version="1" comment="libcurl4 is &lt;7.37.0-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047973"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131103" version="1" comment="libcurl4-32bit is &lt;7.37.0-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047973"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140535" version="1" comment="dbus-1 is &lt;1.8.16-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049802"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140536" version="1" comment="dbus-1-x11 is &lt;1.8.16-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049802"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140537" version="1" comment="libdbus-1-3 is &lt;1.8.16-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049802"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140538" version="1" comment="libdbus-1-3-32bit is &lt;1.8.16-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049802"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130039" version="1" comment="dhcp is &lt;4.3.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047838"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130040" version="1" comment="dhcp-client is &lt;4.3.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030726"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047838"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142087" version="1" comment="dia is &lt;0.97.3-15.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030607"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050242"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142088" version="1" comment="dia-lang is &lt;0.97.3-15.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040967"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050242"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140541" version="1" comment="dnsmasq is &lt;2.71-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031669"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049804"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131020" version="1" comment="dosfstools is &lt;3.0.26-6.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032484"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047959"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140546" version="1" comment="dracut is &lt;044-87.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121566" version="1" comment="ecryptfs-utils is &lt;103-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046811"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121567" version="1" comment="ecryptfs-utils-32bit is &lt;103-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046811"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140549" version="1" comment="emacs is &lt;24.3-16.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030850"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140551" version="1" comment="emacs-info is &lt;24.3-16.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030848"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140553" version="1" comment="emacs-x11 is &lt;24.3-16.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140554" version="1" comment="etags is &lt;24.3-16.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038236"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142089" version="1" comment="empathy is &lt;3.12.12-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034740"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050243"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142090" version="1" comment="empathy-lang is &lt;3.12.12-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034739"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050243"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142091" version="1" comment="telepathy-mission-control-plugin-goa is &lt;3.12.12-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050243"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140555" version="1" comment="eog is &lt;3.20.4-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040274"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049809"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140556" version="1" comment="eog-lang is &lt;3.20.4-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040276"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049809"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140557" version="1" comment="evince is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140558" version="1" comment="evince-browser-plugin is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140559" version="1" comment="evince-lang is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140560" version="1" comment="evince-plugin-djvudocument is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140561" version="1" comment="evince-plugin-dvidocument is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140562" version="1" comment="evince-plugin-pdfdocument is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140563" version="1" comment="evince-plugin-psdocument is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041060"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140564" version="1" comment="evince-plugin-tiffdocument is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140565" version="1" comment="evince-plugin-xpsdocument is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041062"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140566" version="1" comment="libevdocument3-4 is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040970"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140567" version="1" comment="libevview3-3 is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040971"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140568" version="1" comment="nautilus-evince is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142092" version="1" comment="typelib-1_0-EvinceDocument-3_0 is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040972"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142093" version="1" comment="typelib-1_0-EvinceView-3_0 is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040973"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128464" version="1" comment="expat is &lt;2.1.0-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128465" version="1" comment="libexpat1 is &lt;2.1.0-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128466" version="1" comment="libexpat1-32bit is &lt;2.1.0-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140569" version="1" comment="fetchmail is &lt;6.3.26-12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049811"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142094" version="1" comment="finch is &lt;2.11.0-12.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031748"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142095" version="1" comment="libpurple is &lt;2.11.0-12.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031423"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142096" version="1" comment="libpurple-lang is &lt;2.11.0-12.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142097" version="1" comment="libpurple-meanwhile is &lt;2.11.0-12.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031749"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142098" version="1" comment="libpurple-tcl is &lt;2.11.0-12.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033532"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142099" version="1" comment="pidgin is &lt;2.11.0-12.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140574" version="1" comment="fontconfig is &lt;2.11.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032251"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140575" version="1" comment="fontconfig-32bit is &lt;2.11.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142100" version="1" comment="freerdp is &lt;2.0.0~git.1463131968.4e66df7-11.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142101" version="1" comment="libfreerdp2 is &lt;2.0.0~git.1463131968.4e66df7-11.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041064"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140589" version="1" comment="ft2demos is &lt;2.6.3-7.8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034838"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049816"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131048" version="1" comment="gd is &lt;2.1.0-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131049" version="1" comment="gd-32bit is &lt;2.1.0-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140591" version="1" comment="gdk-pixbuf-lang is &lt;2.34.0-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037124"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049818"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140592" version="1" comment="gdk-pixbuf-query-loaders is &lt;2.34.0-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049818"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140593" version="1" comment="gdk-pixbuf-query-loaders-32bit is &lt;2.34.0-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049818"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140594" version="1" comment="libgdk_pixbuf-2_0-0 is &lt;2.34.0-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037131"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049818"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140595" version="1" comment="libgdk_pixbuf-2_0-0-32bit is &lt;2.34.0-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037132"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049818"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140596" version="1" comment="typelib-1_0-GdkPixbuf-2_0 is &lt;2.34.0-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038954"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049818"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140597" version="1" comment="gdk-pixbuf-loader-rsvg is &lt;2.40.15-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034698"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140598" version="1" comment="librsvg-2-2 is &lt;2.40.15-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034702"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140599" version="1" comment="librsvg-2-2-32bit is &lt;2.40.15-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140600" version="1" comment="rsvg-view is &lt;2.40.15-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034663"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140601" version="1" comment="gdm is &lt;3.10.0.1-52.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030629"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140602" version="1" comment="gdm-lang is &lt;3.10.0.1-52.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033989"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140603" version="1" comment="gdmflexiserver is &lt;3.10.0.1-52.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140604" version="1" comment="libgdm1 is &lt;3.10.0.1-52.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038574"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140605" version="1" comment="typelib-1_0-Gdm-1_0 is &lt;3.10.0.1-52.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038575"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125321" version="1" comment="ghostscript is &lt;9.15-6.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047302"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125322" version="1" comment="ghostscript-x11 is &lt;9.15-6.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030822"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047302"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142102" version="1" comment="gimp is &lt;2.8.18-4.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030642"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050246"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142103" version="1" comment="gimp-lang is &lt;2.8.18-4.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050246"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142104" version="1" comment="gimp-plugins-python is &lt;2.8.18-4.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050246"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142105" version="1" comment="libgimp-2_0-0 is &lt;2.8.18-4.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050246"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142106" version="1" comment="libgimpui-2_0-0 is &lt;2.8.18-4.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034558"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050246"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140606" version="1" comment="glib2-lang is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030893"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140607" version="1" comment="glib2-tools is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140608" version="1" comment="libgio-2_0-0 is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030896"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140609" version="1" comment="libgio-2_0-0-32bit is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030894"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142107" version="1" comment="libgio-fam is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140610" version="1" comment="libglib-2_0-0 is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030899"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140611" version="1" comment="libglib-2_0-0-32bit is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030897"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140612" version="1" comment="libgmodule-2_0-0 is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030902"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140613" version="1" comment="libgmodule-2_0-0-32bit is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030900"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140614" version="1" comment="libgobject-2_0-0 is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140615" version="1" comment="libgobject-2_0-0-32bit is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030903"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140616" version="1" comment="libgthread-2_0-0 is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030908"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140617" version="1" comment="libgthread-2_0-0-32bit is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030906"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140618" version="1" comment="glibc is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140619" version="1" comment="glibc-32bit is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140620" version="1" comment="glibc-devel is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140621" version="1" comment="glibc-devel-32bit is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140623" version="1" comment="glibc-i18ndata is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140625" version="1" comment="glibc-locale is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140626" version="1" comment="glibc-locale-32bit is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140629" version="1" comment="nscd is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140630" version="1" comment="gnome-keyring is &lt;3.20.0-27.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032328"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049823"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140631" version="1" comment="gnome-keyring-32bit is &lt;3.20.0-27.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032326"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049823"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140632" version="1" comment="gnome-keyring-lang is &lt;3.20.0-27.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049823"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140633" version="1" comment="gnome-keyring-pam is &lt;3.20.0-27.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036411"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049823"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140634" version="1" comment="gnome-keyring-pam-32bit is &lt;3.20.0-27.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036412"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049823"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140635" version="1" comment="libgck-modules-gnome-keyring is &lt;3.20.0-27.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036415"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049823"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142108" version="1" comment="gnome-online-accounts is &lt;3.20.4-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035605"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049824"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142109" version="1" comment="gnome-online-accounts-lang is &lt;3.20.4-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035609"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049824"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140636" version="1" comment="libgoa-1_0-0 is &lt;3.20.4-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035610"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049824"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142110" version="1" comment="libgoa-1_0-0-32bit is &lt;3.20.4-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035611"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049824"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140637" version="1" comment="libgoa-backend-1_0-1 is &lt;3.20.4-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049824"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142111" version="1" comment="typelib-1_0-Goa-1_0 is &lt;3.20.4-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035618"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049824"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140638" version="1" comment="gnome-settings-daemon is &lt;3.20.1-40.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038173"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049825"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140639" version="1" comment="gnome-settings-daemon-lang is &lt;3.20.1-40.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038175"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049825"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140640" version="1" comment="gnome-shell is &lt;3.20.4-70.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040981"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140641" version="1" comment="gnome-shell-browser-plugin is &lt;3.20.4-70.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040982"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142112" version="1" comment="gnome-shell-calendar is &lt;3.20.4-70.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140642" version="1" comment="gnome-shell-lang is &lt;3.20.4-70.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041040"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119616" version="1" comment="gpg2 is &lt;2.0.24-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030602"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046612"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119617" version="1" comment="gpg2-lang is &lt;2.0.24-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033865"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046612"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140648" version="1" comment="grub2 is &lt;2.02~beta2-104.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049829"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140650" version="1" comment="grub2-i386-pc is &lt;2.02~beta2-104.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049829"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140653" version="1" comment="grub2-snapper-plugin is &lt;2.02~beta2-104.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039508"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049829"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140654" version="1" comment="grub2-systemd-sleep-plugin is &lt;2.02~beta2-104.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049829"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140655" version="1" comment="grub2-x86_64-efi is &lt;2.02~beta2-104.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049829"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140656" version="1" comment="grub2-x86_64-xen is &lt;2.02~beta2-104.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049829"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142113" version="1" comment="gstreamer-0_10-plugins-bad is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142114" version="1" comment="gstreamer-0_10-plugins-bad-lang is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142115" version="1" comment="libgstbasecamerabinsrc-0_10-23 is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038732"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142116" version="1" comment="libgstbasecamerabinsrc-0_10-23-32bit is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038733"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142117" version="1" comment="libgstbasevideo-0_10-23 is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038734"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142118" version="1" comment="libgstbasevideo-0_10-23-32bit is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038735"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142119" version="1" comment="libgstcodecparsers-0_10-23 is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038736"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142120" version="1" comment="libgstphotography-0_10-23 is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038738"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142121" version="1" comment="libgstphotography-0_10-23-32bit is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038739"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142122" version="1" comment="libgstsignalprocessor-0_10-23 is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038740"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142123" version="1" comment="libgstsignalprocessor-0_10-23-32bit is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038741"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142124" version="1" comment="libgstvdp-0_10-23 is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038742"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142125" version="1" comment="libgstvdp-0_10-23-32bit is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038743"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140657" version="1" comment="gtk2-data is &lt;2.24.31-7.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040762"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140658" version="1" comment="gtk2-lang is &lt;2.24.31-7.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033166"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140659" version="1" comment="gtk2-tools is &lt;2.24.31-7.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040629"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140660" version="1" comment="gtk2-tools-32bit is &lt;2.24.31-7.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040630"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140661" version="1" comment="libgtk-2_0-0 is &lt;2.24.31-7.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140662" version="1" comment="libgtk-2_0-0-32bit is &lt;2.24.31-7.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142126" version="1" comment="typelib-1_0-Gtk-2_0 is &lt;2.24.31-7.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140682" version="1" comment="hyper-v is &lt;7-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049839"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140683" version="1" comment="ibus-chewing is &lt;1.4.14-4.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037591"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049840"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140684" version="1" comment="ibus-pinyin is &lt;1.5.0-7.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049841"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142127" version="1" comment="imobiledevice-tools is &lt;1.2.0-7.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140847" version="1" comment="libimobiledevice6 is &lt;1.2.0-7.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040471"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130960" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.111-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047947"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130961" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.111-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047947"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130962" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.101-14.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130963" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.101-14.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140693" version="1" comment="kbd is &lt;1.15.5-8.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049848"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140694" version="1" comment="kdump is &lt;0.8.15-28.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049849"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140695" version="1" comment="kernel-default is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140697" version="1" comment="kernel-default-devel is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142128" version="1" comment="kernel-default-extra is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140699" version="1" comment="kernel-devel is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140700" version="1" comment="kernel-macros is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140701" version="1" comment="kernel-source is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140702" version="1" comment="kernel-syms is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140703" version="1" comment="krb5 is &lt;1.12.5-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140704" version="1" comment="krb5-32bit is &lt;1.12.5-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140705" version="1" comment="krb5-client is &lt;1.12.5-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126431" version="1" comment="lhasa is &lt;0.2.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047403"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126432" version="1" comment="liblhasa0 is &lt;0.2.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040394"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047403"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140571" version="1" comment="libFLAC++6 is &lt;1.3.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049812"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142129" version="1" comment="libFLAC++6-32bit is &lt;1.3.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049812"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140572" version="1" comment="libFLAC8 is &lt;1.3.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031366"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049812"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140573" version="1" comment="libFLAC8-32bit is &lt;1.3.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031364"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049812"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140721" version="1" comment="libQt5Concurrent5 is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038886"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140722" version="1" comment="libQt5Core5 is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140723" version="1" comment="libQt5DBus5 is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038896"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140724" version="1" comment="libQt5Gui5 is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037608"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140725" version="1" comment="libQt5Network5 is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140726" version="1" comment="libQt5OpenGL5 is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038909"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140727" version="1" comment="libQt5PrintSupport5 is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038919"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140728" version="1" comment="libQt5Sql5 is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037610"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140729" version="1" comment="libQt5Sql5-mysql is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140730" version="1" comment="libQt5Sql5-postgresql is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140731" version="1" comment="libQt5Sql5-sqlite is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038928"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140732" version="1" comment="libQt5Sql5-unixODBC is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140733" version="1" comment="libQt5Test5 is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140734" version="1" comment="libQt5Widgets5 is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037614"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140735" version="1" comment="libQt5Xml5 is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038940"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140736" version="1" comment="libQt5WebKit5 is &lt;5.6.1-9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049858"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140737" version="1" comment="libQt5WebKit5-imports is &lt;5.6.1-9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039636"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049858"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140738" version="1" comment="libQt5WebKitWidgets5 is &lt;5.6.1-9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049858"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140752" version="1" comment="libXfont1 is &lt;1.5.1-10.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049864"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140759" version="1" comment="libXrandr2 is &lt;1.5.0-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049868"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140760" version="1" comment="libXrandr2-32bit is &lt;1.5.0-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036162"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049868"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140770" version="1" comment="libXvnc1 is &lt;1.6.0-12.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041072"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049874"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140771" version="1" comment="tigervnc is &lt;1.6.0-12.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049874"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140772" version="1" comment="xorg-x11-Xvnc is &lt;1.6.0-12.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049874"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130724" version="1" comment="libarchive13 is &lt;3.1.2-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125716" version="1" comment="libasan2 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125717" version="1" comment="libasan2-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125723" version="1" comment="libffi4 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125724" version="1" comment="libffi4-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125734" version="1" comment="libmpx0 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125735" version="1" comment="libmpx0-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040373"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125736" version="1" comment="libmpxwrappers0 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125737" version="1" comment="libmpxwrappers0-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140779" version="1" comment="libblkid1 is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140780" version="1" comment="libblkid1-32bit is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140781" version="1" comment="libfdisk1 is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040900"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140782" version="1" comment="libmount1 is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140783" version="1" comment="libmount1-32bit is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038355"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140784" version="1" comment="libsmartcols1 is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142130" version="1" comment="libuuid-devel is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140785" version="1" comment="libuuid1 is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140786" version="1" comment="libuuid1-32bit is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140787" version="1" comment="python-libmount is &lt;2.28-40.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140788" version="1" comment="util-linux is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140789" version="1" comment="util-linux-lang is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140790" version="1" comment="util-linux-systemd is &lt;2.28-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049880"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140791" version="1" comment="uuidd is &lt;2.28-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049880"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131768" version="1" comment="libdcerpc-atsvc0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140794" version="1" comment="libdcerpc-binding0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140795" version="1" comment="libdcerpc-binding0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140796" version="1" comment="libdcerpc0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140797" version="1" comment="libdcerpc0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140798" version="1" comment="libndr-krb5pac0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140799" version="1" comment="libndr-krb5pac0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140800" version="1" comment="libndr-nbt0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140801" version="1" comment="libndr-nbt0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140802" version="1" comment="libndr-standard0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140803" version="1" comment="libndr-standard0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140804" version="1" comment="libndr0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140805" version="1" comment="libndr0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140806" version="1" comment="libnetapi0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140807" version="1" comment="libnetapi0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140808" version="1" comment="libsamba-credentials0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140809" version="1" comment="libsamba-credentials0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140810" version="1" comment="libsamba-errors0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140811" version="1" comment="libsamba-errors0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140812" version="1" comment="libsamba-hostconfig0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140813" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140814" version="1" comment="libsamba-passdb0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140815" version="1" comment="libsamba-passdb0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140816" version="1" comment="libsamba-util0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140817" version="1" comment="libsamba-util0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140818" version="1" comment="libsamdb0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140819" version="1" comment="libsamdb0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140820" version="1" comment="libsmbclient0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140821" version="1" comment="libsmbclient0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140822" version="1" comment="libsmbconf0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140823" version="1" comment="libsmbconf0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140824" version="1" comment="libsmbldap0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140825" version="1" comment="libsmbldap0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140826" version="1" comment="libtevent-util0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140827" version="1" comment="libtevent-util0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140828" version="1" comment="libwbclient0 is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140829" version="1" comment="libwbclient0-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140830" version="1" comment="samba is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140831" version="1" comment="samba-client is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140832" version="1" comment="samba-client-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140833" version="1" comment="samba-doc is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140834" version="1" comment="samba-libs is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140835" version="1" comment="samba-libs-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140836" version="1" comment="samba-winbind is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140837" version="1" comment="samba-winbind-32bit is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131139" version="1" comment="libecpg6 is &lt;9.4.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047984"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131140" version="1" comment="libpq5 is &lt;9.4.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047984"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131141" version="1" comment="libpq5-32bit is &lt;9.4.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047984"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131142" version="1" comment="postgresql94 is &lt;9.4.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039800"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047984"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129282" version="1" comment="libfreebl3 is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129283" version="1" comment="libfreebl3-32bit is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129284" version="1" comment="libsoftokn3 is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129285" version="1" comment="libsoftokn3-32bit is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129288" version="1" comment="mozilla-nss is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129289" version="1" comment="mozilla-nss-32bit is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129290" version="1" comment="mozilla-nss-certs is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129291" version="1" comment="mozilla-nss-certs-32bit is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129292" version="1" comment="mozilla-nss-sysinit is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129293" version="1" comment="mozilla-nss-sysinit-32bit is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129294" version="1" comment="mozilla-nss-tools is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140587" version="1" comment="libfreetype6 is &lt;2.6.3-7.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033880"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140588" version="1" comment="libfreetype6-32bit is &lt;2.6.3-7.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131105" version="1" comment="libgcrypt20 is &lt;1.6.1-16.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047974"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131106" version="1" comment="libgcrypt20-32bit is &lt;1.6.1-16.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038772"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047974"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126709" version="1" comment="libgif6 is &lt;5.0.5-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039791"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047430"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126710" version="1" comment="libgif6-32bit is &lt;5.0.5-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039792"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047430"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140842" version="1" comment="libgnomesu is &lt;2.0.0-353.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032348"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140843" version="1" comment="libgnomesu-lang is &lt;2.0.0-353.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034574"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140844" version="1" comment="libgnomesu0 is &lt;2.0.0-353.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034575"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124729" version="1" comment="libgraphite2-3 is &lt;1.3.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124730" version="1" comment="libgraphite2-3-32bit is &lt;1.3.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039087"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140676" version="1" comment="libgypsy0 is &lt;0.9-6.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037106"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049835"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123011" version="1" comment="libhogweed2 is &lt;2.7.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039813"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123012" version="1" comment="libhogweed2-32bit is &lt;2.7.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039814"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123014" version="1" comment="libnettle4 is &lt;2.7.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039816"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123015" version="1" comment="libnettle4-32bit is &lt;2.7.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039817"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130989" version="1" comment="libidn11 is &lt;1.28-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038785"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130990" version="1" comment="libidn11-32bit is &lt;1.28-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038786"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140848" version="1" comment="libipa_hbac0 is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140849" version="1" comment="libsss_idmap0 is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140850" version="1" comment="libsss_sudo is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140851" version="1" comment="python-sssd-config is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140852" version="1" comment="sssd is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034052"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140853" version="1" comment="sssd-32bit is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140854" version="1" comment="sssd-ad is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140855" version="1" comment="sssd-ipa is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140856" version="1" comment="sssd-krb5 is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038196"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140857" version="1" comment="sssd-krb5-common is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038197"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140858" version="1" comment="sssd-ldap is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038198"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140859" version="1" comment="sssd-proxy is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140860" version="1" comment="sssd-tools is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142131" version="1" comment="libjavascriptcoregtk-1_0-0 is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038615"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142132" version="1" comment="libjavascriptcoregtk-1_0-0-32bit is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038616"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140862" version="1" comment="libjavascriptcoregtk-3_0-0 is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038625"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142133" version="1" comment="libwebkitgtk-1_0-0 is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038617"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142134" version="1" comment="libwebkitgtk-1_0-0-32bit is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038618"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140863" version="1" comment="libwebkitgtk-3_0-0 is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142135" version="1" comment="libwebkitgtk2-lang is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140864" version="1" comment="libwebkitgtk3-lang is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142136" version="1" comment="typelib-1_0-JavaScriptCore-3_0 is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142137" version="1" comment="typelib-1_0-WebKit-3_0 is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140865" version="1" comment="libjavascriptcoregtk-4_0-18 is &lt;2.12.5-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049892"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140866" version="1" comment="libwebkit2gtk-4_0-37 is &lt;2.12.5-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049892"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142138" version="1" comment="libwebkit2gtk3-lang is &lt;2.12.5-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049892"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140867" version="1" comment="typelib-1_0-JavaScriptCore-4_0 is &lt;2.12.5-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049892"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140868" version="1" comment="typelib-1_0-WebKit2-4_0 is &lt;2.12.5-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040314"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049892"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140869" version="1" comment="webkit2gtk-4_0-injected-bundles is &lt;2.12.5-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040317"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049892"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128468" version="1" comment="libksba8 is &lt;1.3.0-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140870" version="1" comment="libldap-2_4-2 is &lt;2.4.41-18.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033420"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049893"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140871" version="1" comment="libldap-2_4-2-32bit is &lt;2.4.41-18.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049893"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140874" version="1" comment="openldap2-client is &lt;2.4.41-18.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030545"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049893"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140715" version="1" comment="libldb1 is &lt;1.1.26-10.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034884"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049854"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140716" version="1" comment="libldb1-32bit is &lt;1.1.26-10.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034886"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049854"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118765" version="1" comment="libmspack0 is &lt;0.4-14.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038420"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046513"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131128" version="1" comment="libmysqlclient18 is &lt;10.0.27-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131129" version="1" comment="libmysqlclient18-32bit is &lt;10.0.27-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131130" version="1" comment="libmysqlclient_r18 is &lt;10.0.27-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131131" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.27-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131132" version="1" comment="mariadb is &lt;10.0.27-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131133" version="1" comment="mariadb-client is &lt;10.0.27-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131134" version="1" comment="mariadb-errormessages is &lt;10.0.27-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142139" version="1" comment="libndp0 is &lt;1.6-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041077"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050248"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142140" version="1" comment="libnewt0_52 is &lt;0.52.16-1.83" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033449"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140890" version="1" comment="libopenssl-devel is &lt;1.0.2j-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140891" version="1" comment="libopenssl1_0_0 is &lt;1.0.2j-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140892" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.2j-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140895" version="1" comment="openssl is &lt;1.0.2j-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131148" version="1" comment="libopenssl0_9_8 is &lt;0.9.8j-102.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131149" version="1" comment="libopenssl0_9_8-32bit is &lt;0.9.8j-102.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124478" version="1" comment="libotr5 is &lt;4.0.0-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040277"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047205"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140897" version="1" comment="libpango-1_0-0 is &lt;1.40.1-9.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041004"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140898" version="1" comment="libpango-1_0-0-32bit is &lt;1.40.1-9.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041005"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140899" version="1" comment="typelib-1_0-Pango-1_0 is &lt;1.40.1-9.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119221" version="1" comment="libpng12-0 is &lt;1.2.50-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030967"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046568"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119222" version="1" comment="libpng12-0-32bit is &lt;1.2.50-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046568"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119233" version="1" comment="libpng15-15 is &lt;1.5.22-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037892"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046572"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119224" version="1" comment="libpng16-16 is &lt;1.6.8-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037593"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046569"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119225" version="1" comment="libpng16-16-32bit is &lt;1.6.8-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037594"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046569"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140902" version="1" comment="libpolkit0 is &lt;0.113-5.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034515"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049906"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142141" version="1" comment="libpolkit0-32bit is &lt;0.113-5.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034514"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049906"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140903" version="1" comment="polkit is &lt;0.113-5.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034518"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049906"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140904" version="1" comment="typelib-1_0-Polkit-1_0 is &lt;0.113-5.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038998"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049906"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140905" version="1" comment="libpoppler-glib8 is &lt;0.43.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049907"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140906" version="1" comment="libpoppler-qt4-4 is &lt;0.43.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037283"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049907"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140907" version="1" comment="libpoppler60 is &lt;0.43.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041078"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049907"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140908" version="1" comment="poppler-tools is &lt;0.43.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049907"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128640" version="1" comment="libpoppler44 is &lt;0.24.4-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140909" version="1" comment="libproxy1 is &lt;0.4.13-16.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036471"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049908"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140910" version="1" comment="libproxy1-32bit is &lt;0.4.13-16.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049908"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140911" version="1" comment="libproxy1-config-gnome3 is &lt;0.4.13-16.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049909"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140912" version="1" comment="libproxy1-config-gnome3-32bit is &lt;0.4.13-16.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037241"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049909"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140913" version="1" comment="libproxy1-networkmanager is &lt;0.4.13-16.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036484"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049909"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142142" version="1" comment="libproxy1-networkmanager-32bit is &lt;0.4.13-16.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049909"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140914" version="1" comment="libproxy1-pacrunner-webkit is &lt;0.4.13-16.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049909"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130996" version="1" comment="libpython2_7-1_0 is &lt;2.7.9-24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130997" version="1" comment="libpython2_7-1_0-32bit is &lt;2.7.9-24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034538"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130999" version="1" comment="python-base is &lt;2.7.9-24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131001" version="1" comment="python-devel is &lt;2.7.9-24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131003" version="1" comment="python-xml is &lt;2.7.9-24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125268" version="1" comment="libqt4 is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031513"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125269" version="1" comment="libqt4-32bit is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125270" version="1" comment="libqt4-qt3support is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125271" version="1" comment="libqt4-qt3support-32bit is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125272" version="1" comment="libqt4-sql is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125273" version="1" comment="libqt4-sql-32bit is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125274" version="1" comment="libqt4-sql-mysql is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034705"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125275" version="1" comment="libqt4-sql-mysql-32bit is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034707"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125277" version="1" comment="libqt4-sql-postgresql is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034711"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125278" version="1" comment="libqt4-sql-postgresql-32bit is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034709"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125279" version="1" comment="libqt4-sql-sqlite is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125280" version="1" comment="libqt4-sql-sqlite-32bit is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125281" version="1" comment="libqt4-sql-unixODBC is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034714"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125282" version="1" comment="libqt4-sql-unixODBC-32bit is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034712"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125283" version="1" comment="libqt4-x11 is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031512"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125284" version="1" comment="libqt4-x11-32bit is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130948" version="1" comment="libreoffice is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131150" version="1" comment="libreoffice-base is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131151" version="1" comment="libreoffice-base-drivers-mysql is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131152" version="1" comment="libreoffice-base-drivers-postgresql is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131153" version="1" comment="libreoffice-calc is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131154" version="1" comment="libreoffice-calc-extensions is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131155" version="1" comment="libreoffice-draw is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131156" version="1" comment="libreoffice-filters-optional is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131157" version="1" comment="libreoffice-gnome is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131158" version="1" comment="libreoffice-icon-theme-galaxy is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131159" version="1" comment="libreoffice-icon-theme-tango is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131160" version="1" comment="libreoffice-impress is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131161" version="1" comment="libreoffice-l10n-af is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131162" version="1" comment="libreoffice-l10n-ar is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131163" version="1" comment="libreoffice-l10n-ca is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131164" version="1" comment="libreoffice-l10n-cs is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131165" version="1" comment="libreoffice-l10n-da is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131166" version="1" comment="libreoffice-l10n-de is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131167" version="1" comment="libreoffice-l10n-en is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131168" version="1" comment="libreoffice-l10n-es is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131169" version="1" comment="libreoffice-l10n-fi is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131170" version="1" comment="libreoffice-l10n-fr is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131171" version="1" comment="libreoffice-l10n-gu is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131172" version="1" comment="libreoffice-l10n-hi is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131173" version="1" comment="libreoffice-l10n-hu is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131174" version="1" comment="libreoffice-l10n-it is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131175" version="1" comment="libreoffice-l10n-ja is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131176" version="1" comment="libreoffice-l10n-ko is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131177" version="1" comment="libreoffice-l10n-nb is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131178" version="1" comment="libreoffice-l10n-nl is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131179" version="1" comment="libreoffice-l10n-nn is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131180" version="1" comment="libreoffice-l10n-pl is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131181" version="1" comment="libreoffice-l10n-pt-BR is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034145"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131182" version="1" comment="libreoffice-l10n-pt-PT is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142143" version="1" comment="libreoffice-l10n-ro is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131183" version="1" comment="libreoffice-l10n-ru is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131184" version="1" comment="libreoffice-l10n-sk is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131185" version="1" comment="libreoffice-l10n-sv is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131186" version="1" comment="libreoffice-l10n-xh is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131187" version="1" comment="libreoffice-l10n-zh-Hans is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038231"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131188" version="1" comment="libreoffice-l10n-zh-Hant is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131189" version="1" comment="libreoffice-l10n-zu is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131190" version="1" comment="libreoffice-mailmerge is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131191" version="1" comment="libreoffice-math is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131192" version="1" comment="libreoffice-officebean is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131193" version="1" comment="libreoffice-pyuno is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131194" version="1" comment="libreoffice-writer is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131195" version="1" comment="libreoffice-writer-extensions is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142144" version="1" comment="libreofficekit is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140929" version="1" comment="libruby2_1-2_1 is &lt;2.1.2-12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140930" version="1" comment="ruby2.1 is &lt;2.1.2-12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140931" version="1" comment="ruby2.1-stdlib is &lt;2.1.2-12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038315"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119271" version="1" comment="libsndfile1 is &lt;1.0.25-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119272" version="1" comment="libsndfile1-32bit is &lt;1.0.25-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038351"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140939" version="1" comment="libsoup-2_4-1 is &lt;2.54.1-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034629"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049916"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140940" version="1" comment="libsoup-2_4-1-32bit is &lt;2.54.1-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034627"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049916"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140941" version="1" comment="libsoup-lang is &lt;2.54.1-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041047"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049916"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140942" version="1" comment="typelib-1_0-Soup-2_4 is &lt;2.54.1-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041013"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049916"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140943" version="1" comment="libspice-client-glib-2_0-8 is &lt;0.31-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049917"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140944" version="1" comment="libspice-client-glib-helper is &lt;0.31-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041082"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049917"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140945" version="1" comment="libspice-client-gtk-2_0-4 is &lt;0.31-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037407"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049917"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140946" version="1" comment="libspice-client-gtk-3_0-4 is &lt;0.31-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037408"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049917"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140947" version="1" comment="libspice-controller0 is &lt;0.31-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037398"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049917"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140948" version="1" comment="typelib-1_0-SpiceClientGlib-2_0 is &lt;0.31-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049917"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140949" version="1" comment="typelib-1_0-SpiceClientGtk-3_0 is &lt;0.31-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049917"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140950" version="1" comment="libspice-server1 is &lt;0.12.7-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049918"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130774" version="1" comment="libsqlite3-0 is &lt;3.8.10.2-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040582"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130775" version="1" comment="libsqlite3-0-32bit is &lt;3.8.10.2-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130776" version="1" comment="sqlite3 is &lt;3.8.10.2-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140951" version="1" comment="libsrtp1 is &lt;1.5.2-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049919"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140952" version="1" comment="libssh2-1 is &lt;1.4.3-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038580"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049920"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140953" version="1" comment="libssh2-1-32bit is &lt;1.4.3-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049920"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123868" version="1" comment="libssh4 is &lt;0.6.3-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035367"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047163"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140954" version="1" comment="libsystemd0 is &lt;228-117.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140955" version="1" comment="libsystemd0-32bit is &lt;228-117.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140956" version="1" comment="libudev1 is &lt;228-117.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140957" version="1" comment="libudev1-32bit is &lt;228-117.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140958" version="1" comment="systemd is &lt;228-117.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140959" version="1" comment="systemd-32bit is &lt;228-117.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140960" version="1" comment="systemd-bash-completion is &lt;228-117.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140961" version="1" comment="systemd-sysvinit is &lt;228-117.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140962" version="1" comment="udev is &lt;228-117.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128901" version="1" comment="libtasn1 is &lt;3.7-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047689"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128902" version="1" comment="libtasn1-6 is &lt;3.7-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038681"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047689"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128903" version="1" comment="libtasn1-6-32bit is &lt;3.7-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038682"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047689"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140966" version="1" comment="libthai-data is &lt;0.1.25-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041085"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049923"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140967" version="1" comment="libthai0 is &lt;0.1.25-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049923"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140968" version="1" comment="libthai0-32bit is &lt;0.1.25-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041087"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049923"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131042" version="1" comment="libtiff5 is &lt;4.0.6-26.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131043" version="1" comment="libtiff5-32bit is &lt;4.0.6-26.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140975" version="1" comment="libusbmuxd4 is &lt;1.0.10-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049926"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140976" version="1" comment="libvdpau1 is &lt;1.1.1-6.73" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038959"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049927"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142145" version="1" comment="libvdpau1-32bit is &lt;1.1.1-6.73" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038960"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049927"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140977" version="1" comment="libvirt is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140978" version="1" comment="libvirt-client is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142146" version="1" comment="libvirt-client-32bit is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140979" version="1" comment="libvirt-daemon is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140980" version="1" comment="libvirt-daemon-config-network is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140981" version="1" comment="libvirt-daemon-config-nwfilter is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140982" version="1" comment="libvirt-daemon-driver-interface is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140983" version="1" comment="libvirt-daemon-driver-libxl is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140984" version="1" comment="libvirt-daemon-driver-lxc is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140985" version="1" comment="libvirt-daemon-driver-network is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140986" version="1" comment="libvirt-daemon-driver-nodedev is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140987" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140988" version="1" comment="libvirt-daemon-driver-qemu is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140989" version="1" comment="libvirt-daemon-driver-secret is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140990" version="1" comment="libvirt-daemon-driver-storage is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140991" version="1" comment="libvirt-daemon-lxc is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140992" version="1" comment="libvirt-daemon-qemu is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140993" version="1" comment="libvirt-daemon-xen is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140994" version="1" comment="libvirt-doc is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141004" version="1" comment="libvte9 is &lt;0.28.2-19.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037174"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049931"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141007" version="1" comment="libxcb-dri2-0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141008" version="1" comment="libxcb-dri2-0-32bit is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035996"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141009" version="1" comment="libxcb-dri3-0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040927"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141010" version="1" comment="libxcb-dri3-0-32bit is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040928"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141011" version="1" comment="libxcb-glx0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141012" version="1" comment="libxcb-glx0-32bit is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141013" version="1" comment="libxcb-present0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040929"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141014" version="1" comment="libxcb-present0-32bit is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141015" version="1" comment="libxcb-randr0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141016" version="1" comment="libxcb-render0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141017" version="1" comment="libxcb-render0-32bit is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036012"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141018" version="1" comment="libxcb-shape0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036023"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141019" version="1" comment="libxcb-shm0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036027"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141020" version="1" comment="libxcb-shm0-32bit is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036028"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141021" version="1" comment="libxcb-sync1 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040931"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141022" version="1" comment="libxcb-sync1-32bit is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141023" version="1" comment="libxcb-xf86dri0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141024" version="1" comment="libxcb-xfixes0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036043"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141025" version="1" comment="libxcb-xfixes0-32bit is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141026" version="1" comment="libxcb-xinerama0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036047"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141027" version="1" comment="libxcb-xkb1 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141028" version="1" comment="libxcb-xkb1-32bit is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040934"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141029" version="1" comment="libxcb-xv0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141030" version="1" comment="libxcb1 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141031" version="1" comment="libxcb1-32bit is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036068"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131022" version="1" comment="libxerces-c-3_1 is &lt;3.1.1-12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038592"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047961"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131023" version="1" comment="libxerces-c-3_1-32bit is &lt;3.1.1-12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038593"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047961"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141032" version="1" comment="libxml2-2 is &lt;2.9.4-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141033" version="1" comment="libxml2-2-32bit is &lt;2.9.4-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141035" version="1" comment="libxml2-tools is &lt;2.9.4-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141037" version="1" comment="libzip2 is &lt;0.11.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142147" version="1" comment="libzmq3 is &lt;4.0.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038947"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141041" version="1" comment="mailx is &lt;12.5-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129286" version="1" comment="mozilla-nspr is &lt;4.12-15.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047741"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129287" version="1" comment="mozilla-nspr-32bit is &lt;4.12-15.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047741"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141043" version="1" comment="mutt is &lt;1.6.0-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049941"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128799" version="1" comment="ntp is &lt;4.2.8p8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128800" version="1" comment="ntp-doc is &lt;4.2.8p8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131123" version="1" comment="openslp is &lt;2.0.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047980"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131124" version="1" comment="openslp-32bit is &lt;2.0.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047980"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141045" version="1" comment="openssh is &lt;7.2p2-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141047" version="1" comment="openssh-helpers is &lt;7.2p2-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141048" version="1" comment="openvpn is &lt;2.3.8-16.6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128891" version="1" comment="p7zip is &lt;9.20.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038766"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047688"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131038" version="1" comment="perl is &lt;5.18.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131039" version="1" comment="perl-32bit is &lt;5.18.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030599"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131040" version="1" comment="perl-base is &lt;5.18.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031056"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131041" version="1" comment="perl-doc is &lt;5.18.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142148" version="1" comment="pidgin-otr is &lt;4.0.0-11.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033522"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050251"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142149" version="1" comment="puppet is &lt;3.8.5-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033794"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130998" version="1" comment="python is &lt;2.7.9-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131000" version="1" comment="python-curses is &lt;2.7.9-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131002" version="1" comment="python-tk is &lt;2.7.9-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141075" version="1" comment="python3-curses is &lt;3.4.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141076" version="1" comment="python-cupshelpers is &lt;1.5.7-7.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034773"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049961"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141077" version="1" comment="system-config-printer is &lt;1.5.7-7.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034775"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049961"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141078" version="1" comment="system-config-printer-common is &lt;1.5.7-7.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036659"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049961"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141079" version="1" comment="system-config-printer-common-lang is &lt;1.5.7-7.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036660"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049961"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141080" version="1" comment="system-config-printer-dbus-service is &lt;1.5.7-7.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049961"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141081" version="1" comment="udev-configure-printer is &lt;1.5.7-7.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034776"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049961"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141083" version="1" comment="python-libxml2 is &lt;2.9.4-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141084" version="1" comment="python-pyOpenSSL is &lt;16.0.0-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037424"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049963"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141086" version="1" comment="python-requests is &lt;2.8.1-6.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049965"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141087" version="1" comment="qemu is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141089" version="1" comment="qemu-block-curl is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141093" version="1" comment="qemu-ipxe is &lt;1.0.0-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141094" version="1" comment="qemu-kvm is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141098" version="1" comment="qemu-seabios is &lt;1.9.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049968"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141099" version="1" comment="qemu-sgabios is &lt;8-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141100" version="1" comment="qemu-tools is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141101" version="1" comment="qemu-vgabios is &lt;1.9.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049968"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141102" version="1" comment="qemu-x86 is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142150" version="1" comment="rhythmbox is &lt;3.4-6.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142151" version="1" comment="rhythmbox-lang is &lt;3.4-6.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037164"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141107" version="1" comment="rpcbind is &lt;0.2.3-21.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141108" version="1" comment="rpm is &lt;4.11.2-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032541"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049973"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141109" version="1" comment="rpm-32bit is &lt;4.11.2-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033901"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049973"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141110" version="1" comment="rpm-build is &lt;4.11.2-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049973"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141111" version="1" comment="rsync is &lt;3.1.0-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030761"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049974"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141112" version="1" comment="rsyslog is &lt;8.4.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033100"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141125" version="1" comment="shim is &lt;0.9-20.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038277"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049979"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122758" version="1" comment="socat is &lt;1.7.2.4-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046965"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141126" version="1" comment="squashfs is &lt;4.3-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041022"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049980"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119278" version="1" comment="strongswan is &lt;5.1.3-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031037"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046580"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119279" version="1" comment="strongswan-doc is &lt;5.1.3-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031036"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046580"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119280" version="1" comment="strongswan-ipsec is &lt;5.1.3-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033871"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046580"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119281" version="1" comment="strongswan-libs0 is &lt;5.1.3-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033872"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046580"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141130" version="1" comment="sudo is &lt;1.8.10p3-6.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030544"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141131" version="1" comment="supportutils is &lt;3.0-85.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034036"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049984"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141132" version="1" comment="sysconfig is &lt;0.84.0-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032547"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049985"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141133" version="1" comment="sysconfig-netconfig is &lt;0.84.0-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041023"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049985"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141138" version="1" comment="sysvinit-tools is &lt;2.88+-96.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041024"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136443" version="1" comment="tar is &lt;1.27.1-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030401"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136445" version="1" comment="tar-lang is &lt;1.27.1-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033728"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141140" version="1" comment="tcpdump is &lt;4.5.1-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049990"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142152" version="1" comment="telepathy-gabble is &lt;0.18.3-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034325"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050254"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141151" version="1" comment="unixODBC is &lt;2.3.4-6.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141152" version="1" comment="unixODBC-32bit is &lt;2.3.4-6.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141153" version="1" comment="update-alternatives is &lt;1.18.4-14.216" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141154" version="1" comment="vino is &lt;3.20.2-5.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034537"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049995"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141155" version="1" comment="vino-lang is &lt;3.20.2-5.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034536"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049995"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141157" version="1" comment="w3m is &lt;0.5.3-157.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030675"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049997"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131037" version="1" comment="wget is &lt;1.14-10.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030457"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047965"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131146" version="1" comment="wireshark is &lt;1.12.13-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047986"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131098" version="1" comment="wpa_supplicant is &lt;2.2-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034744"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047971"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141159" version="1" comment="xen is &lt;4.7.0_12-23.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141161" version="1" comment="xen-libs is &lt;4.7.0_12-23.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141162" version="1" comment="xen-libs-32bit is &lt;4.7.0_12-23.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141165" version="1" comment="xf86-video-intel is &lt;2.99.917.641_ge4ef6e9-12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041025"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050000"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141166" version="1" comment="xfsprogs is &lt;4.3.0-8.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050001"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141173" version="1" comment="xorg-x11-server is &lt;7.6_1.18.3-57.34" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141174" version="1" comment="xorg-x11-server-extra is &lt;7.6_1.18.3-57.34" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119273" version="1" comment="xscreensaver is &lt;5.22-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030743"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046578"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119274" version="1" comment="xscreensaver-data is &lt;5.22-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039343"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046578"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141175" version="1" comment="yast2 is &lt;3.1.206-37.1.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032603"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141176" version="1" comment="yast2-core is &lt;3.1.23-6.38" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030808"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141177" version="1" comment="yast2-users is &lt;3.1.57-16.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050010"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159517" version="1" comment="sled-release is ==12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052091"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156374" version="1" comment="ImageMagick is &lt;6.8.8.1-70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156375" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156376" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156377" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156378" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157344" version="1" comment="MozillaFirefox is &lt;52.2.0esr-108.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051954"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157346" version="1" comment="MozillaFirefox-translations is &lt;52.2.0esr-108.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051954"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159624" version="1" comment="NetworkManager is &lt;1.0.12-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030981"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159625" version="1" comment="NetworkManager-lang is &lt;1.0.12-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034747"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159169" version="1" comment="libnm-glib-vpn1 is &lt;1.0.12-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037014"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159170" version="1" comment="libnm-glib4 is &lt;1.0.12-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037015"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159171" version="1" comment="libnm-util2 is &lt;1.0.12-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159172" version="1" comment="libnm0 is &lt;1.0.12-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041030"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159626" version="1" comment="typelib-1_0-NM-1_0 is &lt;1.0.12-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041031"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159173" version="1" comment="typelib-1_0-NMClient-1_0 is &lt;1.0.12-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041032"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159174" version="1" comment="typelib-1_0-NetworkManager-1_0 is &lt;1.0.12-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041033"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158923" version="1" comment="aaa_base is &lt;13.2+git20140911.61c1681-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052092"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158924" version="1" comment="aaa_base-extras is &lt;13.2+git20140911.61c1681-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034235"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052092"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158925" version="1" comment="alsa is &lt;1.0.27.2-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040936"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052093"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158927" version="1" comment="libasound2 is &lt;1.0.27.2-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040938"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052093"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158928" version="1" comment="libasound2-32bit is &lt;1.0.27.2-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040939"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052093"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158932" version="1" comment="apparmor-docs is &lt;2.8.2-49.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040404"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158933" version="1" comment="apparmor-parser is &lt;2.8.2-49.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158934" version="1" comment="apparmor-profiles is &lt;2.8.2-49.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040407"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158935" version="1" comment="apparmor-utils is &lt;2.8.2-49.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040408"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158936" version="1" comment="libapparmor1 is &lt;2.8.2-49.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040411"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158937" version="1" comment="libapparmor1-32bit is &lt;2.8.2-49.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040412"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158938" version="1" comment="pam_apparmor is &lt;2.8.2-49.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040413"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158939" version="1" comment="pam_apparmor-32bit is &lt;2.8.2-49.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158940" version="1" comment="perl-apparmor is &lt;2.8.2-49.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040415"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150578" version="1" comment="audiofile is &lt;0.3.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030868"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051493"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150579" version="1" comment="libaudiofile1 is &lt;0.3.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039072"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051493"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150580" version="1" comment="libaudiofile1-32bit is &lt;0.3.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039073"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051493"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158941" version="1" comment="augeas is &lt;1.2.0-15.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158942" version="1" comment="augeas-lenses is &lt;1.2.0-15.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038073"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158943" version="1" comment="libaugeas0 is &lt;1.2.0-15.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158944" version="1" comment="autofs is &lt;5.0.9-27.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155546" version="1" comment="bash is &lt;4.3-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032478"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155547" version="1" comment="bash-doc is &lt;4.3-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034959"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155548" version="1" comment="bash-lang is &lt;4.3-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037113"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155549" version="1" comment="libreadline6 is &lt;6.3-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037117"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051708"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155550" version="1" comment="libreadline6-32bit is &lt;6.3-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037116"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051708"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155551" version="1" comment="readline-doc is &lt;6.3-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051708"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157662" version="1" comment="bind-libs is &lt;9.9.9P1-62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157663" version="1" comment="bind-libs-32bit is &lt;9.9.9P1-62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157664" version="1" comment="bind-utils is &lt;9.9.9P1-62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157660" version="1" comment="clamav is &lt;0.99.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159627" version="1" comment="colord is &lt;1.3.3-12.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159628" version="1" comment="colord-lang is &lt;1.3.3-12.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158945" version="1" comment="libcolord2 is &lt;1.3.3-12.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158946" version="1" comment="libcolord2-32bit is &lt;1.3.3-12.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158947" version="1" comment="libcolorhug2 is &lt;1.3.3-12.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040963"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158948" version="1" comment="cpio is &lt;2.11-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052099"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158949" version="1" comment="cpio-lang is &lt;2.11-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052099"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158952" version="1" comment="cups is &lt;1.7.5-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030428"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158953" version="1" comment="cups-client is &lt;1.7.5-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158954" version="1" comment="cups-libs is &lt;1.7.5-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030427"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158955" version="1" comment="cups-libs-32bit is &lt;1.7.5-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030730"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158956" version="1" comment="cups-filters is &lt;1.0.58-17.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038657"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158957" version="1" comment="cups-filters-cups-browsed is &lt;1.0.58-17.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038658"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158958" version="1" comment="cups-filters-foomatic-rip is &lt;1.0.58-17.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038660"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158959" version="1" comment="cups-filters-ghostscript is &lt;1.0.58-17.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009138209" version="1" comment="cups-pk-helper is &lt;0.2.5-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009138210" version="1" comment="cups-pk-helper-lang is &lt;0.2.5-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154400" version="1" comment="curl is &lt;7.37.0-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051543"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154401" version="1" comment="libcurl4 is &lt;7.37.0-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051543"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154402" version="1" comment="libcurl4-32bit is &lt;7.37.0-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051543"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158960" version="1" comment="dbus-1 is &lt;1.8.22-28.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052104"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158961" version="1" comment="dbus-1-x11 is &lt;1.8.22-28.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052104"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158962" version="1" comment="libdbus-1-3 is &lt;1.8.22-28.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052105"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158963" version="1" comment="libdbus-1-3-32bit is &lt;1.8.22-28.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052105"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158964" version="1" comment="dnsmasq is &lt;2.76-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031669"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052106"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158969" version="1" comment="dracut is &lt;044-113.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052108"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159629" version="1" comment="drm-kmp-default is &lt;4.9.33_k4.4.73_5-2.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041794"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052227"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158971" version="1" comment="e2fsprogs is &lt;1.42.11-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158972" version="1" comment="libcom_err2 is &lt;1.42.11-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158973" version="1" comment="libcom_err2-32bit is &lt;1.42.11-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031457"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158974" version="1" comment="libext2fs2 is &lt;1.42.11-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158975" version="1" comment="emacs is &lt;24.3-19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030850"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158977" version="1" comment="emacs-info is &lt;24.3-19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030848"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158979" version="1" comment="emacs-x11 is &lt;24.3-19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158980" version="1" comment="etags is &lt;24.3-19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038236"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159630" version="1" comment="empathy is &lt;3.12.12-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034740"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052228"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159631" version="1" comment="empathy-lang is &lt;3.12.12-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034739"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052228"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159632" version="1" comment="telepathy-mission-control-plugin-goa is &lt;3.12.12-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052228"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148243" version="1" comment="expat is &lt;2.1.0-20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148244" version="1" comment="libexpat1 is &lt;2.1.0-20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148245" version="1" comment="libexpat1-32bit is &lt;2.1.0-20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159633" version="1" comment="facter is &lt;2.4.6-11.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037327"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052229"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159634" version="1" comment="finch is &lt;2.12.0-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031748"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159635" version="1" comment="libpurple is &lt;2.12.0-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031423"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159636" version="1" comment="libpurple-branding-upstream is &lt;2.12.0-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035691"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159637" version="1" comment="libpurple-lang is &lt;2.12.0-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159638" version="1" comment="libpurple-plugin-sametime is &lt;2.12.0-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159639" version="1" comment="libpurple-tcl is &lt;2.12.0-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033532"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159640" version="1" comment="pidgin is &lt;2.12.0-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158992" version="1" comment="ft2demos is &lt;2.6.3-7.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034838"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052112"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148438" version="1" comment="gd is &lt;2.1.0-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051266"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148439" version="1" comment="gd-32bit is &lt;2.1.0-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051266"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158993" version="1" comment="gdk-pixbuf-lang is &lt;2.34.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037124"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158994" version="1" comment="gdk-pixbuf-query-loaders is &lt;2.34.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158995" version="1" comment="gdk-pixbuf-query-loaders-32bit is &lt;2.34.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158996" version="1" comment="libgdk_pixbuf-2_0-0 is &lt;2.34.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037131"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158997" version="1" comment="libgdk_pixbuf-2_0-0-32bit is &lt;2.34.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037132"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158998" version="1" comment="typelib-1_0-GdkPixbuf-2_0 is &lt;2.34.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038954"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149576" version="1" comment="gegl-0_2 is &lt;0.2.0-14.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051401"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149577" version="1" comment="gegl-0_2-lang is &lt;0.2.0-14.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035376"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051401"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149578" version="1" comment="libgegl-0_2-0 is &lt;0.2.0-14.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035381"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051401"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155975" version="1" comment="ghostscript is &lt;9.15-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051747"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155976" version="1" comment="ghostscript-x11 is &lt;9.15-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030822"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051747"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150803" version="1" comment="gimp is &lt;2.8.18-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030642"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051505"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150804" version="1" comment="gimp-lang is &lt;2.8.18-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051505"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150805" version="1" comment="gimp-plugins-python is &lt;2.8.18-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051505"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150806" version="1" comment="libgimp-2_0-0 is &lt;2.8.18-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051505"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150807" version="1" comment="libgimpui-2_0-0 is &lt;2.8.18-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034558"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051505"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156957" version="1" comment="glibc is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156958" version="1" comment="glibc-32bit is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156959" version="1" comment="glibc-devel is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156960" version="1" comment="glibc-devel-32bit is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156961" version="1" comment="glibc-i18ndata is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156962" version="1" comment="glibc-locale is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156963" version="1" comment="glibc-locale-32bit is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156964" version="1" comment="nscd is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159641" version="1" comment="gnome-online-accounts is &lt;3.20.5-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035605"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052136"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159642" version="1" comment="gnome-online-accounts-lang is &lt;3.20.5-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035609"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052136"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159138" version="1" comment="libgoa-1_0-0 is &lt;3.20.5-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035610"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052136"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159643" version="1" comment="libgoa-1_0-0-32bit is &lt;3.20.5-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035611"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052136"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159139" version="1" comment="libgoa-backend-1_0-1 is &lt;3.20.5-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052136"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159644" version="1" comment="typelib-1_0-Goa-1_0 is &lt;3.20.5-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035618"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052136"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158999" version="1" comment="gnome-settings-daemon is &lt;3.20.1-49.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038173"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159000" version="1" comment="gnome-settings-daemon-lang is &lt;3.20.1-49.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038175"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159001" version="1" comment="gnome-shell is &lt;3.20.4-76.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040981"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052115"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159002" version="1" comment="gnome-shell-browser-plugin is &lt;3.20.4-76.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040982"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052115"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159645" version="1" comment="gnome-shell-calendar is &lt;3.20.4-76.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052115"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159003" version="1" comment="gnome-shell-lang is &lt;3.20.4-76.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041040"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052115"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159004" version="1" comment="gnutls is &lt;3.3.27-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030524"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159006" version="1" comment="libgnutls28 is &lt;3.3.27-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159007" version="1" comment="libgnutls28-32bit is &lt;3.3.27-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159008" version="1" comment="gpg2 is &lt;2.0.24-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030602"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159009" version="1" comment="gpg2-lang is &lt;2.0.24-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033865"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159010" version="1" comment="grub2 is &lt;2.02-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159012" version="1" comment="grub2-i386-pc is &lt;2.02-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159015" version="1" comment="grub2-snapper-plugin is &lt;2.02-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039508"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159016" version="1" comment="grub2-systemd-sleep-plugin is &lt;2.02-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159017" version="1" comment="grub2-x86_64-efi is &lt;2.02-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159018" version="1" comment="grub2-x86_64-xen is &lt;2.02-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150843" version="1" comment="gstreamer is &lt;1.8.3-9.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051513"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150844" version="1" comment="gstreamer-lang is &lt;1.8.3-9.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041490"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051513"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150845" version="1" comment="gstreamer-utils is &lt;1.8.3-9.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051513"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150846" version="1" comment="libgstreamer-1_0-0 is &lt;1.8.3-9.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051513"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150847" version="1" comment="libgstreamer-1_0-0-32bit is &lt;1.8.3-9.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041493"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051513"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150848" version="1" comment="typelib-1_0-Gst-1_0 is &lt;1.8.3-9.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051513"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147825" version="1" comment="gstreamer-0_10-plugins-bad is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147829" version="1" comment="gstreamer-0_10-plugins-bad-lang is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147830" version="1" comment="libgstbasecamerabinsrc-0_10-23 is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038732"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147831" version="1" comment="libgstbasecamerabinsrc-0_10-23-32bit is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038733"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147832" version="1" comment="libgstbasevideo-0_10-23 is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038734"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147833" version="1" comment="libgstbasevideo-0_10-23-32bit is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038735"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147834" version="1" comment="libgstcodecparsers-0_10-23 is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038736"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147836" version="1" comment="libgstphotography-0_10-23 is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038738"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147837" version="1" comment="libgstphotography-0_10-23-32bit is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038739"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147838" version="1" comment="libgstsignalprocessor-0_10-23 is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038740"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147839" version="1" comment="libgstsignalprocessor-0_10-23-32bit is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038741"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147840" version="1" comment="libgstvdp-0_10-23 is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038742"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147841" version="1" comment="libgstvdp-0_10-23-32bit is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038743"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154327" version="1" comment="gstreamer-0_10-plugins-base is &lt;0.10.36-17.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051534"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154328" version="1" comment="gstreamer-0_10-plugins-base-32bit is &lt;0.10.36-17.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030998"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051534"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154329" version="1" comment="gstreamer-0_10-plugins-base-lang is &lt;0.10.36-17.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051534"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154330" version="1" comment="libgstapp-0_10-0 is &lt;0.10.36-17.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051534"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154331" version="1" comment="libgstapp-0_10-0-32bit is &lt;0.10.36-17.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041186"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051534"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154332" version="1" comment="libgstinterfaces-0_10-0 is &lt;0.10.36-17.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031005"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051534"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154333" version="1" comment="libgstinterfaces-0_10-0-32bit is &lt;0.10.36-17.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051534"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147371" version="1" comment="gstreamer-0_10-plugins-good is &lt;0.10.31-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051013"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147372" version="1" comment="gstreamer-0_10-plugins-good-lang is &lt;0.10.31-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051013"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150831" version="1" comment="gstreamer-plugins-bad is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150832" version="1" comment="gstreamer-plugins-bad-lang is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150833" version="1" comment="libgstadaptivedemux-1_0-0 is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150834" version="1" comment="libgstbadaudio-1_0-0 is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150835" version="1" comment="libgstbadbase-1_0-0 is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041154"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150836" version="1" comment="libgstbadvideo-1_0-0 is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041156"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150837" version="1" comment="libgstbasecamerabinsrc-1_0-0 is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041158"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150838" version="1" comment="libgstcodecparsers-1_0-0 is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150839" version="1" comment="libgstgl-1_0-0 is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041162"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150840" version="1" comment="libgstmpegts-1_0-0 is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041166"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150841" version="1" comment="libgstphotography-1_0-0 is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041168"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150842" version="1" comment="libgsturidownloader-1_0-0 is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041170"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154408" version="1" comment="gstreamer-plugins-base is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041337"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154409" version="1" comment="gstreamer-plugins-base-lang is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154410" version="1" comment="libgstallocators-1_0-0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154411" version="1" comment="libgstapp-1_0-0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154412" version="1" comment="libgstapp-1_0-0-32bit is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041345"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154413" version="1" comment="libgstaudio-1_0-0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041346"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154414" version="1" comment="libgstaudio-1_0-0-32bit is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154415" version="1" comment="libgstfft-1_0-0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041348"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154416" version="1" comment="libgstfft-1_0-0-32bit is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041349"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154417" version="1" comment="libgstpbutils-1_0-0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154418" version="1" comment="libgstpbutils-1_0-0-32bit is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041351"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154419" version="1" comment="libgstriff-1_0-0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041352"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154420" version="1" comment="libgstrtp-1_0-0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154421" version="1" comment="libgstrtsp-1_0-0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154422" version="1" comment="libgstsdp-1_0-0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154423" version="1" comment="libgsttag-1_0-0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154424" version="1" comment="libgsttag-1_0-0-32bit is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154425" version="1" comment="libgstvideo-1_0-0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154426" version="1" comment="libgstvideo-1_0-0-32bit is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154427" version="1" comment="typelib-1_0-GstAudio-1_0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041366"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154428" version="1" comment="typelib-1_0-GstPbutils-1_0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154429" version="1" comment="typelib-1_0-GstTag-1_0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041373"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154430" version="1" comment="typelib-1_0-GstVideo-1_0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159019" version="1" comment="gstreamer-plugins-good is &lt;1.8.3-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052119"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159020" version="1" comment="gstreamer-plugins-good-lang is &lt;1.8.3-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052119"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148134" version="1" comment="guile is &lt;2.0.9-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040811"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051212"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148135" version="1" comment="guile-modules-2_0 is &lt;2.0.9-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040813"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051212"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148136" version="1" comment="libguile-2_0-22 is &lt;2.0.9-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040814"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051212"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157587" version="1" comment="gvim is &lt;7.4.326-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030753"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051977"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157588" version="1" comment="vim is &lt;7.4.326-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032775"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051977"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157589" version="1" comment="vim-data is &lt;7.4.326-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031745"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051977"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159029" version="1" comment="hplip is &lt;3.16.11-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159030" version="1" comment="hplip-hpijs is &lt;3.16.11-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031434"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159031" version="1" comment="hplip-sane is &lt;3.16.11-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037412"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159032" version="1" comment="ibus-pinyin is &lt;1.5.0-11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052122"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155970" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.141-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051748"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155971" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.141-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051748"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159646" version="1" comment="java-1_7_0-openjdk-plugin is &lt;1.6.2-2.8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159647" version="1" comment="java-1_8_0-openjdk-plugin is &lt;1.6.2-2.10.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052232"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156235" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.131-26.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156236" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.131-26.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159034" version="1" comment="kdump is &lt;0.8.16-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052124"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159035" version="1" comment="kernel-default is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159037" version="1" comment="kernel-default-devel is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159648" version="1" comment="kernel-default-extra is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159039" version="1" comment="kernel-devel is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159040" version="1" comment="kernel-macros is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159041" version="1" comment="kernel-source is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159042" version="1" comment="kernel-syms is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159043" version="1" comment="lftp is &lt;4.7.4-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033796"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159044" version="1" comment="libQt5Concurrent5 is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038886"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159045" version="1" comment="libQt5Core5 is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159046" version="1" comment="libQt5DBus5 is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038896"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159047" version="1" comment="libQt5Gui5 is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037608"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159048" version="1" comment="libQt5Network5 is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159049" version="1" comment="libQt5OpenGL5 is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038909"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159050" version="1" comment="libQt5PrintSupport5 is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038919"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159051" version="1" comment="libQt5Sql5 is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037610"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159052" version="1" comment="libQt5Sql5-mysql is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159053" version="1" comment="libQt5Sql5-postgresql is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159054" version="1" comment="libQt5Sql5-sqlite is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038928"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159055" version="1" comment="libQt5Sql5-unixODBC is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159056" version="1" comment="libQt5Test5 is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159057" version="1" comment="libQt5Widgets5 is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037614"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159058" version="1" comment="libQt5Xml5 is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038940"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159059" version="1" comment="libQt5WebKit5 is &lt;5.6.2-1.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159060" version="1" comment="libQt5WebKit5-imports is &lt;5.6.2-1.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039636"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159061" version="1" comment="libQt5WebKitWidgets5 is &lt;5.6.2-1.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136381" version="1" comment="libX11-6 is &lt;1.6.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136382" version="1" comment="libX11-6-32bit is &lt;1.6.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136383" version="1" comment="libX11-data is &lt;1.6.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036218"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136384" version="1" comment="libX11-xcb1 is &lt;1.6.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136385" version="1" comment="libX11-xcb1-32bit is &lt;1.6.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135061" version="1" comment="libXfixes3 is &lt;5.0.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135062" version="1" comment="libXfixes3-32bit is &lt;5.0.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136640" version="1" comment="libXi6 is &lt;1.7.4-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036145"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048708"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136641" version="1" comment="libXi6-32bit is &lt;1.7.4-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036146"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048708"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148436" version="1" comment="libXpm4 is &lt;3.5.11-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051265"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148437" version="1" comment="libXpm4-32bit is &lt;3.5.11-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051265"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135553" version="1" comment="libXrender1 is &lt;0.9.8-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036099"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048550"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135554" version="1" comment="libXrender1-32bit is &lt;0.9.8-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036100"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048550"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135081" version="1" comment="libXtst6 is &lt;1.2.2-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036177"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048475"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135082" version="1" comment="libXtst6-32bit is &lt;1.2.2-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036178"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048475"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135086" version="1" comment="libXv1 is &lt;1.0.10-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036115"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048476"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135087" version="1" comment="libXv1-32bit is &lt;1.0.10-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036116"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048476"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135556" version="1" comment="libXvMC1 is &lt;1.0.8-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036185"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048551"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154696" version="1" comment="libXvnc1 is &lt;1.6.0-18.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041072"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051585"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154697" version="1" comment="tigervnc is &lt;1.6.0-18.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051585"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154698" version="1" comment="xorg-x11-Xvnc is &lt;1.6.0-18.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051585"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135964" version="1" comment="libarchive13 is &lt;3.1.2-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048607"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159062" version="1" comment="libasan2 is &lt;5.3.1+r233831-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052129"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159063" version="1" comment="libasan2-32bit is &lt;5.3.1+r233831-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052129"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159064" version="1" comment="libffi4 is &lt;5.3.1+r233831-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052129"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159065" version="1" comment="libffi4-32bit is &lt;5.3.1+r233831-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052129"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159066" version="1" comment="libmpx0 is &lt;5.3.1+r233831-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052129"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159067" version="1" comment="libmpx0-32bit is &lt;5.3.1+r233831-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040373"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052129"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159068" version="1" comment="libmpxwrappers0 is &lt;5.3.1+r233831-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052129"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159069" version="1" comment="libmpxwrappers0-32bit is &lt;5.3.1+r233831-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052129"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142721" version="1" comment="libass5 is &lt;0.10.2-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041073"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050324"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159070" version="1" comment="libblkid1 is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159071" version="1" comment="libblkid1-32bit is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159072" version="1" comment="libfdisk1 is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040900"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159073" version="1" comment="libmount1 is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159074" version="1" comment="libmount1-32bit is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038355"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159075" version="1" comment="libsmartcols1 is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159649" version="1" comment="libuuid-devel is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159076" version="1" comment="libuuid1 is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159077" version="1" comment="libuuid1-32bit is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159078" version="1" comment="python-libmount is &lt;2.29.2-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052131"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159079" version="1" comment="util-linux is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159080" version="1" comment="util-linux-lang is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159081" version="1" comment="util-linux-systemd is &lt;2.29.2-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052131"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159082" version="1" comment="uuidd is &lt;2.29.2-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052131"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157339" version="1" comment="libcairo-gobject2 is &lt;1.15.2-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040386"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157340" version="1" comment="libcairo-gobject2-32bit is &lt;1.15.2-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040387"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157341" version="1" comment="libcairo-script-interpreter2 is &lt;1.15.2-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040388"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157342" version="1" comment="libcairo2 is &lt;1.15.2-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040390"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157343" version="1" comment="libcairo2-32bit is &lt;1.15.2-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040391"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146003" version="1" comment="libcares2 is &lt;1.9.1-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040902"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146004" version="1" comment="libcares2-32bit is &lt;1.9.1-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040903"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159084" version="1" comment="libcgroup1 is &lt;0.41.rc1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034326"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052132"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159085" version="1" comment="libdcerpc-binding0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159086" version="1" comment="libdcerpc-binding0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159087" version="1" comment="libdcerpc0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159088" version="1" comment="libdcerpc0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159089" version="1" comment="libndr-krb5pac0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159090" version="1" comment="libndr-krb5pac0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159091" version="1" comment="libndr-nbt0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159092" version="1" comment="libndr-nbt0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159093" version="1" comment="libndr-standard0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159094" version="1" comment="libndr-standard0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159095" version="1" comment="libndr0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159096" version="1" comment="libndr0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159097" version="1" comment="libnetapi0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159098" version="1" comment="libnetapi0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159099" version="1" comment="libsamba-credentials0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159100" version="1" comment="libsamba-credentials0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159101" version="1" comment="libsamba-errors0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159102" version="1" comment="libsamba-errors0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159103" version="1" comment="libsamba-hostconfig0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159104" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159105" version="1" comment="libsamba-passdb0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159106" version="1" comment="libsamba-passdb0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159107" version="1" comment="libsamba-util0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159108" version="1" comment="libsamba-util0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159109" version="1" comment="libsamdb0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159110" version="1" comment="libsamdb0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159111" version="1" comment="libsmbclient0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159112" version="1" comment="libsmbclient0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159113" version="1" comment="libsmbconf0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159114" version="1" comment="libsmbconf0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159115" version="1" comment="libsmbldap0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159116" version="1" comment="libsmbldap0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159117" version="1" comment="libtevent-util0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159118" version="1" comment="libtevent-util0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159119" version="1" comment="libwbclient0 is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159120" version="1" comment="libwbclient0-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159121" version="1" comment="samba is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159122" version="1" comment="samba-client is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159123" version="1" comment="samba-client-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159124" version="1" comment="samba-doc is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159125" version="1" comment="samba-libs is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159126" version="1" comment="samba-libs-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159127" version="1" comment="samba-winbind is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159128" version="1" comment="samba-winbind-32bit is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159129" version="1" comment="libecpg6 is &lt;9.6.3-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052134"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159130" version="1" comment="libpq5 is &lt;9.6.3-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052134"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159131" version="1" comment="libpq5-32bit is &lt;9.6.3-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052134"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159132" version="1" comment="postgresql96 is &lt;9.6.3-2.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041746"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052135"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154924" version="1" comment="libfbembed2_5 is &lt;2.5.2.26539-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035737"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051619"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155316" version="1" comment="libfreebl3 is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155317" version="1" comment="libfreebl3-32bit is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155318" version="1" comment="libsoftokn3 is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155319" version="1" comment="libsoftokn3-32bit is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155322" version="1" comment="mozilla-nss is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155323" version="1" comment="mozilla-nss-32bit is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155324" version="1" comment="mozilla-nss-certs is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155325" version="1" comment="mozilla-nss-certs-32bit is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155326" version="1" comment="mozilla-nss-sysinit is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155327" version="1" comment="mozilla-nss-sysinit-32bit is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155328" version="1" comment="mozilla-nss-tools is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159136" version="1" comment="libfreetype6 is &lt;2.6.3-7.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033880"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052112"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159137" version="1" comment="libfreetype6-32bit is &lt;2.6.3-7.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052112"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136646" version="1" comment="libgc1 is &lt;7.2d-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048711"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156955" version="1" comment="libgcrypt20 is &lt;1.6.1-16.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051912"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156956" version="1" comment="libgcrypt20-32bit is &lt;1.6.1-16.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038772"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051912"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145377" version="1" comment="libgme0 is &lt;0.6.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041271"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050823"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154911" version="1" comment="libgraphite2-3 is &lt;1.3.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051622"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154912" version="1" comment="libgraphite2-3-32bit is &lt;1.3.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039087"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051622"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156348" version="1" comment="libhogweed2 is &lt;2.7.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039813"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156349" version="1" comment="libhogweed2-32bit is &lt;2.7.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039814"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156351" version="1" comment="libnettle4 is &lt;2.7.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039816"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156352" version="1" comment="libnettle4-32bit is &lt;2.7.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039817"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159140" version="1" comment="libipa_hbac0 is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159141" version="1" comment="libsss_idmap0 is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159142" version="1" comment="libsss_nss_idmap0 is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038189"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159143" version="1" comment="libsss_sudo is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159144" version="1" comment="python-sssd-config is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159145" version="1" comment="sssd is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034052"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159146" version="1" comment="sssd-32bit is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159147" version="1" comment="sssd-ad is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159148" version="1" comment="sssd-ipa is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159149" version="1" comment="sssd-krb5 is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038196"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159150" version="1" comment="sssd-krb5-common is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038197"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159151" version="1" comment="sssd-ldap is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038198"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159152" version="1" comment="sssd-proxy is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159153" version="1" comment="sssd-tools is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150812" version="1" comment="libjasper1 is &lt;1.900.14-194.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034778"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150813" version="1" comment="libjasper1-32bit is &lt;1.900.14-194.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034777"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155614" version="1" comment="libkde4 is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031693"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155615" version="1" comment="libkde4-32bit is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031690"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155616" version="1" comment="libkdecore4 is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031697"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155617" version="1" comment="libkdecore4-32bit is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031694"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155618" version="1" comment="libksuseinstall1 is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034319"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155619" version="1" comment="libksuseinstall1-32bit is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034318"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156765" version="1" comment="libldap-2_4-2 is &lt;2.4.41-18.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033420"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156766" version="1" comment="libldap-2_4-2-32bit is &lt;2.4.41-18.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156768" version="1" comment="openldap2-client is &lt;2.4.41-18.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030545"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159154" version="1" comment="libldb1 is &lt;1.1.29-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034884"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052138"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159155" version="1" comment="libldb1-32bit is &lt;1.1.29-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034886"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052138"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159156" version="1" comment="libltdl7 is &lt;2.4.2-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033552"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052139"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159157" version="1" comment="libltdl7-32bit is &lt;2.4.2-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033550"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052139"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159160" version="1" comment="liblua5_2 is &lt;5.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038155"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052140"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159162" version="1" comment="lua is &lt;5.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038156"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052140"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159163" version="1" comment="libmysqlclient18 is &lt;10.0.30-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159164" version="1" comment="libmysqlclient18-32bit is &lt;10.0.30-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159650" version="1" comment="libmysqlclient_r18 is &lt;10.0.30-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159651" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.30-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159165" version="1" comment="mariadb is &lt;10.0.30-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159166" version="1" comment="mariadb-client is &lt;10.0.30-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159167" version="1" comment="mariadb-errormessages is &lt;10.0.30-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009139268" version="1" comment="libnetpbm11 is &lt;10.66.3-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040627"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049415"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156953" version="1" comment="libnetpbm11-32bit is &lt;10.66.3-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049415"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009139269" version="1" comment="netpbm is &lt;10.66.3-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030553"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049415"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145907" version="1" comment="libopenjp2-7 is &lt;2.1.0-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148318" version="1" comment="libopenssl-devel is &lt;1.0.2j-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148319" version="1" comment="libopenssl1_0_0 is &lt;1.0.2j-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148320" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.2j-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148321" version="1" comment="openssl is &lt;1.0.2j-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149123" version="1" comment="libopenssl0_9_8 is &lt;0.9.8j-105.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051342"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149124" version="1" comment="libopenssl0_9_8-32bit is &lt;0.9.8j-105.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051342"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148261" version="1" comment="libopus0 is &lt;1.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041430"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155050" version="1" comment="libosip2 is &lt;3.5.0-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051643"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143034" version="1" comment="libpcre1 is &lt;8.39-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038688"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050373"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143035" version="1" comment="libpcre1-32bit is &lt;8.39-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038687"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050373"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143036" version="1" comment="libpcre16-0 is &lt;8.39-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038690"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050373"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143037" version="1" comment="libpcrecpp0 is &lt;8.39-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038692"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050373"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143038" version="1" comment="libpcrecpp0-32bit is &lt;8.39-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038691"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050373"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147770" version="1" comment="libpcsclite1 is &lt;1.8.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033875"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147771" version="1" comment="libpcsclite1-32bit is &lt;1.8.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147772" version="1" comment="pcsc-lite is &lt;1.8.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032526"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155695" version="1" comment="libplist++3 is &lt;1.12-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051734"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155696" version="1" comment="libplist3 is &lt;1.12-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051734"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149999" version="1" comment="libpng12-0 is &lt;1.2.50-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030967"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051458"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150000" version="1" comment="libpng12-0-32bit is &lt;1.2.50-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051458"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150810" version="1" comment="libpng15-15 is &lt;1.5.22-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037892"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051506"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149948" version="1" comment="libpng16-16 is &lt;1.6.8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037593"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149949" version="1" comment="libpng16-16-32bit is &lt;1.6.8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037594"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159175" version="1" comment="libpulse-mainloop-glib0 is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033659"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159176" version="1" comment="libpulse-mainloop-glib0-32bit is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159177" version="1" comment="libpulse0 is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159178" version="1" comment="libpulse0-32bit is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033660"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159179" version="1" comment="pulseaudio is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032767"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159180" version="1" comment="pulseaudio-esound-compat is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033662"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159181" version="1" comment="pulseaudio-gdm-hooks is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033663"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159182" version="1" comment="pulseaudio-lang is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033664"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159652" version="1" comment="pulseaudio-module-bluetooth is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033665"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159653" version="1" comment="pulseaudio-module-gconf is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033666"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159654" version="1" comment="pulseaudio-module-jack is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033667"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159655" version="1" comment="pulseaudio-module-lirc is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033668"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159183" version="1" comment="pulseaudio-module-x11 is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033669"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159184" version="1" comment="pulseaudio-module-zeroconf is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033670"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159185" version="1" comment="pulseaudio-utils is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033671"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159186" version="1" comment="libpython2_7-1_0 is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159187" version="1" comment="libpython2_7-1_0-32bit is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034538"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159188" version="1" comment="python-base is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159656" version="1" comment="python-devel is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159190" version="1" comment="python-xml is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159191" version="1" comment="libpython3_4m1_0 is &lt;3.4.6-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052145"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159192" version="1" comment="python3-base is &lt;3.4.6-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052145"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149137" version="1" comment="libquicktime0 is &lt;1.2.4-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051348"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159657" version="1" comment="libreoffice is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159658" version="1" comment="libreoffice-base is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159659" version="1" comment="libreoffice-base-drivers-mysql is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159660" version="1" comment="libreoffice-base-drivers-postgresql is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159661" version="1" comment="libreoffice-calc is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159662" version="1" comment="libreoffice-calc-extensions is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159663" version="1" comment="libreoffice-draw is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159664" version="1" comment="libreoffice-filters-optional is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159665" version="1" comment="libreoffice-gnome is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159666" version="1" comment="libreoffice-icon-theme-galaxy is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159667" version="1" comment="libreoffice-icon-theme-tango is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159668" version="1" comment="libreoffice-impress is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159669" version="1" comment="libreoffice-l10n-af is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159670" version="1" comment="libreoffice-l10n-ar is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159671" version="1" comment="libreoffice-l10n-ca is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159672" version="1" comment="libreoffice-l10n-cs is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159673" version="1" comment="libreoffice-l10n-da is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159674" version="1" comment="libreoffice-l10n-de is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159675" version="1" comment="libreoffice-l10n-en is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159676" version="1" comment="libreoffice-l10n-es is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159677" version="1" comment="libreoffice-l10n-fi is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159678" version="1" comment="libreoffice-l10n-fr is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159679" version="1" comment="libreoffice-l10n-gu is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159680" version="1" comment="libreoffice-l10n-hi is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159681" version="1" comment="libreoffice-l10n-hu is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159682" version="1" comment="libreoffice-l10n-it is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159683" version="1" comment="libreoffice-l10n-ja is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159684" version="1" comment="libreoffice-l10n-ko is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159685" version="1" comment="libreoffice-l10n-nb is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159686" version="1" comment="libreoffice-l10n-nl is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159687" version="1" comment="libreoffice-l10n-nn is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159688" version="1" comment="libreoffice-l10n-pl is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159689" version="1" comment="libreoffice-l10n-pt_BR is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041715"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159690" version="1" comment="libreoffice-l10n-pt_PT is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041716"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159691" version="1" comment="libreoffice-l10n-ro is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159692" version="1" comment="libreoffice-l10n-ru is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159693" version="1" comment="libreoffice-l10n-sk is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159694" version="1" comment="libreoffice-l10n-sv is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159695" version="1" comment="libreoffice-l10n-xh is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159696" version="1" comment="libreoffice-l10n-zh_CN is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041717"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159697" version="1" comment="libreoffice-l10n-zh_TW is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041718"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159698" version="1" comment="libreoffice-l10n-zu is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159699" version="1" comment="libreoffice-mailmerge is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159700" version="1" comment="libreoffice-math is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159701" version="1" comment="libreoffice-officebean is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159702" version="1" comment="libreoffice-pyuno is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159703" version="1" comment="libreoffice-writer is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159704" version="1" comment="libreoffice-writer-extensions is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159705" version="1" comment="libreofficekit is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159193" version="1" comment="libruby2_1-2_1 is &lt;2.1.9-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052146"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159194" version="1" comment="ruby2.1 is &lt;2.1.9-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052146"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159195" version="1" comment="ruby2.1-stdlib is &lt;2.1.9-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038315"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052146"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155684" version="1" comment="libsndfile1 is &lt;1.0.25-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051732"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155685" version="1" comment="libsndfile1-32bit is &lt;1.0.25-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038351"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051732"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159196" version="1" comment="libspice-client-glib-2_0-8 is &lt;0.33-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052147"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159197" version="1" comment="libspice-client-glib-helper is &lt;0.33-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041082"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052147"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159198" version="1" comment="libspice-client-gtk-3_0-5 is &lt;0.33-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041750"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052147"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159199" version="1" comment="libspice-controller0 is &lt;0.33-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037398"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052147"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159200" version="1" comment="typelib-1_0-SpiceClientGlib-2_0 is &lt;0.33-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052147"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159201" version="1" comment="typelib-1_0-SpiceClientGtk-3_0 is &lt;0.33-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052147"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159202" version="1" comment="libspice-server1 is &lt;0.12.8-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052148"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159203" version="1" comment="libsqlite3-0 is &lt;3.8.10.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040582"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052149"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159204" version="1" comment="libsqlite3-0-32bit is &lt;3.8.10.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052149"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159205" version="1" comment="sqlite3 is &lt;3.8.10.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052149"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159206" version="1" comment="libsystemd0 is &lt;228-142.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159207" version="1" comment="libsystemd0-32bit is &lt;228-142.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159208" version="1" comment="libudev1 is &lt;228-142.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159209" version="1" comment="libudev1-32bit is &lt;228-142.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159210" version="1" comment="systemd is &lt;228-142.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159211" version="1" comment="systemd-32bit is &lt;228-142.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159212" version="1" comment="systemd-bash-completion is &lt;228-142.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159213" version="1" comment="systemd-sysvinit is &lt;228-142.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159214" version="1" comment="udev is &lt;228-142.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159215" version="1" comment="libtasn1 is &lt;4.9-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159216" version="1" comment="libtasn1-6 is &lt;4.9-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038681"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159217" version="1" comment="libtasn1-6-32bit is &lt;4.9-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038682"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154403" version="1" comment="libtiff5 is &lt;4.0.7-43.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051544"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154404" version="1" comment="libtiff5-32bit is &lt;4.0.7-43.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051544"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155553" version="1" comment="libtirpc-netconfig is &lt;1.0.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041602"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051709"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155554" version="1" comment="libtirpc3 is &lt;1.0.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041603"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051709"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155555" version="1" comment="libtirpc3-32bit is &lt;1.0.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041604"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051709"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149816" version="1" comment="libvirglrenderer0 is &lt;0.5.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041508"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051433"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159218" version="1" comment="libvirt is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159219" version="1" comment="libvirt-admin is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041751"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159220" version="1" comment="libvirt-client is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159221" version="1" comment="libvirt-daemon is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159222" version="1" comment="libvirt-daemon-config-network is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159223" version="1" comment="libvirt-daemon-config-nwfilter is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159224" version="1" comment="libvirt-daemon-driver-interface is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159225" version="1" comment="libvirt-daemon-driver-libxl is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159226" version="1" comment="libvirt-daemon-driver-lxc is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159227" version="1" comment="libvirt-daemon-driver-network is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159228" version="1" comment="libvirt-daemon-driver-nodedev is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159229" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159230" version="1" comment="libvirt-daemon-driver-qemu is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159231" version="1" comment="libvirt-daemon-driver-secret is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159232" version="1" comment="libvirt-daemon-driver-storage is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159233" version="1" comment="libvirt-daemon-driver-storage-core is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159234" version="1" comment="libvirt-daemon-driver-storage-disk is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041753"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159235" version="1" comment="libvirt-daemon-driver-storage-iscsi is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041754"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159236" version="1" comment="libvirt-daemon-driver-storage-logical is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041755"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159237" version="1" comment="libvirt-daemon-driver-storage-mpath is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159238" version="1" comment="libvirt-daemon-driver-storage-rbd is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041757"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159239" version="1" comment="libvirt-daemon-driver-storage-scsi is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041758"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159240" version="1" comment="libvirt-daemon-lxc is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159241" version="1" comment="libvirt-daemon-qemu is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159242" version="1" comment="libvirt-daemon-xen is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159243" version="1" comment="libvirt-doc is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159244" version="1" comment="libvirt-libs is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041759"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159247" version="1" comment="libvmtools0 is &lt;10.1.5-2.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034560"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052153"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159248" version="1" comment="open-vm-tools is &lt;10.1.5-2.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034562"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052153"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159249" version="1" comment="open-vm-tools-desktop is &lt;10.1.5-2.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052153"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157263" version="1" comment="libwireshark8 is &lt;2.2.7-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157264" version="1" comment="libwiretap6 is &lt;2.2.7-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157265" version="1" comment="libwscodecs1 is &lt;2.2.7-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157266" version="1" comment="libwsutil7 is &lt;2.2.7-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041623"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157267" version="1" comment="wireshark is &lt;2.2.7-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157268" version="1" comment="wireshark-gtk is &lt;2.2.7-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157768" version="1" comment="libxml2-2 is &lt;2.9.4-45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051991"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157769" version="1" comment="libxml2-2-32bit is &lt;2.9.4-45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051991"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157770" version="1" comment="libxml2-tools is &lt;2.9.4-45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051991"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155536" version="1" comment="libxslt-tools is &lt;1.1.28-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035827"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051705"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155537" version="1" comment="libxslt1 is &lt;1.1.28-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035829"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051705"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155538" version="1" comment="libxslt1-32bit is &lt;1.1.28-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035830"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051705"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146180" version="1" comment="libz1 is &lt;1.2.8-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041210"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146181" version="1" comment="libz1-32bit is &lt;1.2.8-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041211"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146183" version="1" comment="zlib-devel is &lt;1.2.8-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159706" version="1" comment="libzmq3 is &lt;4.0.4-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038947"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052234"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154700" version="1" comment="libzzip-0-13 is &lt;0.13.62-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159250" version="1" comment="logrotate is &lt;3.11.0-1.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034546"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052154"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154609" version="1" comment="minicom is &lt;2.7-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051572"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155320" version="1" comment="mozilla-nspr is &lt;4.13.1-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051685"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155321" version="1" comment="mozilla-nspr-32bit is &lt;4.13.1-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051685"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159252" version="1" comment="ntp is &lt;4.2.8p10-63.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159253" version="1" comment="ntp-doc is &lt;4.2.8p10-63.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131298" version="1" comment="openslp is &lt;2.0.0-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131299" version="1" comment="openslp-32bit is &lt;2.0.0-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159254" version="1" comment="openssh is &lt;7.2p2-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159256" version="1" comment="openssh-helpers is &lt;7.2p2-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157217" version="1" comment="openvpn is &lt;2.3.8-16.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155972" version="1" comment="pam is &lt;1.1.8-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032521"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051749"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155973" version="1" comment="pam-32bit is &lt;1.1.8-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032517"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051749"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155974" version="1" comment="pam-doc is &lt;1.1.8-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034725"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051749"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159258" version="1" comment="pcsc-ccid is &lt;1.4.25-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052159"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159707" version="1" comment="pidgin-plugin-otr is &lt;4.0.2-1.29" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041795"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148440" version="1" comment="ppp is &lt;2.4.7-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031955"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051267"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159708" version="1" comment="puppet is &lt;3.8.5-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033794"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159263" version="1" comment="python is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159265" version="1" comment="python-curses is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159269" version="1" comment="python-tk is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157771" version="1" comment="python-libxml2 is &lt;2.9.4-45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051991"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159273" version="1" comment="python-requests is &lt;2.8.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052164"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159274" version="1" comment="python3 is &lt;3.4.6-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052145"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159275" version="1" comment="python3-curses is &lt;3.4.6-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052145"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159276" version="1" comment="qemu is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159278" version="1" comment="qemu-block-curl is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159282" version="1" comment="qemu-ipxe is &lt;1.0.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052166"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159283" version="1" comment="qemu-kvm is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159287" version="1" comment="qemu-seabios is &lt;1.10.2-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052167"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159288" version="1" comment="qemu-sgabios is &lt;8-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052168"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159289" version="1" comment="qemu-tools is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159290" version="1" comment="qemu-vgabios is &lt;1.10.2-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052167"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159291" version="1" comment="qemu-x86 is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155620" version="1" comment="rpcbind is &lt;0.2.3-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051720"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146857" version="1" comment="rrdtool is &lt;1.4.7-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050954"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146858" version="1" comment="rrdtool-cached is &lt;1.4.7-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038291"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050954"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159295" version="1" comment="rsyslog is &lt;8.24.0-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033100"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149621" version="1" comment="sane-backends is &lt;1.0.24-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051413"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149622" version="1" comment="sane-backends-32bit is &lt;1.0.24-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051413"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149623" version="1" comment="sane-backends-autoconfig is &lt;1.0.24-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041499"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051413"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159305" version="1" comment="sblim-sfcb is &lt;1.4.8-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052171"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159306" version="1" comment="shim is &lt;0.9-23.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038277"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156341" version="1" comment="strongswan is &lt;5.1.3-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031037"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156342" version="1" comment="strongswan-doc is &lt;5.1.3-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031036"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156343" version="1" comment="strongswan-ipsec is &lt;5.1.3-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033871"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156344" version="1" comment="strongswan-libs0 is &lt;5.1.3-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033872"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159307" version="1" comment="sudo is &lt;1.8.20p2-1.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030544"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052173"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159308" version="1" comment="supportutils is &lt;3.0-94.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034036"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052174"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159312" version="1" comment="sysvinit-tools is &lt;2.88+-99.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041024"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052176"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159313" version="1" comment="tar is &lt;1.27.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030401"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052177"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159314" version="1" comment="tar-lang is &lt;1.27.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033728"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052177"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154731" version="1" comment="tcpdump is &lt;4.9.0-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051594"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157766" version="1" comment="unrar is &lt;5.0.14-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030736"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051990"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136644" version="1" comment="w3m is &lt;0.5.3.git20161120-160.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030675"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048710"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149815" version="1" comment="wget is &lt;1.14-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030457"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159317" version="1" comment="xen is &lt;4.9.0_08-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159319" version="1" comment="xen-libs is &lt;4.9.0_08-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159320" version="1" comment="xen-libs-32bit is &lt;4.9.0_08-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159323" version="1" comment="xf86-video-intel is &lt;2.99.917.770_gcb6ba2da-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041025"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052181"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159324" version="1" comment="xfsprogs is &lt;4.3.0-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052182"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157352" version="1" comment="xorg-x11-server is &lt;7.6_1.18.3-71.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051957"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157353" version="1" comment="xorg-x11-server-extra is &lt;7.6_1.18.3-71.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051957"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159325" version="1" comment="yast2 is &lt;3.2.36-1.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032603"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052183"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159326" version="1" comment="yast2-core is &lt;3.2.2-1.29" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030808"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159327" version="1" comment="yast2-users is &lt;3.2.11-1.47" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052185"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159709" version="1" comment="cluster-md-kmp-default is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159710" version="1" comment="cluster-network-kmp-default is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159711" version="1" comment="dlm-kmp-default is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159712" version="1" comment="gfs2-kmp-default is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159713" version="1" comment="ocfs2-kmp-default is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135880" version="1" comment="sle-ha-release is ==12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047590"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114326" version="1" comment="conntrack-tools is &lt;1.4.2-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038966"/>
		<state state_ref="oval:org.opensuse.security:ste:2009033815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159714" version="1" comment="ctdb is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159715" version="1" comment="fence-agents is &lt;4.0.22+git.1455008135.15c5e92-8.93" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041796"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052237"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159716" version="1" comment="haproxy is &lt;1.6.5-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038990"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052238"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159717" version="1" comment="libpacemaker3 is &lt;1.1.15-19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159718" version="1" comment="pacemaker is &lt;1.1.15-19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040861"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159719" version="1" comment="pacemaker-cli is &lt;1.1.15-19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040862"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145310" version="1" comment="pacemaker-cts is &lt;1.1.15-19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159720" version="1" comment="pacemaker-remote is &lt;1.1.15-19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040864"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159721" version="1" comment="lighttpd is &lt;1.4.35-1.34" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031373"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052239"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159722" version="1" comment="python-PyYAML is &lt;3.10-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038718"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052240"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145183" version="1" comment="ruby2.1-rubygem-bundler is &lt;1.7.3-3.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041268"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159723" version="1" comment="cluster-md-kmp-default is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159724" version="1" comment="dlm-kmp-default is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159725" version="1" comment="gfs2-kmp-default is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159726" version="1" comment="ocfs2-kmp-default is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159727" version="1" comment="sle-ha-release is ==12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052091"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159728" version="1" comment="ctdb is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159729" version="1" comment="fence-agents is &lt;4.0.25+git.1485179354.eb43835-2.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041796"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052241"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159730" version="1" comment="haproxy is &lt;1.6.11-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038990"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046434"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159731" version="1" comment="libpacemaker3 is &lt;1.1.16-4.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052242"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159732" version="1" comment="pacemaker is &lt;1.1.16-4.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040861"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052242"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159733" version="1" comment="pacemaker-cli is &lt;1.1.16-4.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040862"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052242"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159734" version="1" comment="pacemaker-cts is &lt;1.1.16-4.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052242"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159735" version="1" comment="pacemaker-remote is &lt;1.1.16-4.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040864"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052242"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143040" version="1" comment="libpcreposix0 is &lt;8.39-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038694"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050373"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149624" version="1" comment="lighttpd is &lt;1.4.35-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031373"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051414"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147499" version="1" comment="sle-module-adv-systems-management-release is &gt;=12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041397"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147500" version="1" comment="puppet-server is &lt;3.6.2-3.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033793"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050145"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110039" version="1" comment="docker is &lt;1.6.2-31.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038208"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045071"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117868" version="1" comment="sle-module-containers-release is &gt;=12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039401"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109714" version="1" comment="python-PyYAML is &lt;3.10-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038718"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045015"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147501" version="1" comment="cups154 is &lt;1.5.4-2.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147502" version="1" comment="cups154-client is &lt;1.5.4-2.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147503" version="1" comment="cups154-filters is &lt;1.5.4-2.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147504" version="1" comment="cups154-libs is &lt;1.5.4-2.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038502"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117869" version="1" comment="sle-module-legacy-release is &gt;=12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039402"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147505" version="1" comment="java-1_6_0-ibm is &lt;1.6.0_sr16.1-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051038"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147506" version="1" comment="java-1_6_0-ibm-fonts is &lt;1.6.0_sr16.1-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030913"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051038"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147507" version="1" comment="java-1_6_0-ibm-jdbc is &lt;1.6.0_sr16.1-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051038"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147508" version="1" comment="java-1_6_0-ibm-plugin is &lt;1.6.0_sr16.1-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051038"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147509" version="1" comment="syslog-ng is &lt;3.4.5-3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051039"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117870" version="1" comment="sle-module-public-cloud is &gt;=12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125865" version="1" comment="cpp5 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040331"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125710" version="1" comment="gcc5 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040332"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125869" version="1" comment="gcc5-c++ is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125871" version="1" comment="gcc5-fortran is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040336"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125873" version="1" comment="gcc5-info is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040338"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125874" version="1" comment="gcc5-locale is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040339"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125877" version="1" comment="libffi-devel-gcc5 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040345"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125879" version="1" comment="libstdc++6-devel-gcc5 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040353"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125881" version="1" comment="sle-module-toolchain-release is &gt;=12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040383"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161298" version="1" comment="apache2-mod_php5 is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161299" version="1" comment="php5 is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036256"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161300" version="1" comment="php5-bcmath is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030918"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161301" version="1" comment="php5-bz2 is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030919"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161302" version="1" comment="php5-calendar is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030920"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161303" version="1" comment="php5-ctype is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030921"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161304" version="1" comment="php5-curl is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161305" version="1" comment="php5-dba is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161306" version="1" comment="php5-dom is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161307" version="1" comment="php5-enchant is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033607"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161308" version="1" comment="php5-exif is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161309" version="1" comment="php5-fastcgi is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030927"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161310" version="1" comment="php5-fileinfo is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033608"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161311" version="1" comment="php5-fpm is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161312" version="1" comment="php5-ftp is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030928"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161313" version="1" comment="php5-gd is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030929"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161314" version="1" comment="php5-gettext is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161315" version="1" comment="php5-gmp is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030931"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161316" version="1" comment="php5-iconv is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161317" version="1" comment="php5-intl is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033609"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161318" version="1" comment="php5-json is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030934"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161319" version="1" comment="php5-ldap is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161320" version="1" comment="php5-mbstring is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030936"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161321" version="1" comment="php5-mcrypt is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030937"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161322" version="1" comment="php5-mysql is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030938"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161323" version="1" comment="php5-odbc is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030939"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161324" version="1" comment="php5-openssl is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030940"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161325" version="1" comment="php5-pcntl is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030941"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161326" version="1" comment="php5-pdo is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030942"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161327" version="1" comment="php5-pear is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030943"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161328" version="1" comment="php5-pgsql is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030944"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161329" version="1" comment="php5-pspell is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030945"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161330" version="1" comment="php5-shmop is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161331" version="1" comment="php5-snmp is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030947"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161332" version="1" comment="php5-soap is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161333" version="1" comment="php5-sockets is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031665"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161334" version="1" comment="php5-sqlite is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031666"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161335" version="1" comment="php5-suhosin is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030949"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161336" version="1" comment="php5-sysvmsg is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030950"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161337" version="1" comment="php5-sysvsem is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030951"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161338" version="1" comment="php5-sysvshm is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030952"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161339" version="1" comment="php5-tokenizer is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030953"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161340" version="1" comment="php5-wddx is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030954"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161341" version="1" comment="php5-xmlreader is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030955"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161342" version="1" comment="php5-xmlrpc is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030956"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161343" version="1" comment="php5-xmlwriter is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030957"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161344" version="1" comment="php5-xsl is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030958"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161345" version="1" comment="php5-zip is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030959"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161346" version="1" comment="php5-zlib is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030960"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117871" version="1" comment="sle-module-web-scripting is &gt;=12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039404"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131451" version="1" comment="apache2-mod_php7 is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040642"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131452" version="1" comment="php7 is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040643"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131453" version="1" comment="php7-bcmath is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040644"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131454" version="1" comment="php7-bz2 is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040645"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131455" version="1" comment="php7-calendar is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040646"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131456" version="1" comment="php7-ctype is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040647"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131457" version="1" comment="php7-curl is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131458" version="1" comment="php7-dba is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131459" version="1" comment="php7-dom is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131460" version="1" comment="php7-enchant is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040651"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131461" version="1" comment="php7-exif is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131462" version="1" comment="php7-fastcgi is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040653"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131463" version="1" comment="php7-fileinfo is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040654"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131464" version="1" comment="php7-fpm is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040655"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131465" version="1" comment="php7-ftp is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040656"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131466" version="1" comment="php7-gd is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040657"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131467" version="1" comment="php7-gettext is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040658"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131468" version="1" comment="php7-gmp is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040659"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131469" version="1" comment="php7-iconv is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040660"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131470" version="1" comment="php7-imap is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131471" version="1" comment="php7-intl is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040662"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131472" version="1" comment="php7-json is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040663"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131473" version="1" comment="php7-ldap is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040664"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131474" version="1" comment="php7-mbstring is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040665"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131475" version="1" comment="php7-mcrypt is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040666"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131476" version="1" comment="php7-mysql is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040667"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131477" version="1" comment="php7-odbc is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040668"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131478" version="1" comment="php7-opcache is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040669"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131479" version="1" comment="php7-openssl is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040670"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131480" version="1" comment="php7-pcntl is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040671"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131481" version="1" comment="php7-pdo is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040672"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131482" version="1" comment="php7-pear is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040673"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131483" version="1" comment="php7-pear-Archive_Tar is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040674"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131484" version="1" comment="php7-pgsql is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040675"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131485" version="1" comment="php7-phar is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040676"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131486" version="1" comment="php7-posix is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040677"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131487" version="1" comment="php7-pspell is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131488" version="1" comment="php7-shmop is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131489" version="1" comment="php7-snmp is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040680"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131490" version="1" comment="php7-soap is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040681"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131491" version="1" comment="php7-sockets is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040682"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131492" version="1" comment="php7-sqlite is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040683"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131493" version="1" comment="php7-sysvmsg is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040684"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131494" version="1" comment="php7-sysvsem is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040685"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131495" version="1" comment="php7-sysvshm is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040686"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131496" version="1" comment="php7-tokenizer is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040687"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131497" version="1" comment="php7-wddx is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040688"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131498" version="1" comment="php7-xmlreader is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040689"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131499" version="1" comment="php7-xmlrpc is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040690"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131500" version="1" comment="php7-xmlwriter is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040691"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131501" version="1" comment="php7-xsl is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040692"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131502" version="1" comment="php7-zip is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040693"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131503" version="1" comment="php7-zlib is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040694"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161347" version="1" comment="apache2-mod_wsgi is &lt;4.4.13-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052658"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161348" version="1" comment="nodejs4 is &lt;4.5.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040695"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161349" version="1" comment="nodejs4-devel is &lt;4.5.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040696"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161350" version="1" comment="nodejs4-docs is &lt;4.5.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040697"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161351" version="1" comment="npm4 is &lt;4.5.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040698"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148263" version="1" comment="nodejs6 is &lt;6.9.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041432"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051237"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148264" version="1" comment="nodejs6-devel is &lt;6.9.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041433"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051237"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148265" version="1" comment="nodejs6-docs is &lt;6.9.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041434"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051237"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148266" version="1" comment="npm6 is &lt;6.9.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051237"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143118" version="1" comment="aaa_base is &lt;13.2+git20140911.61c1681-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050387"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143119" version="1" comment="aaa_base-extras is &lt;13.2+git20140911.61c1681-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034235"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050387"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143120" version="1" comment="accountsservice is &lt;0.6.35-1.96" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037053"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050388"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143121" version="1" comment="accountsservice-lang is &lt;0.6.35-1.96" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050388"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143122" version="1" comment="libaccountsservice0 is &lt;0.6.35-1.96" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050388"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143123" version="1" comment="typelib-1_0-AccountsService-1_0 is &lt;0.6.35-1.96" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050388"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140443" version="1" comment="alsa is &lt;1.0.27.2-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040936"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049769"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140444" version="1" comment="alsa-docs is &lt;1.0.27.2-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041092"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049769"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140445" version="1" comment="libasound2 is &lt;1.0.27.2-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040938"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049769"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140447" version="1" comment="ant is &lt;1.9.4-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034996"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049771"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140448" version="1" comment="apache-commons-beanutils is &lt;1.9.2-1.27" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040940"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049772"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140449" version="1" comment="apache-commons-beanutils-javadoc is &lt;1.9.2-1.27" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041093"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049772"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140450" version="1" comment="apache-commons-daemon is &lt;1.0.15-4.221" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040941"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049773"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140451" version="1" comment="apache-commons-daemon-javadoc is &lt;1.0.15-4.221" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049773"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140452" version="1" comment="apache-commons-httpclient is &lt;3.1-4.498" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040942"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049774"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143124" version="1" comment="apache2 is &lt;2.4.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030668"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050389"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143125" version="1" comment="apache2-doc is &lt;2.4.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050389"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143126" version="1" comment="apache2-example-pages is &lt;2.4.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031064"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050389"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143127" version="1" comment="apache2-prefork is &lt;2.4.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030666"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050389"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143128" version="1" comment="apache2-utils is &lt;2.4.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050389"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143129" version="1" comment="apache2-worker is &lt;2.4.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030667"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050389"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143130" version="1" comment="apache2-mod_jk is &lt;1.2.40-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050390"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143131" version="1" comment="apache2-mod_nss is &lt;1.0.8-9.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037547"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050391"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143132" version="1" comment="apache2-mod_perl is &lt;2.0.8-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040947"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050392"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143133" version="1" comment="augeas is &lt;1.2.0-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050080"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143134" version="1" comment="augeas-lenses is &lt;1.2.0-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038073"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050080"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143135" version="1" comment="automake is &lt;1.13.4-4.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035239"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050393"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143136" version="1" comment="avahi-utils is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143137" version="1" comment="bind is &lt;9.9.5P1-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050394"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143138" version="1" comment="bind-chrootenv is &lt;9.9.5P1-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031552"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050394"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143139" version="1" comment="bind-doc is &lt;9.9.5P1-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050394"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143140" version="1" comment="bind-libs is &lt;9.9.5P1-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050394"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143141" version="1" comment="bind-utils is &lt;9.9.5P1-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050394"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143142" version="1" comment="bzip2 is &lt;1.0.6-27.886" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030508"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050395"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143143" version="1" comment="bzip2-doc is &lt;1.0.6-27.886" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031654"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050395"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143144" version="1" comment="libbz2-1 is &lt;1.0.6-27.886" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031657"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050395"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143145" version="1" comment="coreutils is &lt;8.22-5.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050396"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143146" version="1" comment="coreutils-lang is &lt;8.22-5.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034779"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050396"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143147" version="1" comment="cpp48 is &lt;4.8.3+r212056-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143148" version="1" comment="gcc48 is &lt;4.8.3+r212056-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143149" version="1" comment="gcc48-c++ is &lt;4.8.3+r212056-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039005"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143150" version="1" comment="gcc48-info is &lt;4.8.3+r212056-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039007"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143151" version="1" comment="gcc48-locale is &lt;4.8.3+r212056-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143152" version="1" comment="libffi4 is &lt;4.8.3+r212056-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143153" version="1" comment="libgcc_s1 is &lt;4.8.3+r212056-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143154" version="1" comment="libgfortran3 is &lt;4.8.3+r212056-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040348"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143155" version="1" comment="libgomp1 is &lt;4.8.3+r212056-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143156" version="1" comment="libstdc++48-devel is &lt;4.8.3+r212056-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143157" version="1" comment="libstdc++6 is &lt;4.8.3+r212056-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040364"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140517" version="1" comment="cvs-doc is &lt;1.12.12-181.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034801"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049799"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140525" version="1" comment="cyrus-sasl-otp is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030882"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140526" version="1" comment="cyrus-sasl-otp-32bit is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031029"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140530" version="1" comment="cyrus-sasl-sqlauxprop is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033159"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140531" version="1" comment="cyrus-sasl-sqlauxprop-32bit is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041099"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143158" version="1" comment="libdbus-1-3 is &lt;1.8.8-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143159" version="1" comment="dhcp-relay is &lt;4.2.6-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050039"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143160" version="1" comment="dhcp-server is &lt;4.2.6-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030728"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050039"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143161" version="1" comment="docker is &lt;1.2.0-3.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038208"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050398"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140542" version="1" comment="dovecot22 is &lt;2.2.13-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040869"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049805"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140543" version="1" comment="dovecot22-backend-mysql is &lt;2.2.13-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040870"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049805"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140544" version="1" comment="dovecot22-backend-pgsql is &lt;2.2.13-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040871"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049805"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140545" version="1" comment="dovecot22-backend-sqlite is &lt;2.2.13-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040872"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049805"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143162" version="1" comment="dracut-fips is &lt;037-34.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039345"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143163" version="1" comment="ecryptfs-utils is &lt;103-5.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143164" version="1" comment="elfutils is &lt;0.158-3.82" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050400"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143165" version="1" comment="libasm1 is &lt;0.158-3.82" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050400"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143166" version="1" comment="libasm1-32bit is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143167" version="1" comment="libdw1 is &lt;0.158-3.82" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038060"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050400"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143168" version="1" comment="libebl1 is &lt;0.158-3.82" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050400"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143169" version="1" comment="libelf1 is &lt;0.158-3.82" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050400"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143170" version="1" comment="emacs-el is &lt;24.3-14.44" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031212"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050044"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143171" version="1" comment="emacs-nox is &lt;24.3-14.44" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050044"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143172" version="1" comment="fetchmail is &lt;6.3.26-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050401"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143173" version="1" comment="fetchmailconf is &lt;6.3.26-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030768"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050401"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143174" version="1" comment="file is &lt;5.19-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030456"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050402"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143175" version="1" comment="file-magic is &lt;5.19-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037852"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050402"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143176" version="1" comment="libmagic1 is &lt;5.19-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037850"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050402"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143177" version="1" comment="freeradius-server is &lt;3.0.3-3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050403"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143178" version="1" comment="freeradius-server-doc is &lt;3.0.3-3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050403"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143179" version="1" comment="freeradius-server-libs is &lt;3.0.3-3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050403"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143180" version="1" comment="freeradius-server-utils is &lt;3.0.3-3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032993"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050403"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143181" version="1" comment="ft2demos is &lt;2.5.3-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034838"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050404"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143182" version="1" comment="g3utils is &lt;1.1.36-54.75" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050405"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143183" version="1" comment="mgetty is &lt;1.1.36-54.75" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050405"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143184" version="1" comment="gd is &lt;2.1.0-3.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050406"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143185" version="1" comment="git-core is &lt;1.8.5.2-2.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031790"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050407"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143186" version="1" comment="glib2-lang is &lt;2.38.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030893"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050408"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143187" version="1" comment="glib2-tools is &lt;2.38.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050408"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143188" version="1" comment="libgio-2_0-0 is &lt;2.38.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030896"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050408"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143189" version="1" comment="libglib-2_0-0 is &lt;2.38.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030899"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050408"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143190" version="1" comment="libgmodule-2_0-0 is &lt;2.38.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030902"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050408"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143191" version="1" comment="libgobject-2_0-0 is &lt;2.38.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050408"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143192" version="1" comment="libgthread-2_0-0 is &lt;2.38.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030908"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050408"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143193" version="1" comment="glibc-html is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032391"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143194" version="1" comment="glibc-info is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032393"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143195" version="1" comment="glibc-profile is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143196" version="1" comment="glibc-profile-32bit is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143197" version="1" comment="gnome-shell is &lt;3.10.4-22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040981"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050409"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143198" version="1" comment="gnome-shell-browser-plugin is &lt;3.10.4-22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040982"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050409"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143199" version="1" comment="gnome-shell-lang is &lt;3.10.4-22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041040"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050409"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143200" version="1" comment="libgnutls-openssl27 is &lt;3.2.15-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035959"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140646" version="1" comment="groff-full is &lt;1.22.2-5.429" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140647" version="1" comment="gxditview is &lt;1.22.2-5.429" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143201" version="1" comment="guestfs-data is &lt;1.26.9-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050410"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143202" version="1" comment="guestfs-tools is &lt;1.26.9-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037415"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050410"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143203" version="1" comment="guestfsd is &lt;1.26.9-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050410"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143204" version="1" comment="libguestfs0 is &lt;1.26.9-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037417"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050410"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143205" version="1" comment="perl-Sys-Guestfs is &lt;1.26.9-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041110"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050410"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140671" version="1" comment="gv is &lt;3.7.4-1.39" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030670"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049832"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140679" version="1" comment="hplip is &lt;3.14.6-3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049838"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140680" version="1" comment="hplip-hpijs is &lt;3.14.6-3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031434"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049838"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140681" version="1" comment="hplip-sane is &lt;3.14.6-3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037412"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049838"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143206" version="1" comment="hyper-v is &lt;6-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050411"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143207" version="1" comment="ibus-pinyin is &lt;1.5.0-2.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050412"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140687" version="1" comment="jakarta-commons-fileupload is &lt;1.1.1-120.238" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035077"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049844"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140688" version="1" comment="jakarta-commons-fileupload-javadoc is &lt;1.1.1-120.238" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035076"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049844"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143208" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.6-33.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050413"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143209" version="1" comment="java-1_7_0-openjdk-demo is &lt;1.7.0.6-33.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050413"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143210" version="1" comment="java-1_7_0-openjdk-devel is &lt;1.7.0.6-33.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035194"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050413"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143211" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.6-33.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050413"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143212" version="1" comment="kbd is &lt;1.15.5-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050414"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143213" version="1" comment="kernel-default-base is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143214" version="1" comment="kernel-default-man is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031015"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143215" version="1" comment="kernel-xen-base is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031017"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143216" version="1" comment="krb5-doc is &lt;1.12.1-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143217" version="1" comment="krb5-plugin-kdb-ldap is &lt;1.12.1-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033579"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143218" version="1" comment="krb5-plugin-preauth-otp is &lt;1.12.1-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143219" version="1" comment="krb5-plugin-preauth-pkinit is &lt;1.12.1-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033580"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143220" version="1" comment="krb5-server is &lt;1.12.1-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031042"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140712" version="1" comment="krb5-appl-servers is &lt;1.0.3-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034719"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049852"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143221" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-5.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050415"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143222" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-5.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050415"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140776" version="1" comment="libapr-util1 is &lt;1.5.3-1.77" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033229"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140777" version="1" comment="libapr-util1-dbd-sqlite3 is &lt;1.5.3-1.77" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033233"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140778" version="1" comment="libapr1 is &lt;1.5.1-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143223" version="1" comment="libcgroup-tools is &lt;0.41.rc1-1.30" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041115"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050084"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143224" version="1" comment="postgresql93-contrib is &lt;9.3.5-2.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143225" version="1" comment="postgresql93-docs is &lt;9.3.5-2.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143226" version="1" comment="postgresql93-server is &lt;9.3.5-2.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143227" version="1" comment="libfreebl3-hmac is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143228" version="1" comment="libfreebl3-hmac-32bit is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038246"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143229" version="1" comment="libsoftokn3-hmac is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038247"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143230" version="1" comment="libsoftokn3-hmac-32bit is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143231" version="1" comment="libfreetype6 is &lt;2.5.3-2.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033880"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050416"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143232" version="1" comment="libgcrypt20-hmac is &lt;1.6.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038773"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050092"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143233" version="1" comment="libgcrypt20-hmac-32bit is &lt;1.6.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038774"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050092"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143234" version="1" comment="libgoa-1_0-0 is &lt;3.10.5-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035610"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050417"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143235" version="1" comment="libgoa-backend-1_0-1 is &lt;3.10.5-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050417"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140689" version="1" comment="libjbig2 is &lt;2.0-12.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038053"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049845"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140877" version="1" comment="libtool is &lt;2.4.2-14.60" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032054"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049894"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140878" version="1" comment="libtool-32bit is &lt;2.4.2-14.60" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032053"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049894"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140880" version="1" comment="liblua5_2-32bit is &lt;5.2.2-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038154"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049895"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140882" version="1" comment="liblzo2-2 is &lt;2.08-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038032"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049896"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143236" version="1" comment="mariadb-tools is &lt;10.0.11-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140888" version="1" comment="libneon27-32bit is &lt;0.30.0-3.65" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032928"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049901"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143237" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050418"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143238" version="1" comment="libopenssl1_0_0-hmac is &lt;1.0.1i-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050418"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143239" version="1" comment="libopenssl1_0_0-hmac-32bit is &lt;1.0.1i-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143240" version="1" comment="openssl is &lt;1.0.1i-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050418"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143241" version="1" comment="openssl-doc is &lt;1.0.1i-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030781"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050418"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143242" version="1" comment="libpango-1_0-0 is &lt;1.36.3-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041004"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050419"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143243" version="1" comment="pango-modules is &lt;1.36.3-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050419"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143244" version="1" comment="typelib-1_0-Pango-1_0 is &lt;1.36.3-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050419"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143245" version="1" comment="libpoppler-glib8 is &lt;0.24.4-3.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050420"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143246" version="1" comment="libpoppler-qt4-4 is &lt;0.24.4-3.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037283"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050421"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143247" version="1" comment="libpoppler44 is &lt;0.24.4-3.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050420"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143248" version="1" comment="poppler-tools is &lt;0.24.4-3.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050420"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143249" version="1" comment="python-base-32bit is &lt;2.7.7-2.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033754"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143250" version="1" comment="libqt4 is &lt;4.8.6-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031513"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143251" version="1" comment="libqt4-qt3support is &lt;4.8.6-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143252" version="1" comment="libqt4-sql is &lt;4.8.6-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143253" version="1" comment="libqt4-sql-sqlite is &lt;4.8.6-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143254" version="1" comment="libqt4-x11 is &lt;4.8.6-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031512"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143255" version="1" comment="qt4-x11-tools is &lt;4.8.6-2.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143256" version="1" comment="libtasn1 is &lt;3.7-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050424"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143257" version="1" comment="libtasn1-6 is &lt;3.7-2.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038681"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050424"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143258" version="1" comment="tiff is &lt;4.0.3-9.78" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140972" version="1" comment="libupsclient1 is &lt;2.7.1-4.84" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049925"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140973" version="1" comment="nut is &lt;2.7.1-4.84" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049925"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140974" version="1" comment="nut-drivers-net is &lt;2.7.1-4.84" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049925"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143259" version="1" comment="libvirt-lock-sanlock is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035599"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140997" version="1" comment="libvorbis-doc is &lt;1.3.3-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031668"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140998" version="1" comment="libvorbis0 is &lt;1.3.3-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034804"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141000" version="1" comment="libvorbisenc2 is &lt;1.3.3-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034806"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141002" version="1" comment="libvorbisfile3 is &lt;1.3.3-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034808"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143260" version="1" comment="python-vte is &lt;0.28.2-17.83" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037176"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143261" version="1" comment="vte2-lang is &lt;0.28.2-17.83" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037181"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143262" version="1" comment="libxml2-doc is &lt;2.9.1-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143263" version="1" comment="logwatch is &lt;7.4.0-13.131" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050425"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141040" version="1" comment="mailman is &lt;2.1.17-1.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030450"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049938"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143264" version="1" comment="mozilla-nspr is &lt;4.10.7-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050426"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143265" version="1" comment="openslp-server is &lt;2.0.0-2.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143266" version="1" comment="openssh-fips is &lt;6.6p1-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050138"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143267" version="1" comment="openvswitch is &lt;2.1.2-8.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037928"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050427"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143268" version="1" comment="openvswitch-kmp-default is &lt;2.1.2_k3.12.28_4-8.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050428"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143269" version="1" comment="openvswitch-kmp-xen is &lt;2.1.2_k3.12.28_4-8.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050429"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143270" version="1" comment="openvswitch-switch is &lt;2.1.2-8.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050427"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141054" version="1" comment="opie is &lt;2.4-724.65" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034616"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049946"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141055" version="1" comment="opie-32bit is &lt;2.4-724.65" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034614"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049946"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141059" version="1" comment="pam-modules is &lt;12.1-23.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032520"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143271" version="1" comment="perl-Cyrus-IMAP is &lt;2.3.18-35.71" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050430"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143272" version="1" comment="perl-Cyrus-SIEVE-managesieve is &lt;2.3.18-35.71" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033423"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050430"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143273" version="1" comment="ppc64-diag is &lt;2.6.7-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038042"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050431"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141073" version="1" comment="procmail is &lt;3.22-267.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038135"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049960"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143274" version="1" comment="python is &lt;2.7.7-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143275" version="1" comment="python-32bit is &lt;2.7.7-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050146"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143276" version="1" comment="python-curses is &lt;2.7.7-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143277" version="1" comment="python-demo is &lt;2.7.7-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143278" version="1" comment="python-gdbm is &lt;2.7.7-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030560"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143279" version="1" comment="python-idle is &lt;2.7.7-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030561"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143280" version="1" comment="python-tk is &lt;2.7.7-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141082" version="1" comment="python-imaging is &lt;1.1.7-21.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037883"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049962"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143281" version="1" comment="qemu-guest-agent is &lt;2.0.0-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143282" version="1" comment="qemu-lang is &lt;2.0.0-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143283" version="1" comment="qemu-ppc is &lt;2.0.0-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143284" version="1" comment="qemu-s390 is &lt;2.0.0-40.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143285" version="1" comment="quagga is &lt;0.99.22.1-3.128" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050433"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143286" version="1" comment="rsyslog-diag-tools is &lt;8.4.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034333"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143287" version="1" comment="rsyslog-doc is &lt;8.4.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143288" version="1" comment="rsyslog-module-gssapi is &lt;8.4.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034336"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143289" version="1" comment="rsyslog-module-gtls is &lt;8.4.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034337"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143290" version="1" comment="rsyslog-module-mysql is &lt;8.4.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034338"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143291" version="1" comment="rsyslog-module-pgsql is &lt;8.4.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034339"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143292" version="1" comment="rsyslog-module-relp is &lt;8.4.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143293" version="1" comment="rsyslog-module-snmp is &lt;8.4.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143294" version="1" comment="rsyslog-module-udpspoof is &lt;8.4.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143295" version="1" comment="squashfs is &lt;4.3-1.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041022"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050434"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143296" version="1" comment="squid is &lt;3.3.13-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050435"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141128" version="1" comment="squidGuard is &lt;1.4-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033859"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141129" version="1" comment="squidGuard-doc is &lt;1.4-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143297" version="1" comment="stunnel is &lt;5.00-1.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143298" version="1" comment="systemtap is &lt;2.5-1.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033717"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050437"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143299" version="1" comment="systemtap-runtime is &lt;2.5-1.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033714"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050437"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143300" version="1" comment="systemtap-server is &lt;2.5-1.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033716"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050437"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143301" version="1" comment="sysvinit-tools is &lt;2.88+-94.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041024"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050438"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143302" version="1" comment="tomcat is &lt;7.0.55-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050439"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143303" version="1" comment="tomcat-admin-webapps is &lt;7.0.55-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035426"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050439"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143304" version="1" comment="tomcat-docs-webapp is &lt;7.0.55-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035427"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050439"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143305" version="1" comment="tomcat-el-2_2-api is &lt;7.0.55-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035428"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050439"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143306" version="1" comment="tomcat-javadoc is &lt;7.0.55-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050439"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143307" version="1" comment="tomcat-jsp-2_2-api is &lt;7.0.55-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035430"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050439"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143308" version="1" comment="tomcat-lib is &lt;7.0.55-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035432"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050439"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143309" version="1" comment="tomcat-servlet-3_0-api is &lt;7.0.55-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035433"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050439"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143310" version="1" comment="tomcat-webapps is &lt;7.0.55-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035434"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050439"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143311" version="1" comment="wireshark is &lt;1.10.9-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141158" version="1" comment="xalan-j2 is &lt;2.7.0-264.38" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037987"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049998"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143312" version="1" comment="xen-doc-html is &lt;4.4.1_06-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050176"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143313" version="1" comment="xen-tools is &lt;4.4.1_06-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050176"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143314" version="1" comment="xen-tools-domU is &lt;4.4.1_06-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031483"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050176"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141169" version="1" comment="xorg-x11 is &lt;7.6_1-14.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031335"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141170" version="1" comment="xorg-x11-essentials is &lt;7.6_1-14.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041027"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141172" version="1" comment="xorg-x11-libs is &lt;7.6-45.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050006"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009137922" version="1" comment="yast2 is &lt;3.1.108-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032603"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150266" version="1" comment="alsa-docs is &lt;1.0.27.2-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041092"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149933" version="1" comment="ant is &lt;1.9.4-1.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034996"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050790"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150267" version="1" comment="apache-commons-beanutils is &lt;1.9.2-1.149" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040940"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051470"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150268" version="1" comment="apache-commons-beanutils-javadoc is &lt;1.9.2-1.149" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041093"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051470"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143319" version="1" comment="apache2 is &lt;2.4.16-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030668"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050442"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143320" version="1" comment="apache2-doc is &lt;2.4.16-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050442"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143321" version="1" comment="apache2-example-pages is &lt;2.4.16-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031064"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050442"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143322" version="1" comment="apache2-prefork is &lt;2.4.16-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030666"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050442"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143323" version="1" comment="apache2-utils is &lt;2.4.16-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050442"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143324" version="1" comment="apache2-worker is &lt;2.4.16-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030667"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050442"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140459" version="1" comment="apache2-mod_jk is &lt;1.2.40-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143325" version="1" comment="apache2-mod_nss is &lt;1.0.8-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037547"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050443"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140460" version="1" comment="apache2-mod_perl is &lt;2.0.8-11.43" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040947"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111367" version="1" comment="augeas is &lt;1.2.0-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111371" version="1" comment="augeas-lenses is &lt;1.2.0-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038073"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143326" version="1" comment="bind is &lt;9.9.6P1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143327" version="1" comment="bind-chrootenv is &lt;9.9.6P1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031552"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143328" version="1" comment="bind-doc is &lt;9.9.6P1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150269" version="1" comment="bzip2-doc is &lt;1.0.6-27.1129" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031654"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050023"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115220" version="1" comment="gcc48-locale is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140534" version="1" comment="davfs2 is &lt;1.5.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041100"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143329" version="1" comment="dhcp-relay is &lt;4.3.3-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143330" version="1" comment="dhcp-server is &lt;4.3.3-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030728"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143331" version="1" comment="dracut-fips is &lt;037-66.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039345"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106097" version="1" comment="libasm1-32bit is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150270" version="1" comment="fetchmailconf is &lt;6.3.26-5.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030768"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050049"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140576" version="1" comment="freeradius-server is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140577" version="1" comment="freeradius-server-doc is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140578" version="1" comment="freeradius-server-krb5 is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041102"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140579" version="1" comment="freeradius-server-ldap is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041103"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140580" version="1" comment="freeradius-server-libs is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140581" version="1" comment="freeradius-server-mysql is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041104"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140582" version="1" comment="freeradius-server-perl is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041105"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140583" version="1" comment="freeradius-server-postgresql is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041106"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140584" version="1" comment="freeradius-server-python is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041107"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140585" version="1" comment="freeradius-server-sqlite is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041108"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140586" version="1" comment="freeradius-server-utils is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032993"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149936" version="1" comment="git-core is &lt;1.8.5.6-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031790"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143333" version="1" comment="glibc-html is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032391"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143334" version="1" comment="glibc-info is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032393"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143335" version="1" comment="glibc-profile is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143336" version="1" comment="glibc-profile-32bit is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114257" version="1" comment="libgnutls-openssl27 is &lt;3.2.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035959"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143337" version="1" comment="guestfs-data is &lt;1.26.10-4.27" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050445"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143338" version="1" comment="guestfs-tools is &lt;1.26.10-4.27" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037415"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050445"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143339" version="1" comment="guestfsd is &lt;1.26.10-4.27" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050445"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143340" version="1" comment="libguestfs0 is &lt;1.26.10-4.27" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037417"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050445"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143341" version="1" comment="perl-Sys-Guestfs is &lt;1.26.10-4.27" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041110"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050445"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143342" version="1" comment="python-libguestfs is &lt;1.26.10-4.27" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041111"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050445"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143343" version="1" comment="ipsec-tools is &lt;0.8.0-11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030598"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050446"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115441" version="1" comment="java-1_7_0-openjdk-demo is &lt;1.7.0.91-21.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115442" version="1" comment="java-1_7_0-openjdk-devel is &lt;1.7.0.91-21.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035194"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113202" version="1" comment="java-1_7_1-ibm is &lt;1.7.1_sr3.10-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045499"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113204" version="1" comment="java-1_7_1-ibm-alsa is &lt;1.7.1_sr3.10-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045499"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113209" version="1" comment="java-1_7_1-ibm-jdbc is &lt;1.7.1_sr3.10-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038264"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045499"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113211" version="1" comment="java-1_7_1-ibm-plugin is &lt;1.7.1_sr3.10-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038266"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045499"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143344" version="1" comment="java-1_8_0-ibm is &lt;1.8.0_sr1.10-2.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039522"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050447"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143345" version="1" comment="java-1_8_0-ibm-alsa is &lt;1.8.0_sr1.10-2.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039529"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050447"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143346" version="1" comment="java-1_8_0-ibm-plugin is &lt;1.8.0_sr1.10-2.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039530"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050447"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143347" version="1" comment="java-1_8_0-openjdk-demo is &lt;1.8.0.65-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050200"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143348" version="1" comment="java-1_8_0-openjdk-devel is &lt;1.8.0.65-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038651"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050200"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143417" version="1" comment="kernel-default-base is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143352" version="1" comment="kernel-default-man is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031015"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143357" version="1" comment="kernel-xen-base is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031017"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115946" version="1" comment="krb5-doc is &lt;1.12.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115947" version="1" comment="krb5-plugin-kdb-ldap is &lt;1.12.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033579"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115948" version="1" comment="krb5-plugin-preauth-otp is &lt;1.12.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115949" version="1" comment="krb5-plugin-preauth-pkinit is &lt;1.12.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033580"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115950" version="1" comment="krb5-server is &lt;1.12.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031042"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102934" version="1" comment="libFLAC++6 is &lt;1.3.0-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140792" version="1" comment="libcgroup-tools is &lt;0.41.rc1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041115"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049881"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143358" version="1" comment="postgresql94-contrib is &lt;9.4.5-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039802"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050208"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143359" version="1" comment="postgresql94-docs is &lt;9.4.5-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039801"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050208"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143360" version="1" comment="postgresql94-server is &lt;9.4.5-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039803"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050208"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116020" version="1" comment="libfreebl3-hmac is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116021" version="1" comment="libfreebl3-hmac-32bit is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038246"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116024" version="1" comment="libsoftokn3-hmac is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038247"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116025" version="1" comment="libsoftokn3-hmac-32bit is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114245" version="1" comment="libgcrypt20-hmac is &lt;1.6.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038773"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045634"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114246" version="1" comment="libgcrypt20-hmac-32bit is &lt;1.6.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038774"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045634"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106170" version="1" comment="libhivex0 is &lt;1.3.10-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038423"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106171" version="1" comment="perl-Win-Hivex is &lt;1.3.10-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038424"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107570" version="1" comment="libicu-doc is &lt;52.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031402"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044680"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140861" version="1" comment="libjansson4 is &lt;2.7-1.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037868"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049890"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105815" version="1" comment="libmpfr4-32bit is &lt;3.1.2-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038431"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044491"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143361" version="1" comment="mariadb-tools is &lt;10.0.21-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143362" version="1" comment="libopenssl1_0_0-hmac is &lt;1.0.1i-34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050213"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143363" version="1" comment="libopenssl1_0_0-hmac-32bit is &lt;1.0.1i-34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050213"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143364" version="1" comment="openssl-doc is &lt;1.0.1i-34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030781"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050213"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143365" version="1" comment="python-base-32bit is &lt;2.7.9-20.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033754"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050215"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113422" version="1" comment="qt4-x11-tools is &lt;4.8.6-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114061" version="1" comment="tiff is &lt;4.0.4-12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045603"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143366" version="1" comment="libvirt-lock-sanlock is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035599"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150271" version="1" comment="libvorbis-doc is &lt;1.3.3-8.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031668"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103736" version="1" comment="libxml2-doc is &lt;2.9.1-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143367" version="1" comment="openldap2 is &lt;2.4.41-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030656"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143368" version="1" comment="openldap2-back-meta is &lt;2.4.41-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030811"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143369" version="1" comment="openslp-server is &lt;2.0.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050222"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114324" version="1" comment="openssh-fips is &lt;6.6p1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045651"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143370" version="1" comment="openvpn-auth-pam-plugin is &lt;2.3.8-16.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050223"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143371" version="1" comment="openvswitch is &lt;2.1.2-4.5.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037928"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050450"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143372" version="1" comment="openvswitch-kmp-default is &lt;2.1.2_k3.12.49_11-4.5.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050451"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143373" version="1" comment="openvswitch-kmp-xen is &lt;2.1.2_k3.12.49_11-4.5.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050451"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143374" version="1" comment="openvswitch-switch is &lt;2.1.2-4.5.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050450"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143375" version="1" comment="powerpc-utils is &lt;1.2.26-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050452"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143376" version="1" comment="ppc64-diag is &lt;2.6.9-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038042"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143377" version="1" comment="python-32bit is &lt;2.7.9-20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050224"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143378" version="1" comment="python-demo is &lt;2.7.9-20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050224"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143379" version="1" comment="python-gdbm is &lt;2.7.9-20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030560"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050224"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143380" version="1" comment="python-idle is &lt;2.7.9-20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030561"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050224"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143381" version="1" comment="qemu-block-rbd is &lt;2.3.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038707"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143382" version="1" comment="qemu-guest-agent is &lt;2.3.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143383" version="1" comment="qemu-lang is &lt;2.3.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143384" version="1" comment="qemu-ppc is &lt;2.3.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143385" version="1" comment="qemu-s390 is &lt;2.3.1-5.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143386" version="1" comment="rsyslog-diag-tools is &lt;8.4.0-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034333"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143387" version="1" comment="rsyslog-doc is &lt;8.4.0-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143388" version="1" comment="rsyslog-module-gssapi is &lt;8.4.0-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034336"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143389" version="1" comment="rsyslog-module-gtls is &lt;8.4.0-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034337"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143390" version="1" comment="rsyslog-module-mysql is &lt;8.4.0-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034338"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143391" version="1" comment="rsyslog-module-pgsql is &lt;8.4.0-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034339"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143392" version="1" comment="rsyslog-module-relp is &lt;8.4.0-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143393" version="1" comment="rsyslog-module-snmp is &lt;8.4.0-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143394" version="1" comment="rsyslog-module-udpspoof is &lt;8.4.0-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143395" version="1" comment="smt is &lt;3.0.8-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143396" version="1" comment="smt-support is &lt;3.0.8-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105076" version="1" comment="squid is &lt;3.3.13-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044366"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110998" version="1" comment="strongswan-hmac is &lt;5.1.3-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038460"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110494" version="1" comment="stunnel is &lt;5.00-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143397" version="1" comment="systemtap is &lt;2.5-4.44" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033717"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143398" version="1" comment="systemtap-runtime is &lt;2.5-4.44" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033714"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143399" version="1" comment="systemtap-server is &lt;2.5-4.44" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033716"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143400" version="1" comment="tomcat is &lt;8.0.23-1.80" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143401" version="1" comment="tomcat-admin-webapps is &lt;8.0.23-1.80" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035426"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143402" version="1" comment="tomcat-docs-webapp is &lt;8.0.23-1.80" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035427"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143403" version="1" comment="tomcat-el-3_0-api is &lt;8.0.23-1.80" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040305"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143404" version="1" comment="tomcat-javadoc is &lt;8.0.23-1.80" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143405" version="1" comment="tomcat-jsp-2_3-api is &lt;8.0.23-1.80" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040306"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143406" version="1" comment="tomcat-lib is &lt;8.0.23-1.80" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035432"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143407" version="1" comment="tomcat-servlet-3_1-api is &lt;8.0.23-1.80" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143408" version="1" comment="tomcat-webapps is &lt;8.0.23-1.80" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035434"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143409" version="1" comment="vsftpd is &lt;3.0.2-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143410" version="1" comment="xen-doc-html is &lt;4.5.1_12-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143411" version="1" comment="xen-tools is &lt;4.5.1_12-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143412" version="1" comment="xen-tools-domU is &lt;4.5.1_12-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031483"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128018" version="1" comment="sles-release is ==12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030884"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047590"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140453" version="1" comment="apache2 is &lt;2.4.23-14.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030668"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140454" version="1" comment="apache2-doc is &lt;2.4.23-14.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140455" version="1" comment="apache2-example-pages is &lt;2.4.23-14.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031064"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140456" version="1" comment="apache2-prefork is &lt;2.4.23-14.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030666"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140457" version="1" comment="apache2-utils is &lt;2.4.23-14.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140458" version="1" comment="apache2-worker is &lt;2.4.23-14.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030667"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131934" version="1" comment="apache2-mod_nss is &lt;1.0.14-18.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037547"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048052"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131796" version="1" comment="flex is &lt;2.5.37-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040705"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131938" version="1" comment="flex-32bit is &lt;2.5.37-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040709"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131939" version="1" comment="libbonobo-doc is &lt;2.32.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040710"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140465" version="1" comment="automake is &lt;1.13.4-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035239"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049780"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140469" version="1" comment="avahi-utils is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131135" version="1" comment="bind is &lt;9.9.9P1-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131947" version="1" comment="bind-chrootenv is &lt;9.9.9P1-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031552"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131948" version="1" comment="bind-doc is &lt;9.9.9P1-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140484" version="1" comment="bzip2-doc is &lt;1.0.6-29.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031654"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049786"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140487" version="1" comment="chrony is &lt;2.3-3.110" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041095"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140503" version="1" comment="gcc48-locale is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130042" version="1" comment="dhcp-relay is &lt;4.3.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047838"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130043" version="1" comment="dhcp-server is &lt;4.3.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030728"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047838"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140547" version="1" comment="dracut-fips is &lt;044-87.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039345"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140548" version="1" comment="dstat is &lt;0.7.2-1.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041101"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140550" version="1" comment="emacs-el is &lt;24.3-16.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031212"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140552" version="1" comment="emacs-nox is &lt;24.3-16.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140570" version="1" comment="fetchmailconf is &lt;6.3.26-12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030768"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049811"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126715" version="1" comment="giflib-progs is &lt;5.0.5-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039796"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047430"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124820" version="1" comment="git-core is &lt;1.8.5.6-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031790"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140622" version="1" comment="glibc-html is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032391"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140624" version="1" comment="glibc-info is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032393"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140627" version="1" comment="glibc-profile is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140628" version="1" comment="glibc-profile-32bit is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140649" version="1" comment="grub2-arm64-efi is &lt;2.02~beta2-104.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041109"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049829"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140651" version="1" comment="grub2-powerpc-ieee1275 is &lt;2.02~beta2-104.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039512"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049829"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140652" version="1" comment="grub2-s390x-emu is &lt;2.02~beta2-104.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039513"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049829"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140663" version="1" comment="guestfs-data is &lt;1.32.4-14.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049831"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140664" version="1" comment="guestfs-tools is &lt;1.32.4-14.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037415"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049831"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140665" version="1" comment="guestfsd is &lt;1.32.4-14.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049831"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140666" version="1" comment="libguestfs0 is &lt;1.32.4-14.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037417"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049831"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140667" version="1" comment="perl-Sys-Guestfs is &lt;1.32.4-14.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041110"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049831"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140668" version="1" comment="python-libguestfs is &lt;1.32.4-14.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041111"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049831"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140669" version="1" comment="virt-p2v is &lt;1.32.4-14.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041112"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049831"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140670" version="1" comment="virt-v2v is &lt;1.32.4-14.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041113"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049831"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140685" version="1" comment="ipsec-tools is &lt;0.8.0-15.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030598"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049842"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131900" version="1" comment="java-1_7_0-openjdk-demo is &lt;1.7.0.111-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047947"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131901" version="1" comment="java-1_7_0-openjdk-devel is &lt;1.7.0.111-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035194"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047947"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131658" version="1" comment="java-1_7_1-ibm is &lt;1.7.1_sr3.50-28.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131659" version="1" comment="java-1_7_1-ibm-alsa is &lt;1.7.1_sr3.50-28.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131661" version="1" comment="java-1_7_1-ibm-jdbc is &lt;1.7.1_sr3.50-28.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038264"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131662" version="1" comment="java-1_7_1-ibm-plugin is &lt;1.7.1_sr3.50-28.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038266"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128388" version="1" comment="java-1_8_0-ibm is &lt;1.8.0_sr3.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039522"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047627"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128390" version="1" comment="java-1_8_0-ibm-alsa is &lt;1.8.0_sr3.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039529"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047627"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128391" version="1" comment="java-1_8_0-ibm-plugin is &lt;1.8.0_sr3.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039530"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047627"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131902" version="1" comment="java-1_8_0-openjdk-demo is &lt;1.8.0.101-14.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131903" version="1" comment="java-1_8_0-openjdk-devel is &lt;1.8.0.101-14.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038651"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140696" version="1" comment="kernel-default-base is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140698" version="1" comment="kernel-default-man is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031015"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140706" version="1" comment="krb5-doc is &lt;1.12.5-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140707" version="1" comment="krb5-plugin-kdb-ldap is &lt;1.12.5-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033579"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140708" version="1" comment="krb5-plugin-preauth-otp is &lt;1.12.5-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140709" version="1" comment="krb5-plugin-preauth-pkinit is &lt;1.12.5-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033580"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140710" version="1" comment="krb5-server is &lt;1.12.5-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031042"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131949" version="1" comment="postgresql94-contrib is &lt;9.4.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039802"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047984"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131950" version="1" comment="postgresql94-docs is &lt;9.4.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039801"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047984"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131951" version="1" comment="postgresql94-server is &lt;9.4.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039803"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047984"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129312" version="1" comment="libfreebl3-hmac is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129313" version="1" comment="libfreebl3-hmac-32bit is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038246"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129314" version="1" comment="libsoftokn3-hmac is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038247"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129315" version="1" comment="libsoftokn3-hmac-32bit is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131935" version="1" comment="libgcrypt20-hmac is &lt;1.6.1-16.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038773"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047974"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131936" version="1" comment="libgcrypt20-hmac-32bit is &lt;1.6.1-16.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038774"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047974"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131905" version="1" comment="libidn-tools is &lt;1.28-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038784"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140872" version="1" comment="openldap2 is &lt;2.4.41-18.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030656"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049893"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140873" version="1" comment="openldap2-back-meta is &lt;2.4.41-18.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030811"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049893"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131946" version="1" comment="mariadb-tools is &lt;10.0.27-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140889" version="1" comment="libnghttp2-14 is &lt;1.7.1-1.84" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040283"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140893" version="1" comment="libopenssl1_0_0-hmac is &lt;1.0.2j-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140894" version="1" comment="libopenssl1_0_0-hmac-32bit is &lt;1.0.2j-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140896" version="1" comment="openssl-doc is &lt;1.0.2j-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030781"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131910" version="1" comment="python-base-32bit is &lt;2.7.9-24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033754"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125290" version="1" comment="qt4-x11-tools is &lt;4.8.6-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047294"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131759" version="1" comment="libtcnative-1-0 is &lt;1.1.32-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131044" version="1" comment="tiff is &lt;4.0.6-26.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140995" version="1" comment="libvirt-lock-sanlock is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035599"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009140996" version="1" comment="libvirt-nss is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041117"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119309" version="1" comment="libvncclient0 is &lt;0.9.9-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038722"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046585"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119310" version="1" comment="libvncserver0 is &lt;0.9.9-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038723"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046585"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141005" version="1" comment="python-vte is &lt;0.28.2-19.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037176"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049931"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141006" version="1" comment="vte2-lang is &lt;0.28.2-19.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037181"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049931"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141034" version="1" comment="libxml2-doc is &lt;2.9.4-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141039" version="1" comment="logwatch is &lt;7.4.3-15.65" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049937"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131940" version="1" comment="openslp-server is &lt;2.0.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047980"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141046" version="1" comment="openssh-fips is &lt;7.2p2-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141049" version="1" comment="openvpn-auth-pam-plugin is &lt;2.3.8-16.6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141050" version="1" comment="openvswitch is &lt;2.5.1-24.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037928"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141051" version="1" comment="openvswitch-dpdk is &lt;2.5.1-24.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041118"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141052" version="1" comment="openvswitch-dpdk-switch is &lt;2.5.1-24.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041119"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141053" version="1" comment="openvswitch-switch is &lt;2.5.1-24.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141070" version="1" comment="powerpc-utils is &lt;1.3.2-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049957"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141071" version="1" comment="ppc64-diag is &lt;2.7.1-5.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038042"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131909" version="1" comment="python-32bit is &lt;2.7.9-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131911" version="1" comment="python-demo is &lt;2.7.9-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131914" version="1" comment="python-gdbm is &lt;2.7.9-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030560"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131915" version="1" comment="python-idle is &lt;2.7.9-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030561"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141088" version="1" comment="qemu-arm is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141090" version="1" comment="qemu-block-rbd is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038707"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141091" version="1" comment="qemu-block-ssh is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040865"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141092" version="1" comment="qemu-guest-agent is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141095" version="1" comment="qemu-lang is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141096" version="1" comment="qemu-ppc is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141097" version="1" comment="qemu-s390 is &lt;2.6.1-27.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128392" version="1" comment="quagga is &lt;0.99.22.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047628"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141104" version="1" comment="res-signingkeys is &lt;3.0.18-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049971"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141105" version="1" comment="smt is &lt;3.0.18-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049971"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141106" version="1" comment="smt-support is &lt;3.0.18-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049971"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141113" version="1" comment="rsyslog-diag-tools is &lt;8.4.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034333"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141114" version="1" comment="rsyslog-doc is &lt;8.4.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141115" version="1" comment="rsyslog-module-gssapi is &lt;8.4.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034336"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141116" version="1" comment="rsyslog-module-gtls is &lt;8.4.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034337"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141117" version="1" comment="rsyslog-module-mysql is &lt;8.4.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034338"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141118" version="1" comment="rsyslog-module-pgsql is &lt;8.4.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034339"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141119" version="1" comment="rsyslog-module-relp is &lt;8.4.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141120" version="1" comment="rsyslog-module-snmp is &lt;8.4.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141121" version="1" comment="rsyslog-module-udpspoof is &lt;8.4.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141127" version="1" comment="squid is &lt;3.5.21-23.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119300" version="1" comment="strongswan-hmac is &lt;5.1.3-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038460"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046580"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141135" version="1" comment="systemtap is &lt;3.0-7.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033717"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141136" version="1" comment="systemtap-runtime is &lt;3.0-7.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033714"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141137" version="1" comment="systemtap-server is &lt;3.0-7.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033716"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141142" version="1" comment="tomcat is &lt;8.0.36-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141143" version="1" comment="tomcat-admin-webapps is &lt;8.0.36-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035426"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141144" version="1" comment="tomcat-docs-webapp is &lt;8.0.36-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035427"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141145" version="1" comment="tomcat-el-3_0-api is &lt;8.0.36-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040305"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141146" version="1" comment="tomcat-javadoc is &lt;8.0.36-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141147" version="1" comment="tomcat-jsp-2_3-api is &lt;8.0.36-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040306"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141148" version="1" comment="tomcat-lib is &lt;8.0.36-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035432"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141149" version="1" comment="tomcat-servlet-3_1-api is &lt;8.0.36-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141150" version="1" comment="tomcat-webapps is &lt;8.0.36-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035434"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141156" version="1" comment="vsftpd is &lt;3.0.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049996"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141160" version="1" comment="xen-doc-html is &lt;4.7.0_12-23.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141163" version="1" comment="xen-tools is &lt;4.7.0_12-23.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009141164" version="1" comment="xen-tools-domU is &lt;4.7.0_12-23.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031483"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158922" version="1" comment="sles-release is ==12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030884"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052091"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158926" version="1" comment="alsa-docs is &lt;1.0.27.2-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041092"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052093"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158929" version="1" comment="apache-commons-daemon is &lt;1.0.15-6.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040941"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158930" version="1" comment="apache-commons-daemon-javadoc is &lt;1.0.15-6.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157598" version="1" comment="apache2 is &lt;2.4.23-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030668"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157599" version="1" comment="apache2-doc is &lt;2.4.23-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157600" version="1" comment="apache2-example-pages is &lt;2.4.23-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031064"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157601" version="1" comment="apache2-prefork is &lt;2.4.23-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030666"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157602" version="1" comment="apache2-utils is &lt;2.4.23-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157603" version="1" comment="apache2-worker is &lt;2.4.23-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030667"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158931" version="1" comment="apache2-mod_apparmor is &lt;2.8.2-49.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040402"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157661" version="1" comment="bind is &lt;9.9.9P1-62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157721" version="1" comment="bind-chrootenv is &lt;9.9.9P1-62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031552"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157722" version="1" comment="bind-doc is &lt;9.9.9P1-62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158950" version="1" comment="crash is &lt;7.1.8-3.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037906"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158951" version="1" comment="crash-kmp-default is &lt;7.1.8_k4.4.73_5-3.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037911"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052101"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158965" version="1" comment="dovecot22 is &lt;2.2.30.2-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040869"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158966" version="1" comment="dovecot22-backend-mysql is &lt;2.2.30.2-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040870"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158967" version="1" comment="dovecot22-backend-pgsql is &lt;2.2.30.2-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040871"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158968" version="1" comment="dovecot22-backend-sqlite is &lt;2.2.30.2-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040872"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158970" version="1" comment="dracut-fips is &lt;044-113.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039345"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052108"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158976" version="1" comment="emacs-el is &lt;24.3-19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031212"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158978" version="1" comment="emacs-nox is &lt;24.3-19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158981" version="1" comment="freeradius-server is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158982" version="1" comment="freeradius-server-doc is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158983" version="1" comment="freeradius-server-krb5 is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041102"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158984" version="1" comment="freeradius-server-ldap is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041103"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158985" version="1" comment="freeradius-server-libs is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158986" version="1" comment="freeradius-server-mysql is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041104"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158987" version="1" comment="freeradius-server-perl is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041105"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158988" version="1" comment="freeradius-server-postgresql is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041106"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158989" version="1" comment="freeradius-server-python is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041107"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158990" version="1" comment="freeradius-server-sqlite is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041108"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158991" version="1" comment="freeradius-server-utils is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032993"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155663" version="1" comment="git-core is &lt;2.12.3-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031790"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051729"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156986" version="1" comment="glibc-html is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032391"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156987" version="1" comment="glibc-info is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032393"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156988" version="1" comment="glibc-profile is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157048" version="1" comment="glibc-profile-32bit is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159005" version="1" comment="libgnutls-openssl27 is &lt;3.3.27-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035959"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159011" version="1" comment="grub2-arm64-efi is &lt;2.02-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041109"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159013" version="1" comment="grub2-powerpc-ieee1275 is &lt;2.02-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039512"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159014" version="1" comment="grub2-s390x-emu is &lt;2.02-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039513"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159021" version="1" comment="guestfs-data is &lt;1.32.4-19.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159022" version="1" comment="guestfs-tools is &lt;1.32.4-19.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037415"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159023" version="1" comment="guestfsd is &lt;1.32.4-19.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159024" version="1" comment="libguestfs0 is &lt;1.32.4-19.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037417"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159025" version="1" comment="perl-Sys-Guestfs is &lt;1.32.4-19.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041110"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159026" version="1" comment="python-libguestfs is &lt;1.32.4-19.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041111"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159027" version="1" comment="virt-p2v is &lt;1.32.4-19.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041112"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159028" version="1" comment="virt-v2v is &lt;1.32.4-19.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041113"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159033" version="1" comment="ipsec-tools is &lt;0.8.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030598"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052123"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156771" version="1" comment="jakarta-taglibs-standard is &lt;1.1.1-255.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035093"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051890"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156772" version="1" comment="jakarta-taglibs-standard-javadoc is &lt;1.1.1-255.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035092"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051890"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155977" version="1" comment="java-1_7_0-openjdk-demo is &lt;1.7.0.141-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051748"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155978" version="1" comment="java-1_7_0-openjdk-devel is &lt;1.7.0.141-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035194"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051748"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155701" version="1" comment="java-1_7_1-ibm is &lt;1.7.1_sr4.5-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155702" version="1" comment="java-1_7_1-ibm-alsa is &lt;1.7.1_sr4.5-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155704" version="1" comment="java-1_7_1-ibm-jdbc is &lt;1.7.1_sr4.5-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038264"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155705" version="1" comment="java-1_7_1-ibm-plugin is &lt;1.7.1_sr4.5-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038266"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155706" version="1" comment="java-1_8_0-ibm is &lt;1.8.0_sr4.5-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039522"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155710" version="1" comment="java-1_8_0-ibm-alsa is &lt;1.8.0_sr4.5-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039529"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155711" version="1" comment="java-1_8_0-ibm-plugin is &lt;1.8.0_sr4.5-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039530"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156243" version="1" comment="java-1_8_0-openjdk-demo is &lt;1.8.0.131-26.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156244" version="1" comment="java-1_8_0-openjdk-devel is &lt;1.8.0.131-26.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038651"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159036" version="1" comment="kernel-default-base is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159038" version="1" comment="kernel-default-man is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031015"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159083" version="1" comment="libcgroup-tools is &lt;0.41.rc1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041115"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052132"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159133" version="1" comment="postgresql96-contrib is &lt;9.6.3-2.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041747"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052135"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159134" version="1" comment="postgresql96-docs is &lt;9.6.3-2.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041748"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052135"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159135" version="1" comment="postgresql96-server is &lt;9.6.3-2.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041749"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052135"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155339" version="1" comment="libfreebl3-hmac is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155342" version="1" comment="libfreebl3-hmac-32bit is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038246"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155340" version="1" comment="libsoftokn3-hmac is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038247"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155343" version="1" comment="libsoftokn3-hmac-32bit is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156985" version="1" comment="libgcrypt20-hmac is &lt;1.6.1-16.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038773"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051912"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157047" version="1" comment="libgcrypt20-hmac-32bit is &lt;1.6.1-16.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038774"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051912"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156767" version="1" comment="openldap2 is &lt;2.4.41-18.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030656"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156770" version="1" comment="openldap2-back-meta is &lt;2.4.41-18.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030811"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159158" version="1" comment="libtool is &lt;2.4.2-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032054"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052139"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159159" version="1" comment="libtool-32bit is &lt;2.4.2-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032053"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052139"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159161" version="1" comment="liblua5_2-32bit is &lt;5.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038154"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052140"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156854" version="1" comment="libmicrohttpd10 is &lt;0.9.30-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159168" version="1" comment="mariadb-tools is &lt;10.0.30-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148322" version="1" comment="libopenssl1_0_0-hmac is &lt;1.0.2j-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148324" version="1" comment="libopenssl1_0_0-hmac-32bit is &lt;1.0.2j-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148323" version="1" comment="openssl-doc is &lt;1.0.2j-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030781"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159189" version="1" comment="python-base-32bit is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033754"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135881" version="1" comment="libtcnative-1-0 is &lt;1.1.34-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048585"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154405" version="1" comment="tiff is &lt;4.0.7-43.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051544"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159245" version="1" comment="libvirt-lock-sanlock is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035599"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159246" version="1" comment="libvirt-nss is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041117"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157775" version="1" comment="libxml2-doc is &lt;2.9.4-45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051991"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159251" version="1" comment="memcached is &lt;1.4.33-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033242"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052155"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131966" version="1" comment="openslp-server is &lt;2.0.0-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159255" version="1" comment="openssh-fips is &lt;7.2p2-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052157"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157218" version="1" comment="openvpn-auth-pam-plugin is &lt;2.3.8-16.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159257" version="1" comment="openvswitch is &lt;2.7.0-2.29" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037928"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052158"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146969" version="1" comment="perl-DBD-mysql is &lt;4.021-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050971"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159259" version="1" comment="policycoreutils is &lt;2.5-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052160"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159260" version="1" comment="policycoreutils-python is &lt;2.5-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052160"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159261" version="1" comment="powerpc-utils is &lt;1.3.3-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052161"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159262" version="1" comment="ppc64-diag is &lt;2.7.3-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038042"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052162"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159264" version="1" comment="python-32bit is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159266" version="1" comment="python-demo is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159267" version="1" comment="python-gdbm is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030560"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159268" version="1" comment="python-idle is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030561"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159270" version="1" comment="python-PyYAML is &lt;3.12-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038718"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052163"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159271" version="1" comment="python-doc is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030559"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159272" version="1" comment="python-doc-pdf is &lt;2.7.13-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030558"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052144"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159277" version="1" comment="qemu-arm is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159279" version="1" comment="qemu-block-rbd is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038707"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159280" version="1" comment="qemu-block-ssh is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040865"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159281" version="1" comment="qemu-guest-agent is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159284" version="1" comment="qemu-lang is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159285" version="1" comment="qemu-ppc is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159286" version="1" comment="qemu-s390 is &lt;2.9.0-5.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131838" version="1" comment="quagga is &lt;0.99.22.1-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048047"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159292" version="1" comment="res-signingkeys is &lt;3.0.25-48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052169"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159293" version="1" comment="smt is &lt;3.0.25-48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052169"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159294" version="1" comment="smt-support is &lt;3.0.25-48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052169"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159296" version="1" comment="rsyslog-diag-tools is &lt;8.24.0-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034333"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159297" version="1" comment="rsyslog-doc is &lt;8.24.0-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159298" version="1" comment="rsyslog-module-gssapi is &lt;8.24.0-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034336"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159299" version="1" comment="rsyslog-module-gtls is &lt;8.24.0-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034337"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159300" version="1" comment="rsyslog-module-mysql is &lt;8.24.0-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034338"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159301" version="1" comment="rsyslog-module-pgsql is &lt;8.24.0-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034339"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159302" version="1" comment="rsyslog-module-relp is &lt;8.24.0-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159303" version="1" comment="rsyslog-module-snmp is &lt;8.24.0-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159304" version="1" comment="rsyslog-module-udpspoof is &lt;8.24.0-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052170"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146970" version="1" comment="squid is &lt;3.5.21-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155979" version="1" comment="squidGuard is &lt;1.4-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033859"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051750"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155980" version="1" comment="squidGuard-doc is &lt;1.4-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051750"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156345" version="1" comment="strongswan-hmac is &lt;5.1.3-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038460"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159309" version="1" comment="systemtap is &lt;3.0-10.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033717"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159310" version="1" comment="systemtap-runtime is &lt;3.0-10.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033714"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159311" version="1" comment="systemtap-server is &lt;3.0-10.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033716"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155282" version="1" comment="tomcat is &lt;8.0.43-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155283" version="1" comment="tomcat-admin-webapps is &lt;8.0.43-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035426"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155284" version="1" comment="tomcat-docs-webapp is &lt;8.0.43-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035427"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155285" version="1" comment="tomcat-el-3_0-api is &lt;8.0.43-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040305"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155286" version="1" comment="tomcat-javadoc is &lt;8.0.43-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155287" version="1" comment="tomcat-jsp-2_3-api is &lt;8.0.43-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040306"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155288" version="1" comment="tomcat-lib is &lt;8.0.43-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035432"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155289" version="1" comment="tomcat-servlet-3_1-api is &lt;8.0.43-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155290" version="1" comment="tomcat-webapps is &lt;8.0.43-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035434"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159315" version="1" comment="tpm2.0-tools is &lt;2.0.0-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041760"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052178"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159316" version="1" comment="vsftpd is &lt;3.0.2-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052179"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159318" version="1" comment="xen-doc-html is &lt;4.9.0_08-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159321" version="1" comment="xen-tools is &lt;4.9.0_08-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159322" version="1" comment="xen-tools-domU is &lt;4.9.0_08-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031483"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147510" version="1" comment="apache-commons-daemon is &lt;1.0.15-4.181" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040941"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051040"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147511" version="1" comment="apache-commons-daemon-javadoc is &lt;1.0.15-4.181" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051040"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147512" version="1" comment="apache-commons-httpclient is &lt;3.1-4.364" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040942"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147513" version="1" comment="m4 is &lt;1.4.16-15.67" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040949"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147514" version="1" comment="coolkey is &lt;1.1.0-147.67" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041097"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147515" version="1" comment="cups-pk-helper is &lt;0.2.5-3.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051044"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147516" version="1" comment="cups-pk-helper-lang is &lt;0.2.5-3.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051044"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147517" version="1" comment="cvs is &lt;1.12.12-181.54" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031943"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051045"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147518" version="1" comment="cvs-doc is &lt;1.12.12-181.54" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034801"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051045"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147519" version="1" comment="dovecot22 is &lt;2.2.13-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040869"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051046"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147520" version="1" comment="dovecot22-backend-mysql is &lt;2.2.13-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040870"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051046"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147521" version="1" comment="dovecot22-backend-pgsql is &lt;2.2.13-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040871"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051046"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147522" version="1" comment="dovecot22-backend-sqlite is &lt;2.2.13-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040872"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051046"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147523" version="1" comment="gpgme is &lt;1.5.1-1.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038077"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051047"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147524" version="1" comment="libgpgme11 is &lt;1.5.1-1.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038079"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051047"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147525" version="1" comment="groff is &lt;1.22.2-5.287" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147526" version="1" comment="groff-full is &lt;1.22.2-5.287" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147527" version="1" comment="gxditview is &lt;1.22.2-5.287" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147528" version="1" comment="gv is &lt;3.7.4-1.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030670"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051049"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147529" version="1" comment="wdiff is &lt;1.2.1-3.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040985"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051050"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147530" version="1" comment="gvim is &lt;7.4.326-2.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030753"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147531" version="1" comment="vim is &lt;7.4.326-2.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032775"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147532" version="1" comment="vim-data is &lt;7.4.326-2.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031745"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147533" version="1" comment="gzip is &lt;1.6-7.209" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030647"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051052"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147534" version="1" comment="hardlink is &lt;1.0-6.38" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040987"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051053"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147535" version="1" comment="iputils is &lt;s20121221-2.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051054"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147536" version="1" comment="jakarta-commons-fileupload is &lt;1.1.1-120.113" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035077"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051055"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147537" version="1" comment="jakarta-commons-fileupload-javadoc is &lt;1.1.1-120.113" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035076"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051055"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147538" version="1" comment="krb5-appl-clients is &lt;1.0.3-1.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034718"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051056"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147539" version="1" comment="krb5-appl-servers is &lt;1.0.3-1.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034719"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051056"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147540" version="1" comment="libHX28 is &lt;3.18-1.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040993"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051057"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147541" version="1" comment="libIlmImf-Imf_2_1-21 is &lt;2.1.0-4.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051058"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147542" version="1" comment="openexr is &lt;2.1.0-4.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051058"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147543" version="1" comment="libX11-6 is &lt;1.6.2-4.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051059"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147544" version="1" comment="libX11-data is &lt;1.6.2-4.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036218"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051059"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147545" version="1" comment="libX11-xcb1 is &lt;1.6.2-4.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051059"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147546" version="1" comment="libXRes1 is &lt;1.0.7-3.53" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051060"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147547" version="1" comment="libXcursor1 is &lt;1.1.14-3.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051061"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147548" version="1" comment="libXext6 is &lt;1.3.2-3.60" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147549" version="1" comment="libXfixes3 is &lt;5.0.1-3.52" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147550" version="1" comment="libXinerama1 is &lt;1.1.3-3.54" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049875"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147551" version="1" comment="libXp6 is &lt;1.0.2-3.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051064"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147552" version="1" comment="libXrender1 is &lt;0.9.8-3.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036099"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051065"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147553" version="1" comment="libXt6 is &lt;1.1.4-3.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036107"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147554" version="1" comment="libXtst6 is &lt;1.2.2-3.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036177"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147555" version="1" comment="libXv1 is &lt;1.0.10-3.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036115"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051068"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147556" version="1" comment="libXvMC1 is &lt;1.0.8-3.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036185"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147557" version="1" comment="libXxf86dga1 is &lt;1.1.4-3.58" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051070"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147558" version="1" comment="libXxf86vm1 is &lt;1.1.3-3.53" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051071"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147559" version="1" comment="libapr-util1 is &lt;1.5.3-1.46" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033229"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051072"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147560" version="1" comment="libapr-util1-dbd-sqlite3 is &lt;1.5.3-1.46" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033233"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051072"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147561" version="1" comment="libapr1 is &lt;1.5.1-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051073"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147562" version="1" comment="libdmx1 is &lt;1.1.3-3.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036209"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051074"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147563" version="1" comment="libexif12 is &lt;0.6.21-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147564" version="1" comment="libgc1 is &lt;7.2d-3.75" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040915"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147565" version="1" comment="libgssglue1 is &lt;0.4-3.76" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034912"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051077"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147566" version="1" comment="libgypsy0 is &lt;0.9-6.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037106"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051078"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147567" version="1" comment="libjson-c2 is &lt;0.11-2.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051079"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147568" version="1" comment="liblcms1 is &lt;1.19-17.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051080"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147569" version="1" comment="libltdl7 is &lt;2.4.2-14.30" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033552"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147570" version="1" comment="libtool is &lt;2.4.2-14.30" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032054"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147571" version="1" comment="libmodplug1 is &lt;0.8.8.4-13.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037421"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051082"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147572" version="1" comment="libmusicbrainz4 is &lt;2.1.5-27.79" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051083"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147573" version="1" comment="libneon27 is &lt;0.30.0-3.64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051084"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147574" version="1" comment="libpcsclite1 is &lt;1.8.10-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033875"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147575" version="1" comment="pcsc-lite is &lt;1.8.10-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032526"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147576" version="1" comment="libpulse-mainloop-glib0 is &lt;5.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033659"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147577" version="1" comment="libpulse0 is &lt;5.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147578" version="1" comment="pulseaudio is &lt;5.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032767"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147579" version="1" comment="pulseaudio-esound-compat is &lt;5.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033662"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147580" version="1" comment="pulseaudio-gdm-hooks is &lt;5.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033663"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147581" version="1" comment="pulseaudio-lang is &lt;5.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033664"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147582" version="1" comment="pulseaudio-module-x11 is &lt;5.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033669"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147583" version="1" comment="pulseaudio-module-zeroconf is &lt;5.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033670"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147584" version="1" comment="pulseaudio-utils is &lt;5.0-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033671"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147585" version="1" comment="libraptor2-0 is &lt;2.0.10-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041009"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147586" version="1" comment="libsmi is &lt;0.4.8-18.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034035"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051088"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147587" version="1" comment="libsmi2 is &lt;0.4.8-18.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041012"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051088"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147588" version="1" comment="libtag1 is &lt;1.9.1-1.218" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036958"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147589" version="1" comment="libtag_c0 is &lt;1.9.1-1.218" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147590" version="1" comment="taglib is &lt;1.9.1-1.218" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034909"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147591" version="1" comment="libudisks2-0 is &lt;2.1.3-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037861"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051090"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147592" version="1" comment="udisks2 is &lt;2.1.3-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051090"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147593" version="1" comment="udisks2-lang is &lt;2.1.3-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037865"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051090"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147594" version="1" comment="libupsclient1 is &lt;2.7.1-4.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051091"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147595" version="1" comment="nut is &lt;2.7.1-4.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051091"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147596" version="1" comment="nut-drivers-net is &lt;2.7.1-4.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051091"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147597" version="1" comment="logrotate is &lt;3.8.7-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034546"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051092"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147598" version="1" comment="mipv6d is &lt;2.0.2.umip.0.4-19.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033973"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051093"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147599" version="1" comment="opensc is &lt;0.13.0-1.107" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030852"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147600" version="1" comment="opie is &lt;2.4-724.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034616"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147601" version="1" comment="pam_krb5 is &lt;2.4.4-4.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031798"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147602" version="1" comment="pam_ssh is &lt;2.0-1.39" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041017"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147603" version="1" comment="pcsc-ccid is &lt;1.4.14-1.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147604" version="1" comment="perl-Config-IniFiles is &lt;2.82-3.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041019"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051099"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147605" version="1" comment="perl-HTML-Parser is &lt;3.71-1.145" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033545"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147606" version="1" comment="perl-Tk is &lt;804.031-3.76" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030651"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051101"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147607" version="1" comment="ppp is &lt;2.4.7-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031955"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147608" version="1" comment="python-pywbem is &lt;0.7.0-4.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037881"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147609" version="1" comment="radvd is &lt;1.9.7-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034726"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051104"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147610" version="1" comment="rtkit is &lt;0.11_git201205151338-8.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037388"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051105"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147611" version="1" comment="ruby is &lt;2.1-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030431"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051106"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147612" version="1" comment="whois is &lt;5.1.1-1.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147613" version="1" comment="xinetd is &lt;2.3.15-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031953"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051108"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147614" version="1" comment="xlockmore is &lt;5.43-5.30" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041026"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147615" version="1" comment="xrdb is &lt;1.1.0-3.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041028"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147616" version="1" comment="yast2 is &lt;3.1.206-36.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032603"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147617" version="1" comment="zoo is &lt;2.10-1020.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030614"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051112"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144701" version="1" comment="FastCGI is &lt;2.4.0-167.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034781"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144702" version="1" comment="perl-FastCGI is &lt;2.4.0-167.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034782"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117457" version="1" comment="sle-sdk-release is ==12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032762"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045919"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144703" version="1" comment="ImageMagick-devel is &lt;6.8.8.1-5.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030421"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050013"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144704" version="1" comment="libMagick++-devel is &lt;6.8.8.1-5.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031645"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050013"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144705" version="1" comment="perl-PerlMagick is &lt;6.8.8.1-5.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030834"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050013"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144706" version="1" comment="MozillaFirefox-devel is &lt;31.1.0esr-1.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034520"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050014"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144707" version="1" comment="aaa_base-malloccheck is &lt;13.2+git20140911.61c1681-1.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037562"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050015"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144708" version="1" comment="accountsservice-devel is &lt;0.6.35-1.126" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037056"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050016"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144709" version="1" comment="alsa-devel is &lt;1.0.27.2-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040937"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144710" version="1" comment="ant-jmf is &lt;1.9.4-1.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050790"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144711" version="1" comment="ant-scripts is &lt;1.9.4-1.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035013"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050790"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144712" version="1" comment="ant-swing is &lt;1.9.4-1.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035014"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050790"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144713" version="1" comment="apache2-devel is &lt;2.4.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030665"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050389"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144714" version="1" comment="augeas-devel is &lt;1.2.0-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038076"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050080"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144715" version="1" comment="avahi-compat-howl-devel is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031834"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144716" version="1" comment="avahi-compat-mDNSResponder-devel is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031838"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144717" version="1" comment="libavahi-devel is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033071"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144718" version="1" comment="libhowl0 is &lt;0.6.31-20.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033082"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144719" version="1" comment="bash-devel is &lt;4.2-75.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037112"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050019"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144720" version="1" comment="readline-devel is &lt;6.2-75.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032536"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144721" version="1" comment="bind-devel is &lt;9.9.5P1-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144722" version="1" comment="checkbashisms is &lt;2.12.6-3.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041250"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144723" version="1" comment="cifs-utils-devel is &lt;6.4-3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041251"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050024"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144724" version="1" comment="coolkey-devel is &lt;1.1.0-147.71" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041252"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049792"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144725" version="1" comment="ctdb-devel is &lt;2.5.3-4.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050792"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144726" version="1" comment="cups-devel is &lt;1.7.5-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030426"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050034"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144727" version="1" comment="cyrus-sasl-devel is &lt;2.1.26-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030880"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144728" version="1" comment="dbus-1-devel is &lt;1.8.8-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050038"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144729" version="1" comment="dbus-1-devel-doc is &lt;1.8.8-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144730" version="1" comment="dbus-1-glib-devel is &lt;0.100.2-3.58" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031624"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049803"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144731" version="1" comment="dhcp-devel is &lt;4.2.6-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030727"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050039"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144732" version="1" comment="dovecot22-devel is &lt;2.2.13-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049805"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144733" version="1" comment="evince-devel is &lt;3.10.3-1.213" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034040"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050046"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144734" version="1" comment="file-devel is &lt;5.19-2.149" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032764"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050050"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144735" version="1" comment="finch-devel is &lt;2.10.9-5.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031747"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144736" version="1" comment="libpurple-devel is &lt;2.10.9-5.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144737" version="1" comment="pidgin-devel is &lt;2.10.9-5.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031751"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144738" version="1" comment="firebird-devel is &lt;2.5.2.26539-13.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035744"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050088"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144739" version="1" comment="libfbembed-devel is &lt;2.5.2.26539-13.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035736"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050088"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144740" version="1" comment="freeradius-server-devel is &lt;3.0.3-3.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032989"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050793"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144741" version="1" comment="freerdp-devel is &lt;1.0.2-7.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037993"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050053"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144742" version="1" comment="freetype2-devel is &lt;2.5.3-2.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050090"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144743" version="1" comment="fuse-devel is &lt;2.9.3-3.65" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050055"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144744" version="1" comment="fuse-devel-static is &lt;2.9.3-3.65" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033602"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050055"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144745" version="1" comment="libulockmgr1 is &lt;2.9.3-3.65" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038745"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050055"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144746" version="1" comment="gc-devel is &lt;7.2d-3.77" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049817"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144747" version="1" comment="gcc48-ada is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039004"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144748" version="1" comment="gcc48-fortran is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144749" version="1" comment="gcc48-java is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039028"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144750" version="1" comment="gcc48-obj-c++ is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039009"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144751" version="1" comment="gcc48-objc is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039010"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144752" version="1" comment="gcc48-objc-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144753" version="1" comment="libada48 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144754" version="1" comment="libffi48-devel is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039025"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144755" version="1" comment="libgcj48-devel is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039032"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144756" version="1" comment="libgfortran3-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144757" version="1" comment="libobjc4 is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144758" version="1" comment="libobjc4-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144759" version="1" comment="libquadmath0-32bit is &lt;4.8.3+r212056-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144760" version="1" comment="gd-devel is &lt;2.1.0-3.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050057"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144761" version="1" comment="gdk-pixbuf-devel is &lt;2.30.6-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030590"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050058"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144762" version="1" comment="gdm-devel is &lt;3.10.0.1-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050060"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144763" version="1" comment="gimp-devel is &lt;2.8.10-1.164" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030654"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050061"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144764" version="1" comment="git is &lt;1.8.5.2-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031794"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144765" version="1" comment="git-arch is &lt;1.8.5.2-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031789"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144766" version="1" comment="git-core is &lt;1.8.5.2-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031790"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144767" version="1" comment="git-cvs is &lt;1.8.5.2-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031791"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144768" version="1" comment="git-daemon is &lt;1.8.5.2-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034066"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144769" version="1" comment="git-email is &lt;1.8.5.2-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031792"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144770" version="1" comment="git-gui is &lt;1.8.5.2-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144771" version="1" comment="git-svn is &lt;1.8.5.2-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031793"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144772" version="1" comment="git-web is &lt;1.8.5.2-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034068"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144773" version="1" comment="gitk is &lt;1.8.5.2-2.32" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031795"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144774" version="1" comment="glib2-devel is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031274"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144775" version="1" comment="glib2-devel-static is &lt;2.38.2-5.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041253"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144776" version="1" comment="glibc-devel-static is &lt;2.19-17.72" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036782"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050063"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144777" version="1" comment="gnome-online-accounts-devel is &lt;3.10.5-1.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035608"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050065"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144778" version="1" comment="gnome-shell-devel is &lt;3.10.4-22.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041254"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144779" version="1" comment="hplip-devel is &lt;3.14.6-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041255"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144780" version="1" comment="icecream is &lt;1.0.1-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032295"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050795"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144781" version="1" comment="lzo-devel is &lt;2.08-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038034"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049897"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144782" version="1" comment="id3lib is &lt;3.8.3-261.135" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030767"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050796"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144783" version="1" comment="kernel-docs is &lt;3.12.28-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032101"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144784" version="1" comment="kernel-obs-build is &lt;3.12.28-4.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038297"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050797"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144785" version="1" comment="kernel-zfcpdump is &lt;3.12.28-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144786" version="1" comment="krb5-devel is &lt;1.12.1-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031478"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144787" version="1" comment="lib3ds-1-3 is &lt;1.3.0-25.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041256"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050799"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144788" version="1" comment="libHX-devel is &lt;3.18-1.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049855"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144789" version="1" comment="libX11-devel is &lt;1.6.2-4.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036220"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049859"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144790" version="1" comment="libXcursor-devel is &lt;1.1.14-3.60" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036135"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049861"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144791" version="1" comment="libXext-devel is &lt;1.3.2-3.61" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036073"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049862"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144792" version="1" comment="libXfixes-devel is &lt;5.0.1-3.53" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036082"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049863"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144793" version="1" comment="libXfont-devel is &lt;1.4.7-2.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037586"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050077"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144794" version="1" comment="libXi-devel is &lt;1.7.2-3.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050078"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144795" version="1" comment="libXinerama-devel is &lt;1.1.3-3.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036151"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049866"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144796" version="1" comment="libXp-devel is &lt;1.0.2-3.58" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036089"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144797" version="1" comment="libXrandr-devel is &lt;1.4.2-3.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036159"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050079"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144798" version="1" comment="libXrender-devel is &lt;0.9.8-3.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036097"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049869"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144799" version="1" comment="libXres-devel is &lt;1.0.7-3.54" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036171"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049860"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144800" version="1" comment="libXt-devel is &lt;1.1.4-3.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036105"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049870"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144801" version="1" comment="libXtst-devel is &lt;1.2.2-3.60" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036175"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049871"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144802" version="1" comment="libXv-devel is &lt;1.0.10-3.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036113"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049872"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144803" version="1" comment="libXvMC-devel is &lt;1.0.8-3.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036183"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144804" version="1" comment="libXxf86dga-devel is &lt;1.1.4-3.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036191"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049870"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144805" version="1" comment="libXxf86vm-devel is &lt;1.1.3-3.54" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049875"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144806" version="1" comment="libapr-util1-devel is &lt;1.5.3-1.77" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033235"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144807" version="1" comment="libapr1-devel is &lt;1.5.1-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144808" version="1" comment="libasm-devel is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038056"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144809" version="1" comment="libdw-devel is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144810" version="1" comment="libebl-devel is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038062"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144811" version="1" comment="libelf-devel is &lt;0.158-3.200" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038065"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050043"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144812" version="1" comment="libblkid-devel is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144813" version="1" comment="libmount-devel is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038352"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144814" version="1" comment="libsmartcols-devel is &lt;2.25-6.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144815" version="1" comment="libbz2-devel is &lt;1.0.6-27.1129" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031658"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050023"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144816" version="1" comment="libcgroup-devel is &lt;0.41.rc1-1.30" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034328"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050084"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144817" version="1" comment="libcolord-devel is &lt;1.1.7-2.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036641"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050026"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144818" version="1" comment="libcolord-gtk-devel is &lt;0.1.25-3.113" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041258"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050027"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144819" version="1" comment="typelib-1_0-ColorHug-1_0 is &lt;1.1.7-2.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050026"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144820" version="1" comment="typelib-1_0-Colord-1_0 is &lt;1.1.7-2.42" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050026"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144821" version="1" comment="typelib-1_0-ColordGtk-1_0 is &lt;0.1.25-3.113" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041261"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050027"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144822" version="1" comment="libcurl-devel is &lt;7.37.0-2.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144823" version="1" comment="libdcerpc-atsvc-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037442"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144824" version="1" comment="libdcerpc-atsvc0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144825" version="1" comment="libdcerpc-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037447"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144826" version="1" comment="libdcerpc-samr-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144827" version="1" comment="libdcerpc-samr0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037450"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144828" version="1" comment="libgensec-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144829" version="1" comment="libndr-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037456"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144830" version="1" comment="libndr-krb5pac-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037457"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144831" version="1" comment="libndr-nbt-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037460"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144832" version="1" comment="libndr-standard-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144833" version="1" comment="libnetapi-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032931"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144834" version="1" comment="libpdb-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037469"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144835" version="1" comment="libregistry-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144836" version="1" comment="libsamba-credentials-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144837" version="1" comment="libsamba-hostconfig-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037478"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144838" version="1" comment="libsamba-policy-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037481"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144839" version="1" comment="libsamba-policy0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037483"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144840" version="1" comment="libsamba-util-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037484"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144841" version="1" comment="libsamdb-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037487"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144842" version="1" comment="libsmbclient-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030441"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144843" version="1" comment="libsmbclient-raw-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037490"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144844" version="1" comment="libsmbconf-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037493"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144845" version="1" comment="libsmbldap-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037496"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144846" version="1" comment="libsmbsharemodes-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031339"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144847" version="1" comment="libsmbsharemodes0 is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032936"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144848" version="1" comment="libtevent-util-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037499"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144849" version="1" comment="libwbclient-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032945"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144850" version="1" comment="samba-core-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037502"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144851" version="1" comment="samba-test-devel is &lt;4.1.12-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144852" version="1" comment="libdmx-devel is &lt;1.1.3-3.52" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036207"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144853" version="1" comment="libevent-devel is &lt;2.0.21-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038167"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049884"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144854" version="1" comment="libexif-devel is &lt;0.6.21-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031526"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144855" version="1" comment="libexpat-devel is &lt;2.1.0-13.232" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050047"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144856" version="1" comment="libgadu-devel is &lt;1.11.4-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031828"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050091"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144857" version="1" comment="libgcrypt-devel is &lt;1.6.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050092"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144858" version="1" comment="libgnomesu-devel is &lt;1.0.0-352.84" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050093"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144859" version="1" comment="libgnutls-devel is &lt;3.2.15-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033052"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144860" version="1" comment="libgnutls-openssl-devel is &lt;3.2.15-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035958"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144861" version="1" comment="libgnutlsxx-devel is &lt;3.2.15-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144862" version="1" comment="libgnutlsxx28 is &lt;3.2.15-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035966"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144863" version="1" comment="libgpgme-devel is &lt;1.5.1-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038078"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049827"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144864" version="1" comment="libgssglue-devel is &lt;0.4-3.83" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034913"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049887"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144865" version="1" comment="libgudev-1_0-devel is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037377"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144866" version="1" comment="libudev-devel is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033169"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144867" version="1" comment="systemd-devel is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144868" version="1" comment="typelib-1_0-GUdev-1_0 is &lt;210-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037381"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050094"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144869" version="1" comment="libguestfs-devel is &lt;1.26.9-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050410"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144870" version="1" comment="ocaml-libguestfs-devel is &lt;1.26.9-1.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041262"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050410"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144871" version="1" comment="libid3tag-devel is &lt;0.15.1b-182.58" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041263"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144872" version="1" comment="libipa_hbac-devel is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036550"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144873" version="1" comment="libsss_idmap-devel is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036553"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144874" version="1" comment="libsss_nss_idmap-devel is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144875" version="1" comment="libsss_nss_idmap0 is &lt;1.11.5.1-5.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038189"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144876" version="1" comment="libwebkitgtk-devel is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038619"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144877" version="1" comment="libwebkitgtk3-devel is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038630"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144878" version="1" comment="typelib-1_0-JavaScriptCore-1_0 is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144879" version="1" comment="typelib-1_0-WebKit-1_0 is &lt;2.2.7-3.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144880" version="1" comment="libjbig-devel is &lt;2.0-12.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049846"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144881" version="1" comment="libjson-c-devel is &lt;0.11-2.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041264"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049847"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144882" version="1" comment="liblcms-devel is &lt;1.19-17.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030750"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049853"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144883" version="1" comment="libmikmod-devel is &lt;3.2.0-4.59" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031549"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144884" version="1" comment="libmms-devel is &lt;0.6.2-15.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037886"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049898"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144885" version="1" comment="libmodplug-devel is &lt;0.8.8.4-13.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049899"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144886" version="1" comment="libmspack-devel is &lt;0.4-3.64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050099"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144887" version="1" comment="libmusicbrainz-devel is &lt;2.1.5-27.86" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032433"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049900"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144888" version="1" comment="libmysqlclient-devel is &lt;10.0.11-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031261"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144889" version="1" comment="libmysqld-devel is &lt;10.0.11-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033734"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144890" version="1" comment="libmysqld18 is &lt;10.0.11-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035441"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144891" version="1" comment="libneon-devel is &lt;0.30.0-3.65" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032927"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049901"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144892" version="1" comment="libopenssl-devel is &lt;1.0.1i-2.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144893" version="1" comment="libpacemaker-devel is &lt;1.1.12-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040866"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144894" version="1" comment="pacemaker-cts is &lt;1.1.12-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144895" version="1" comment="libpcp3 is &lt;3.6.10-4.124" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035045"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144896" version="1" comment="pcp is &lt;3.6.10-4.124" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035050"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144897" version="1" comment="pcp-import-iostat2pcp is &lt;3.6.10-4.124" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144898" version="1" comment="pcp-import-mrtg2pcp is &lt;3.6.10-4.124" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035047"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144899" version="1" comment="pcp-import-sar2pcp is &lt;3.6.10-4.124" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144900" version="1" comment="pcp-import-sheet2pcp is &lt;3.6.10-4.124" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144901" version="1" comment="perl-PCP-LogImport is &lt;3.6.10-4.124" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144902" version="1" comment="perl-PCP-LogSummary is &lt;3.6.10-4.124" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035052"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144903" version="1" comment="perl-PCP-MMV is &lt;3.6.10-4.124" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035053"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144904" version="1" comment="perl-PCP-PMDA is &lt;3.6.10-4.124" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035054"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144905" version="1" comment="libpcscspy0 is &lt;1.8.10-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041265"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144906" version="1" comment="pcsc-lite-devel is &lt;1.8.10-3.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032525"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144907" version="1" comment="libpng12-compat-devel is &lt;1.2.50-8.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050104"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144908" version="1" comment="libpng12-devel is &lt;1.2.50-8.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034636"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050104"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144909" version="1" comment="libpng16-compat-devel is &lt;1.6.8-2.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037595"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050105"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144910" version="1" comment="libpng16-devel is &lt;1.6.8-2.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050105"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144911" version="1" comment="libpoppler-devel is &lt;0.24.4-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032901"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144912" version="1" comment="libpoppler-glib-devel is &lt;0.24.4-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032903"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144913" version="1" comment="libpoppler-qt4-devel is &lt;0.24.4-3.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032908"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050108"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144914" version="1" comment="typelib-1_0-Poppler-0_18 is &lt;0.24.4-3.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037294"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144915" version="1" comment="libproxy-devel is &lt;0.4.11-11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035023"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144916" version="1" comment="libpulse-devel is &lt;5.0-2.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033658"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049910"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144917" version="1" comment="libqt4-devel is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144918" version="1" comment="libqt4-devel-doc is &lt;4.8.6-2.29" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031502"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050802"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144919" version="1" comment="libqt4-devel-doc-data is &lt;4.8.6-2.29" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034706"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050802"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144920" version="1" comment="libqt4-linguist is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144921" version="1" comment="libqt4-private-headers-devel is &lt;4.8.6-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144922" version="1" comment="libraptor-devel is &lt;2.0.10-3.67" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034835"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049912"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144923" version="1" comment="libraw-devel is &lt;0.15.4-3.88" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036606"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050115"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144924" version="1" comment="libraw-devel-static is &lt;0.15.4-3.88" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036607"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050115"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144925" version="1" comment="librpcsecgss-devel is &lt;0.19-16.56" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041266"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144926" version="1" comment="librsvg-devel is &lt;2.40.2-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034664"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050059"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144927" version="1" comment="typelib-1_0-Rsvg-2_0 is &lt;2.40.2-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037508"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050059"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144928" version="1" comment="libserf-1-1 is &lt;1.3.7-1.37" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050803"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144929" version="1" comment="silc-toolkit-devel is &lt;1.1.10-24.128" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031651"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050118"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144930" version="1" comment="libsmi-devel is &lt;0.4.8-18.63" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034034"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144931" version="1" comment="libsndfile-devel is &lt;1.0.25-18.75" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031882"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050119"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144932" version="1" comment="libsoup-devel is &lt;2.44.2-1.46" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030515"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144933" version="1" comment="libssh-devel is &lt;0.6.3-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035365"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050123"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144934" version="1" comment="libssh-devel-doc is &lt;0.6.3-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035366"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050123"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144935" version="1" comment="libsvn_auth_gnome_keyring-1-0 is &lt;1.8.10-1.25" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050804"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144936" version="1" comment="libsvn_auth_kwallet-1-0 is &lt;1.8.10-1.25" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050804"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144937" version="1" comment="subversion is &lt;1.8.10-1.25" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050804"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144938" version="1" comment="subversion-bash-completion is &lt;1.8.10-1.25" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035840"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050804"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144939" version="1" comment="subversion-devel is &lt;1.8.10-1.25" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031998"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050804"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144940" version="1" comment="subversion-perl is &lt;1.8.10-1.25" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033243"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050804"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144941" version="1" comment="subversion-python is &lt;1.8.10-1.25" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050804"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144942" version="1" comment="subversion-server is &lt;1.8.10-1.25" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050804"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144943" version="1" comment="subversion-tools is &lt;1.8.10-1.25" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032880"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050804"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144944" version="1" comment="libtag-devel is &lt;1.9.1-1.265" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036957"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049922"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144945" version="1" comment="libtasn1-devel is &lt;3.7-2.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038047"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050124"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144946" version="1" comment="libtiff-devel is &lt;4.0.3-9.78" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031676"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144947" version="1" comment="libvirt-devel is &lt;1.2.5-13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031848"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144948" version="1" comment="libvorbis-devel is &lt;1.3.3-8.23" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030755"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144949" version="1" comment="libxcb-composite0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144950" version="1" comment="libxcb-damage0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144951" version="1" comment="libxcb-devel is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035989"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144952" version="1" comment="libxcb-devel-doc is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144953" version="1" comment="libxcb-dpms0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144954" version="1" comment="libxcb-dri3-0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040927"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144955" version="1" comment="libxcb-present0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040929"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144956" version="1" comment="libxcb-record0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036007"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144957" version="1" comment="libxcb-res0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036015"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144958" version="1" comment="libxcb-screensaver0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036019"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144959" version="1" comment="libxcb-xevie0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036035"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144960" version="1" comment="libxcb-xinerama0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036047"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144961" version="1" comment="libxcb-xprint0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144962" version="1" comment="libxcb-xtest0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144963" version="1" comment="libxcb-xvmc0 is &lt;1.10-1.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144964" version="1" comment="libxml2-devel is &lt;2.9.1-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144965" version="1" comment="libyaml-devel is &lt;0.1.6-1.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050131"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144966" version="1" comment="libzip-devel is &lt;0.11.1-4.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034534"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050132"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144967" version="1" comment="zeromq-devel is &lt;4.0.4-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038178"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144968" version="1" comment="lua-devel is &lt;5.2.2-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038157"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049895"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144969" version="1" comment="mozilla-nspr-devel is &lt;4.10.7-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050134"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144970" version="1" comment="mozilla-nss-devel is &lt;3.16.4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050089"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144971" version="1" comment="net-snmp-devel is &lt;5.7.2.1-3.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030791"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144972" version="1" comment="newt-devel is &lt;0.52.16-1.83" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144973" version="1" comment="newt-static is &lt;0.52.16-1.83" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033447"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144974" version="1" comment="nut-cgi is &lt;2.7.1-4.84" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049925"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144975" version="1" comment="nut-devel is &lt;2.7.1-4.84" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034981"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049925"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144976" version="1" comment="openexr-devel is &lt;2.1.0-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040996"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049856"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144977" version="1" comment="openslp-devel is &lt;2.0.0-2.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144978" version="1" comment="osc is &lt;0.148.1-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034837"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050805"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144979" version="1" comment="pam-devel is &lt;1.1.8-11.57" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032518"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050139"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144980" version="1" comment="pango-devel is &lt;1.36.3-4.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033190"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144981" version="1" comment="perl-Tk-devel is &lt;804.031-3.82" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041267"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144982" version="1" comment="php5-devel is &lt;5.5.14-4.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031659"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050806"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144983" version="1" comment="polkit-devel is &lt;0.112-2.189" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034516"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050106"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144984" version="1" comment="postgresql93-devel is &lt;9.3.5-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038471"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050086"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144985" version="1" comment="ppp-devel is &lt;2.4.7-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038134"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049959"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144986" version="1" comment="python3-devel is &lt;3.4.1-2.38" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036919"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050112"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144987" version="1" comment="quagga-devel is &lt;0.99.22.1-3.128" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050433"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144988" version="1" comment="rhythmbox-devel is &lt;3.0.2-1.92" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050155"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144989" version="1" comment="ruby-devel is &lt;2.1-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031427"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049977"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144990" version="1" comment="ruby2.1-rubygem-bundler is &lt;1.7.3-1.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041268"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144991" version="1" comment="spice-gtk-devel is &lt;0.25-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037401"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050122"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144992" version="1" comment="typelib-1_0-SpiceClientGtk-2_0 is &lt;0.25-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037404"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050122"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144993" version="1" comment="sudo-devel is &lt;1.8.10p3-1.62" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035732"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050162"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144994" version="1" comment="systemtap-sdt-devel is &lt;2.5-1.55" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033715"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050437"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144995" version="1" comment="udisks2-devel is &lt;2.1.3-1.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037864"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049924"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144996" version="1" comment="unixODBC-devel is &lt;2.3.1-4.95" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050169"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144997" version="1" comment="vte2-devel is &lt;0.28.2-17.83" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037180"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144998" version="1" comment="wireshark-devel is &lt;1.10.9-1.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031520"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050174"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144999" version="1" comment="xalan-j2-demo is &lt;2.7.0-264.133" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037988"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145000" version="1" comment="xalan-j2-manual is &lt;2.7.0-264.133" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037990"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145001" version="1" comment="xen-devel is &lt;4.4.1_06-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050176"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145002" version="1" comment="xfig is &lt;3.2.5c-2.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041269"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145003" version="1" comment="xorg-x11-devel is &lt;7.6-45.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031330"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145004" version="1" comment="xorg-x11-server-sdk is &lt;7.6_1.15.2-12.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050181"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145005" version="1" comment="yast2-core-devel is &lt;3.1.11-1.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030807"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050183"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145006" version="1" comment="yast2-devel-doc is &lt;3.1.108-1.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041029"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050182"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109226" version="1" comment="DirectFB-devel is &lt;1.7.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038664"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044963"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109232" version="1" comment="lib++dfb-devel is &lt;1.7.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038672"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044963"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118658" version="1" comment="sle-sdk-release is ==12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032762"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046486"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102630" version="1" comment="ImageMagick-devel is &lt;6.8.8.1-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030421"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102636" version="1" comment="libMagick++-devel is &lt;6.8.8.1-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031645"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102641" version="1" comment="perl-PerlMagick is &lt;6.8.8.1-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030834"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116013" version="1" comment="MozillaFirefox-devel is &lt;38.4.0esr-51.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034520"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045901"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145007" version="1" comment="aaa_base-malloccheck is &lt;13.2+git20140911.61c1681-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037562"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149932" version="1" comment="accountsservice-devel is &lt;0.6.35-3.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037056"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050185"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145013" version="1" comment="apache2-devel is &lt;2.4.16-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030665"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050442"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111368" version="1" comment="augeas-devel is &lt;1.2.0-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038076"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145014" version="1" comment="bind-devel is &lt;9.9.6P1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145015" version="1" comment="binutils-devel is &lt;2.25.0-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038395"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050187"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145016" version="1" comment="binutils-gold is &lt;2.25.0-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038397"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050187"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145017" version="1" comment="cross-ppc-binutils is &lt;2.25.0-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050187"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145018" version="1" comment="cross-spu-binutils is &lt;2.25.0-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038413"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050187"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145019" version="1" comment="cifs-utils-devel is &lt;6.4-6.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041251"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050188"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145020" version="1" comment="ctdb-devel is &lt;2.5.5-1.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050809"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110318" version="1" comment="cups-devel is &lt;1.7.5-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030426"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045101"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107562" version="1" comment="dbus-1-devel is &lt;1.8.16-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044679"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107560" version="1" comment="dbus-1-devel-doc is &lt;1.8.16-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044679"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145021" version="1" comment="dhcp-devel is &lt;4.3.3-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030727"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113257" version="1" comment="e2fsprogs-devel is &lt;1.42.11-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030787"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113258" version="1" comment="libcom_err-devel is &lt;1.42.11-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031456"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113262" version="1" comment="libext2fs-devel is &lt;1.42.11-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031460"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103558" version="1" comment="file-devel is &lt;5.19-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032764"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102677" version="1" comment="finch-devel is &lt;2.10.9-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031747"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102680" version="1" comment="libpurple-devel is &lt;2.10.9-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102685" version="1" comment="pidgin-devel is &lt;2.10.9-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031751"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102932" version="1" comment="flac-devel is &lt;1.3.0-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030773"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145022" version="1" comment="freeradius-server-devel is &lt;3.0.3-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032989"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145023" version="1" comment="freetype2-devel is &lt;2.5.5-7.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050193"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110489" version="1" comment="fuse-devel is &lt;2.9.3-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110490" version="1" comment="fuse-devel-static is &lt;2.9.3-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033602"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110493" version="1" comment="libulockmgr1 is &lt;2.9.3-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038745"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115216" version="1" comment="gcc48-ada is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039004"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115218" version="1" comment="gcc48-fortran is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115240" version="1" comment="gcc48-java is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039028"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115221" version="1" comment="gcc48-obj-c++ is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039009"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115222" version="1" comment="gcc48-objc is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039010"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115261" version="1" comment="gcc48-objc-32bit is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115223" version="1" comment="libada48 is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115237" version="1" comment="libffi48-devel is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039025"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115244" version="1" comment="libgcj48-devel is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039032"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115230" version="1" comment="libobjc4 is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115269" version="1" comment="libobjc4-32bit is &lt;4.8.5-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109547" version="1" comment="gd-devel is &lt;2.1.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145024" version="1" comment="gdm-devel is &lt;3.10.0.1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050194"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149934" version="1" comment="git is &lt;1.8.5.6-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031794"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149935" version="1" comment="git-arch is &lt;1.8.5.6-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031789"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149937" version="1" comment="git-cvs is &lt;1.8.5.6-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031791"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149938" version="1" comment="git-daemon is &lt;1.8.5.6-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034066"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149939" version="1" comment="git-email is &lt;1.8.5.6-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031792"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149940" version="1" comment="git-gui is &lt;1.8.5.6-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149941" version="1" comment="git-svn is &lt;1.8.5.6-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031793"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149942" version="1" comment="git-web is &lt;1.8.5.6-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034068"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149943" version="1" comment="gitk is &lt;1.8.5.6-11.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031795"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145037" version="1" comment="glibc-devel-static is &lt;2.19-31.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036782"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107803" version="1" comment="gnome-settings-daemon-devel is &lt;3.10.2-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038174"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044720"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145040" version="1" comment="gnome-shell-devel is &lt;3.10.4-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041254"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050197"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109843" version="1" comment="gstreamer-0_10-plugins-bad-devel is &lt;0.10.23-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106169" version="1" comment="hivex-devel is &lt;1.3.10-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113207" version="1" comment="java-1_7_1-ibm-devel is &lt;1.7.1_sr3.10-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038262"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045499"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145043" version="1" comment="java-1_8_0-ibm-devel is &lt;1.8.0_sr1.10-2.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039523"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050447"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145392" version="1" comment="kernel-docs is &lt;3.12.49-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032101"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145393" version="1" comment="kernel-obs-build is &lt;3.12.49-11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038297"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115944" version="1" comment="krb5-devel is &lt;1.12.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031478"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145046" version="1" comment="libQt5Bootstrap-devel-static is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038882"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145047" version="1" comment="libQt5Concurrent-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038884"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145048" version="1" comment="libQt5Concurrent5 is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038886"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145049" version="1" comment="libQt5Core-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145050" version="1" comment="libQt5Core-private-headers-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038889"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145051" version="1" comment="libQt5DBus-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038893"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145052" version="1" comment="libQt5DBus-private-headers-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038894"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145053" version="1" comment="libQt5Gui-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038898"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145054" version="1" comment="libQt5Gui-private-headers-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038899"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145055" version="1" comment="libQt5Network-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038901"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145056" version="1" comment="libQt5Network-private-headers-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038902"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145057" version="1" comment="libQt5Network5 is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145058" version="1" comment="libQt5OpenGL-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038906"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145059" version="1" comment="libQt5OpenGL-private-headers-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038907"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145060" version="1" comment="libQt5OpenGL5 is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038909"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145061" version="1" comment="libQt5OpenGLExtensions-devel-static is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038911"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145062" version="1" comment="libQt5PlatformSupport-devel-static is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038913"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145063" version="1" comment="libQt5PlatformSupport-private-headers-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145064" version="1" comment="libQt5PrintSupport-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145065" version="1" comment="libQt5PrintSupport-private-headers-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145066" version="1" comment="libQt5PrintSupport5 is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038919"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145067" version="1" comment="libQt5Sql-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038921"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145068" version="1" comment="libQt5Sql-private-headers-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145069" version="1" comment="libQt5Sql5 is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037610"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145070" version="1" comment="libQt5Sql5-mysql is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145071" version="1" comment="libQt5Sql5-postgresql is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145072" version="1" comment="libQt5Sql5-sqlite is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038928"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145073" version="1" comment="libQt5Sql5-unixODBC is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145074" version="1" comment="libQt5Test-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145075" version="1" comment="libQt5Test-private-headers-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145076" version="1" comment="libQt5Test5 is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145077" version="1" comment="libQt5Widgets-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145078" version="1" comment="libQt5Widgets-private-headers-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038936"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145079" version="1" comment="libQt5Xml-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038938"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145080" version="1" comment="libQt5Xml5 is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038940"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145081" version="1" comment="libqt5-qtbase-common-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038941"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145082" version="1" comment="libqt5-qtbase-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037617"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145083" version="1" comment="libqt5-qtbase-doc is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038942"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145084" version="1" comment="libqt5-qtbase-private-headers-devel is &lt;5.3.2-1.81" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037618"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050203"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108652" version="1" comment="libXfont-devel is &lt;1.4.7-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037586"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044832"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145085" version="1" comment="libXi-devel is &lt;1.7.4-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049865"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108422" version="1" comment="libarchive-devel is &lt;3.1.2-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032780"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106095" version="1" comment="libasm-devel is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038056"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106098" version="1" comment="libdw-devel is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106101" version="1" comment="libebl-devel is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038062"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106104" version="1" comment="libelf-devel is &lt;0.158-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038065"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145086" version="1" comment="libblkid-devel is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145087" version="1" comment="libmount-devel is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038352"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145088" version="1" comment="libsmartcols-devel is &lt;2.25-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145090" version="1" comment="libcgroup-devel is &lt;0.41.rc1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034328"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049881"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145091" version="1" comment="libcolord-devel is &lt;1.1.7-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036641"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145092" version="1" comment="typelib-1_0-ColorHug-1_0 is &lt;1.1.7-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145093" version="1" comment="typelib-1_0-Colord-1_0 is &lt;1.1.7-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110170" version="1" comment="libcurl-devel is &lt;7.37.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045078"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145094" version="1" comment="libdcerpc-atsvc-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037442"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145095" version="1" comment="libdcerpc-atsvc0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145096" version="1" comment="libdcerpc-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037447"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145097" version="1" comment="libdcerpc-samr-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145098" version="1" comment="libdcerpc-samr0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037450"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145099" version="1" comment="libgensec-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145100" version="1" comment="libndr-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037456"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145101" version="1" comment="libndr-krb5pac-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037457"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145102" version="1" comment="libndr-nbt-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037460"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145103" version="1" comment="libndr-standard-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145104" version="1" comment="libnetapi-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032931"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145105" version="1" comment="libregistry-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145106" version="1" comment="libsamba-credentials-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145107" version="1" comment="libsamba-hostconfig-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037478"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145108" version="1" comment="libsamba-passdb-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039541"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145109" version="1" comment="libsamba-policy-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037481"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145110" version="1" comment="libsamba-policy0 is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037483"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145111" version="1" comment="libsamba-util-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037484"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145112" version="1" comment="libsamdb-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037487"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145113" version="1" comment="libsmbclient-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030441"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145114" version="1" comment="libsmbclient-raw-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037490"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145115" version="1" comment="libsmbconf-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037493"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145116" version="1" comment="libsmbldap-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037496"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145117" version="1" comment="libtevent-util-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037499"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145118" version="1" comment="libwbclient-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032945"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145119" version="1" comment="samba-core-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037502"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145120" version="1" comment="samba-test-devel is &lt;4.2.4-4.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114241" version="1" comment="libgcrypt-devel is &lt;1.6.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045634"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114254" version="1" comment="libgnutls-devel is &lt;3.2.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033052"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114256" version="1" comment="libgnutls-openssl-devel is &lt;3.2.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035958"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114260" version="1" comment="libgnutlsxx-devel is &lt;3.2.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114261" version="1" comment="libgnutlsxx28 is &lt;3.2.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035966"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145123" version="1" comment="libgudev-1_0-devel is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037377"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145124" version="1" comment="libudev-devel is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033169"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145125" version="1" comment="systemd-devel is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145126" version="1" comment="typelib-1_0-GUdev-1_0 is &lt;210-83.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037381"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145127" version="1" comment="libguestfs-devel is &lt;1.26.10-4.27" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050445"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145128" version="1" comment="ocaml-libguestfs-devel is &lt;1.26.10-4.27" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041262"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050445"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145129" version="1" comment="libgypsy-devel is &lt;0.9-6.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037105"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049835"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107569" version="1" comment="libicu-devel is &lt;52.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030778"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044680"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145130" version="1" comment="libipa_hbac-devel is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036550"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145131" version="1" comment="libsss_idmap-devel is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036553"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145132" version="1" comment="libsss_nss_idmap-devel is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145133" version="1" comment="libsss_nss_idmap0 is &lt;1.11.5.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038189"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106109" version="1" comment="libjasper-devel is &lt;1.900.1-170.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108622" version="1" comment="libwebkitgtk-devel is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038619"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108633" version="1" comment="libwebkitgtk3-devel is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038630"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108624" version="1" comment="typelib-1_0-JavaScriptCore-1_0 is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108625" version="1" comment="typelib-1_0-WebKit-1_0 is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105090" version="1" comment="libjpeg62-devel is &lt;62.1.0-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037158"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044370"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105084" version="1" comment="libjpeg8-devel is &lt;8.0.2-30.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038281"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044369"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105093" version="1" comment="libksba-devel is &lt;1.3.0-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038295"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044372"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107708" version="1" comment="libmspack-devel is &lt;0.4-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044713"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145144" version="1" comment="libmysqlclient-devel is &lt;10.0.21-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031261"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145145" version="1" comment="libmysqld-devel is &lt;10.0.21-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033734"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145146" version="1" comment="libmysqld18 is &lt;10.0.21-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035441"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145147" version="1" comment="libopenssl-devel is &lt;1.0.1i-34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050213"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145148" version="1" comment="libpacemaker-devel is &lt;1.1.13-10.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040866"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145149" version="1" comment="pacemaker-cts is &lt;1.1.13-10.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149944" version="1" comment="libpcp-devel is &lt;3.6.10-4.124" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036388"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050801"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105440" version="1" comment="libpng16-compat-devel is &lt;1.6.8-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037595"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044433"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105442" version="1" comment="libpng16-devel is &lt;1.6.8-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044433"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113432" version="1" comment="libqt4-devel is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113420" version="1" comment="libqt4-devel-doc is &lt;4.8.6-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031502"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113421" version="1" comment="libqt4-devel-doc-data is &lt;4.8.6-4.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034706"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113433" version="1" comment="libqt4-linguist is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113434" version="1" comment="libqt4-private-headers-devel is &lt;4.8.6-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105599" version="1" comment="libsndfile-devel is &lt;1.0.25-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031882"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044452"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145169" version="1" comment="libspice-server-devel is &lt;0.12.5-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050217"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114955" version="1" comment="libssh-devel is &lt;0.6.3-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035365"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045734"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114956" version="1" comment="libssh-devel-doc is &lt;0.6.3-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035366"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045734"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108427" version="1" comment="libssh2-devel is &lt;1.4.3-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038582"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113993" version="1" comment="libsvn_auth_gnome_keyring-1-0 is &lt;1.8.10-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113994" version="1" comment="libsvn_auth_kwallet-1-0 is &lt;1.8.10-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113995" version="1" comment="subversion is &lt;1.8.10-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113996" version="1" comment="subversion-bash-completion is &lt;1.8.10-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035840"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113997" version="1" comment="subversion-devel is &lt;1.8.10-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031998"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113998" version="1" comment="subversion-perl is &lt;1.8.10-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033243"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113999" version="1" comment="subversion-python is &lt;1.8.10-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114001" version="1" comment="subversion-server is &lt;1.8.10-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114002" version="1" comment="subversion-tools is &lt;1.8.10-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032880"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109695" version="1" comment="libtasn1-devel is &lt;3.7-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038047"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114232" version="1" comment="libtidy-0_99-0 is &lt;1.0.20100204cvs-25.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038750"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045632"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114233" version="1" comment="libtidy-0_99-0-devel is &lt;1.0.20100204cvs-25.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038751"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045632"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114234" version="1" comment="tidy is &lt;1.0.20100204cvs-25.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045632"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114058" version="1" comment="libtiff-devel is &lt;4.0.4-12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031676"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045603"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115563" version="1" comment="libvdpau-devel is &lt;0.8-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038957"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145170" version="1" comment="libvirt-devel is &lt;1.2.18.1-4.22" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031848"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114122" version="1" comment="libwmf-devel is &lt;0.2.8.4-242.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031911"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114123" version="1" comment="libwmf-gnome is &lt;0.2.8.4-242.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031912"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108094" version="1" comment="libxerces-c-devel is &lt;3.1.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038594"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103734" version="1" comment="libxml2-devel is &lt;2.9.1-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145172" version="1" comment="libyaml-devel is &lt;0.1.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145173" version="1" comment="libzip-devel is &lt;0.11.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034534"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050219"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114238" version="1" comment="zeromq-devel is &lt;4.0.4-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038178"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045633"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109222" version="1" comment="mercurial is &lt;2.8.2-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032900"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044962"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116017" version="1" comment="mozilla-nspr-devel is &lt;4.10.10-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116031" version="1" comment="mozilla-nss-devel is &lt;3.19.2.1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105817" version="1" comment="mpfr-devel is &lt;3.1.2-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038433"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044491"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145174" version="1" comment="net-snmp-devel is &lt;5.7.3-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030791"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049915"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145175" version="1" comment="openldap2-back-perl is &lt;2.4.41-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030813"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145176" version="1" comment="openslp-devel is &lt;2.0.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050222"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145177" version="1" comment="osc is &lt;0.152.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034837"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050817"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145178" version="1" comment="pam-devel is &lt;1.1.8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032518"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049947"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145180" version="1" comment="php5-devel is &lt;5.5.14-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031659"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050818"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115374" version="1" comment="polkit-devel is &lt;0.113-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034516"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145181" version="1" comment="postgresql94-devel is &lt;9.4.5-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039798"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050207"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145182" version="1" comment="python3-devel is &lt;3.4.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036919"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105407" version="1" comment="rpm-devel is &lt;4.11.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044428"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105410" version="1" comment="ruby2.1-devel is &lt;2.1.2-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044429"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145184" version="1" comment="spice-gtk-devel is &lt;0.29-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037401"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050216"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145185" version="1" comment="typelib-1_0-SpiceClientGtk-2_0 is &lt;0.29-1.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037404"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050216"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145186" version="1" comment="systemtap-sdt-devel is &lt;2.5-4.44" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033715"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114952" version="1" comment="wireshark-devel is &lt;1.12.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031520"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045732"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145189" version="1" comment="xen-devel is &lt;4.5.1_12-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145191" version="1" comment="xorg-x11-server-sdk is &lt;7.6_1.15.2-36.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050238"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145192" version="1" comment="yast2-core-devel is &lt;3.1.18-1.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030807"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050240"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145193" version="1" comment="yast2-devel-doc is &lt;3.1.155-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041029"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050239"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145194" version="1" comment="DirectFB-devel is &lt;1.7.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038664"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145195" version="1" comment="lib++dfb-devel is &lt;1.7.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038672"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135224" version="1" comment="sle-sdk-release is ==12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032762"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047590"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131744" version="1" comment="ImageMagick-devel is &lt;6.8.8.1-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030421"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131745" version="1" comment="libMagick++-devel is &lt;6.8.8.1-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031645"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131746" version="1" comment="perl-PerlMagick is &lt;6.8.8.1-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030834"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119325" version="1" comment="LibVNCServer-devel is &lt;0.9.9-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038721"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046585"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131809" version="1" comment="MozillaFirefox-devel is &lt;45.4.0esr-81.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034520"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047985"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145196" version="1" comment="NetworkManager-devel is &lt;1.0.12-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145197" version="1" comment="aaa_base-malloccheck is &lt;13.2+git20140911.61c1681-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037562"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145198" version="1" comment="accountsservice-devel is &lt;0.6.42-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037056"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145009" version="1" comment="alsa-devel is &lt;1.0.27.2-11.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040937"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049769"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145010" version="1" comment="ant-jmf is &lt;1.9.4-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049771"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145011" version="1" comment="ant-scripts is &lt;1.9.4-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035013"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049771"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145012" version="1" comment="ant-swing is &lt;1.9.4-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035014"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049771"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145199" version="1" comment="apache2-devel is &lt;2.4.23-14.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030665"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145200" version="1" comment="augeas-devel is &lt;1.2.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038076"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049778"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145201" version="1" comment="avahi-compat-howl-devel is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031834"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145202" version="1" comment="avahi-compat-mDNSResponder-devel is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031838"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145203" version="1" comment="libavahi-devel is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033071"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145204" version="1" comment="libhowl0 is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033082"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145205" version="1" comment="python-avahi is &lt;0.6.32-30.36" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049782"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145206" version="1" comment="bash-devel is &lt;4.3-78.39" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037112"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049783"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145207" version="1" comment="readline-devel is &lt;6.3-78.39" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032536"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049784"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131806" version="1" comment="bind-devel is &lt;9.9.9P1-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145208" version="1" comment="binutils-devel is &lt;2.26.1-9.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038395"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145209" version="1" comment="binutils-gold is &lt;2.26.1-9.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038397"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145210" version="1" comment="cross-ppc-binutils is &lt;2.26.1-9.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145211" version="1" comment="cross-spu-binutils is &lt;2.26.1-9.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038413"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124479" version="1" comment="bsh2 is &lt;2.0.0.b5-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040278"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124480" version="1" comment="bsh2-classgen is &lt;2.0.0.b5-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040279"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124481" version="1" comment="bsh2-javadoc is &lt;2.0.0.b5-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040280"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047206"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145212" version="1" comment="cifs-utils-devel is &lt;6.5-8.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041251"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049788"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131751" version="1" comment="cracklib-devel is &lt;2.9.0-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040703"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047936"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145213" version="1" comment="cups-ddk is &lt;1.7.5-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049797"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145214" version="1" comment="cups-devel is &lt;1.7.5-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030426"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049797"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145215" version="1" comment="dbus-1-devel is &lt;1.8.16-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049802"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145216" version="1" comment="dbus-1-devel-doc is &lt;1.8.16-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049802"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130041" version="1" comment="dhcp-devel is &lt;4.3.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030727"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047838"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145217" version="1" comment="eog-devel is &lt;3.20.4-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049809"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145218" version="1" comment="evince-devel is &lt;3.20.1-5.66" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034040"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145219" version="1" comment="finch-devel is &lt;2.11.0-12.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031747"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145220" version="1" comment="libpurple-devel is &lt;2.11.0-12.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145221" version="1" comment="pidgin-devel is &lt;2.11.0-12.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031751"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145222" version="1" comment="flac-devel is &lt;1.3.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030773"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049812"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131797" version="1" comment="libQtWebKit-devel is &lt;4.8.6+2.3.3-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047977"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131798" version="1" comment="libbonobo-devel is &lt;2.32.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040706"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131799" version="1" comment="libnetpbm-devel is &lt;10.66.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031289"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047979"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130943" version="1" comment="mdbtools is &lt;0.7-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040613"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047940"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131801" version="1" comment="sgmltool is &lt;1.0.9-1075.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040707"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048044"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145223" version="1" comment="fontconfig-devel is &lt;2.11.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032250"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145224" version="1" comment="freerdp-devel is &lt;2.0.0~git.1463131968.4e66df7-11.69" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037993"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145225" version="1" comment="freetype2-devel is &lt;2.6.3-7.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145226" version="1" comment="gcc48-ada is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039004"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145227" version="1" comment="gcc48-fortran is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145228" version="1" comment="gcc48-java is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039028"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145229" version="1" comment="gcc48-obj-c++ is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039009"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145230" version="1" comment="gcc48-objc is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039010"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145231" version="1" comment="gcc48-objc-32bit is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145232" version="1" comment="libada48 is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039011"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145233" version="1" comment="libffi48-devel is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039025"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145234" version="1" comment="libgcj48-devel is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039032"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145235" version="1" comment="libobjc4 is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145236" version="1" comment="libobjc4-32bit is &lt;4.8.5-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131765" version="1" comment="gd-devel is &lt;2.1.0-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145237" version="1" comment="gdk-pixbuf-devel is &lt;2.34.0-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030590"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049818"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145238" version="1" comment="gdm-devel is &lt;3.10.0.1-52.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125327" version="1" comment="ghostscript-devel is &lt;9.15-6.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032847"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047302"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126713" version="1" comment="giflib-devel is &lt;5.0.5-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032175"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047430"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145239" version="1" comment="gimp-devel is &lt;2.8.18-4.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030654"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050246"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124818" version="1" comment="git is &lt;1.8.5.6-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031794"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124819" version="1" comment="git-arch is &lt;1.8.5.6-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031789"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124821" version="1" comment="git-cvs is &lt;1.8.5.6-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031791"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124822" version="1" comment="git-daemon is &lt;1.8.5.6-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034066"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124823" version="1" comment="git-email is &lt;1.8.5.6-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031792"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124824" version="1" comment="git-gui is &lt;1.8.5.6-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124825" version="1" comment="git-svn is &lt;1.8.5.6-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031793"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124826" version="1" comment="git-web is &lt;1.8.5.6-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034068"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124827" version="1" comment="gitk is &lt;1.8.5.6-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031795"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145240" version="1" comment="glib2-devel is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031274"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145241" version="1" comment="glib2-devel-static is &lt;2.48.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041253"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145242" version="1" comment="glibc-devel-static is &lt;2.22-49.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036782"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145243" version="1" comment="gnome-online-accounts-devel is &lt;3.20.4-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035608"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049824"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145244" version="1" comment="gnome-settings-daemon-devel is &lt;3.20.1-40.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038174"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049825"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145245" version="1" comment="gnome-shell-devel is &lt;3.20.4-70.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041254"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124736" version="1" comment="graphite2-devel is &lt;1.3.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039085"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145246" version="1" comment="gstreamer-0_10-plugins-bad-devel is &lt;0.10.23-20.51" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145247" version="1" comment="gtk2-devel is &lt;2.24.31-7.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030533"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049830"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145041" version="1" comment="hplip-devel is &lt;3.14.6-3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041255"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049838"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145042" version="1" comment="lzo-devel is &lt;2.08-1.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038034"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049896"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131660" version="1" comment="java-1_7_1-ibm-devel is &lt;1.7.1_sr3.50-28.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038262"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128389" version="1" comment="java-1_8_0-ibm-devel is &lt;1.8.0_sr3.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039523"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047627"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145248" version="1" comment="kernel-docs is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032101"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145249" version="1" comment="kernel-obs-build is &lt;4.4.21-69.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038297"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145250" version="1" comment="krb5-devel is &lt;1.12.5-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031478"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126434" version="1" comment="lhasa-devel is &lt;0.2.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040393"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047403"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145251" version="1" comment="libQt5Bootstrap-devel-static is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038882"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145252" version="1" comment="libQt5Concurrent-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038884"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145253" version="1" comment="libQt5Core-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145254" version="1" comment="libQt5Core-private-headers-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038889"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145255" version="1" comment="libQt5DBus-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038893"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145256" version="1" comment="libQt5DBus-private-headers-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038894"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145257" version="1" comment="libQt5Gui-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038898"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145258" version="1" comment="libQt5Gui-private-headers-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038899"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145259" version="1" comment="libQt5Network-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038901"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145260" version="1" comment="libQt5Network-private-headers-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038902"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145261" version="1" comment="libQt5OpenGL-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038906"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145262" version="1" comment="libQt5OpenGL-private-headers-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038907"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145263" version="1" comment="libQt5OpenGLExtensions-devel-static is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038911"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145264" version="1" comment="libQt5PlatformHeaders-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039614"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145265" version="1" comment="libQt5PlatformSupport-devel-static is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038913"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145266" version="1" comment="libQt5PlatformSupport-private-headers-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145267" version="1" comment="libQt5PrintSupport-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145268" version="1" comment="libQt5PrintSupport-private-headers-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145269" version="1" comment="libQt5Sql-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038921"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145270" version="1" comment="libQt5Sql-private-headers-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145271" version="1" comment="libQt5Test-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145272" version="1" comment="libQt5Test-private-headers-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145273" version="1" comment="libQt5Widgets-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145274" version="1" comment="libQt5Widgets-private-headers-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038936"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145275" version="1" comment="libQt5Xml-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038938"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145276" version="1" comment="libqt5-qtbase-common-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038941"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145277" version="1" comment="libqt5-qtbase-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037617"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145278" version="1" comment="libqt5-qtbase-private-headers-devel is &lt;5.6.1-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037618"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145279" version="1" comment="libQt5WebKit-private-headers-devel is &lt;5.6.1-9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049858"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145280" version="1" comment="libQt5WebKit5-devel is &lt;5.6.1-9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049858"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145281" version="1" comment="libQt5WebKitWidgets-devel is &lt;5.6.1-9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049858"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145282" version="1" comment="libQt5WebKitWidgets-private-headers-devel is &lt;5.6.1-9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049858"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145283" version="1" comment="libXfont-devel is &lt;1.5.1-10.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037586"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049864"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145284" version="1" comment="libXrandr-devel is &lt;1.5.0-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036159"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049868"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130725" version="1" comment="libarchive-devel is &lt;3.1.2-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032780"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145285" version="1" comment="libblkid-devel is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145286" version="1" comment="libmount-devel is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038352"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145287" version="1" comment="libsmartcols-devel is &lt;2.28-40.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145288" version="1" comment="libbz2-devel is &lt;1.0.6-29.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031658"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049786"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145289" version="1" comment="libcolord-devel is &lt;1.3.3-10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036641"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145290" version="1" comment="libcolord-gtk-devel is &lt;0.1.26-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041258"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049790"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145291" version="1" comment="typelib-1_0-ColorHug-1_0 is &lt;1.3.3-10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145292" version="1" comment="typelib-1_0-Colord-1_0 is &lt;1.3.3-10.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145293" version="1" comment="typelib-1_0-ColordGtk-1_0 is &lt;0.1.26-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041261"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049790"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131794" version="1" comment="libcurl-devel is &lt;7.37.0-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047973"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128469" version="1" comment="libexpat-devel is &lt;2.1.0-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145121" version="1" comment="libgadu-devel is &lt;1.11.4-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031828"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050811"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145122" version="1" comment="libgadu3 is &lt;1.11.4-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037949"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050811"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131795" version="1" comment="libgcrypt-devel is &lt;1.6.1-16.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047974"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145294" version="1" comment="libgnomesu-devel is &lt;2.0.0-353.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145295" version="1" comment="libguestfs-devel is &lt;1.32.4-14.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049831"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145296" version="1" comment="ocaml-libguestfs-devel is &lt;1.32.4-14.18" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041262"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049831"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131747" version="1" comment="libidn-devel is &lt;1.28-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038783"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145297" version="1" comment="libimobiledevice-devel is &lt;1.2.0-7.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145298" version="1" comment="libipa_hbac-devel is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036550"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145299" version="1" comment="libsss_idmap-devel is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036553"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145300" version="1" comment="libsss_nss_idmap-devel is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145301" version="1" comment="libsss_nss_idmap0 is &lt;1.13.4-18.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038189"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145302" version="1" comment="libwebkitgtk-devel is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038619"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145303" version="1" comment="libwebkitgtk3-devel is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038630"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145304" version="1" comment="typelib-1_0-JavaScriptCore-1_0 is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145305" version="1" comment="typelib-1_0-WebKit-1_0 is &lt;2.4.11-23.20" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145143" version="1" comment="libjbig-devel is &lt;2.0-12.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049845"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128470" version="1" comment="libksba-devel is &lt;1.3.0-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038295"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145306" version="1" comment="libldb-devel is &lt;1.1.26-10.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033912"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049854"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145307" version="1" comment="pyldb is &lt;1.1.26-10.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049854"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145308" version="1" comment="pyldb-devel is &lt;1.1.26-10.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038085"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049854"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118766" version="1" comment="libmspack-devel is &lt;0.4-14.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046513"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131803" version="1" comment="libmysqlclient-devel is &lt;10.0.27-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031261"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131804" version="1" comment="libmysqld-devel is &lt;10.0.27-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033734"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131805" version="1" comment="libmysqld18 is &lt;10.0.27-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035441"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123021" version="1" comment="libnettle-devel is &lt;2.7.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039818"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124482" version="1" comment="libotr-devel is &lt;4.0.0-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047205"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145309" version="1" comment="libpacemaker-devel is &lt;1.1.15-19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040866"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145150" version="1" comment="libpcp-devel is &lt;3.6.10-4.97" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036388"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145151" version="1" comment="libpcp3 is &lt;3.6.10-4.97" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035045"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145152" version="1" comment="pcp is &lt;3.6.10-4.97" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035050"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145153" version="1" comment="pcp-import-iostat2pcp is &lt;3.6.10-4.97" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145154" version="1" comment="pcp-import-mrtg2pcp is &lt;3.6.10-4.97" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035047"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145155" version="1" comment="pcp-import-sar2pcp is &lt;3.6.10-4.97" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145156" version="1" comment="pcp-import-sheet2pcp is &lt;3.6.10-4.97" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145157" version="1" comment="perl-PCP-LogImport is &lt;3.6.10-4.97" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145158" version="1" comment="perl-PCP-LogSummary is &lt;3.6.10-4.97" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035052"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145159" version="1" comment="perl-PCP-MMV is &lt;3.6.10-4.97" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035053"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145160" version="1" comment="perl-PCP-PMDA is &lt;3.6.10-4.97" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035054"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119234" version="1" comment="libpng12-compat-devel is &lt;1.2.50-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046568"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119235" version="1" comment="libpng12-devel is &lt;1.2.50-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034636"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046568"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119236" version="1" comment="libpng16-compat-devel is &lt;1.6.8-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037595"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046569"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119237" version="1" comment="libpng16-devel is &lt;1.6.8-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046569"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145311" version="1" comment="libpoppler-cpp0 is &lt;0.43.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037286"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049907"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145312" version="1" comment="libpoppler-devel is &lt;0.43.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032901"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049907"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145313" version="1" comment="libpoppler-glib-devel is &lt;0.43.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032903"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049907"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145314" version="1" comment="libpoppler-qt4-devel is &lt;0.43.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032908"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049907"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145315" version="1" comment="typelib-1_0-Poppler-0_18 is &lt;0.43.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037294"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049907"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145316" version="1" comment="libproxy-devel is &lt;0.4.13-16.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035023"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049908"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125285" version="1" comment="libqt4-devel is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125286" version="1" comment="libqt4-devel-doc is &lt;4.8.6-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031502"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047294"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125287" version="1" comment="libqt4-devel-doc-data is &lt;4.8.6-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034706"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047294"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125288" version="1" comment="libqt4-linguist is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125289" version="1" comment="libqt4-private-headers-devel is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145165" version="1" comment="libraw-devel is &lt;0.15.4-3.89" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036606"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145166" version="1" comment="libraw-devel-static is &lt;0.15.4-3.89" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036607"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145167" version="1" comment="libraw9 is &lt;0.15.4-3.89" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038719"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130949" version="1" comment="libreoffice-sdk is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034839"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145317" version="1" comment="librsvg-devel is &lt;2.40.15-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034664"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145318" version="1" comment="typelib-1_0-Rsvg-2_0 is &lt;2.40.15-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037508"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145168" version="1" comment="libserf-1-1 is &lt;1.3.7-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050816"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145319" version="1" comment="libsmbclient-devel is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030441"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145320" version="1" comment="libwbclient-devel is &lt;4.4.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032945"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119287" version="1" comment="libsndfile-devel is &lt;1.0.25-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031882"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145321" version="1" comment="libsoup-devel is &lt;2.54.1-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030515"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049916"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145322" version="1" comment="libspice-server-devel is &lt;0.12.7-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049918"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123873" version="1" comment="libssh-devel is &lt;0.6.3-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035365"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047163"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123874" version="1" comment="libssh-devel-doc is &lt;0.6.3-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035366"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047163"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145323" version="1" comment="libssh2-devel is &lt;1.4.3-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038582"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049920"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145324" version="1" comment="libsvn_auth_gnome_keyring-1-0 is &lt;1.8.10-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145325" version="1" comment="libsvn_auth_kwallet-1-0 is &lt;1.8.10-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145326" version="1" comment="subversion is &lt;1.8.10-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145327" version="1" comment="subversion-bash-completion is &lt;1.8.10-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035840"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145328" version="1" comment="subversion-devel is &lt;1.8.10-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031998"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145329" version="1" comment="subversion-perl is &lt;1.8.10-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033243"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145330" version="1" comment="subversion-python is &lt;1.8.10-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145331" version="1" comment="subversion-server is &lt;1.8.10-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145332" version="1" comment="subversion-tools is &lt;1.8.10-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032880"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128912" version="1" comment="libtasn1-devel is &lt;3.7-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038047"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047689"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131760" version="1" comment="libtcnative-1-0-devel is &lt;1.1.32-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036682"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048042"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131764" version="1" comment="libtiff-devel is &lt;4.0.6-26.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031676"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145333" version="1" comment="libudev-devel is &lt;228-117.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033169"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145334" version="1" comment="systemd-devel is &lt;228-117.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145335" version="1" comment="libusbmuxd-devel is &lt;1.0.10-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034830"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049926"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145336" version="1" comment="libvdpau-devel is &lt;1.1.1-6.73" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038957"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049927"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145337" version="1" comment="libvirt-devel is &lt;2.0.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031848"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049928"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145171" version="1" comment="libvorbis-devel is &lt;1.3.3-8.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030755"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145135" version="1" comment="libwebkit2gtk-3_0-25 is &lt;2.2.7-3.26" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038627"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050812"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114125" version="1" comment="libwmf-tools is &lt;0.2.8.4-242.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038765"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145338" version="1" comment="libxcb-composite0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145339" version="1" comment="libxcb-damage0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145340" version="1" comment="libxcb-devel is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035989"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145341" version="1" comment="libxcb-devel-doc is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145342" version="1" comment="libxcb-dpms0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145343" version="1" comment="libxcb-record0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036007"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145344" version="1" comment="libxcb-res0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036015"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145345" version="1" comment="libxcb-screensaver0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036019"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145346" version="1" comment="libxcb-xevie0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036035"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145347" version="1" comment="libxcb-xprint0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145348" version="1" comment="libxcb-xtest0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145349" version="1" comment="libxcb-xvmc0 is &lt;1.10-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131754" version="1" comment="libxerces-c-devel is &lt;3.1.1-12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038594"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047961"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145350" version="1" comment="libxml2-devel is &lt;2.9.4-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145351" version="1" comment="libzip-devel is &lt;0.11.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034534"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145352" version="1" comment="zeromq-devel is &lt;4.0.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038178"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128191" version="1" comment="mercurial is &lt;2.8.2-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032900"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047602"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129305" version="1" comment="mozilla-nspr-devel is &lt;4.12-15.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047741"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129306" version="1" comment="mozilla-nss-devel is &lt;3.21.1-46.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047740"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109976" version="1" comment="mysql-connector-java is &lt;5.1.35-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038744"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045062"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145353" version="1" comment="ocaml is &lt;4.03.0-6.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145354" version="1" comment="ocaml-compiler-libs is &lt;4.03.0-6.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145355" version="1" comment="ocaml-rpm-macros is &lt;4.03.0-6.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040837"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145356" version="1" comment="ocaml-runtime is &lt;4.03.0-6.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145357" version="1" comment="openldap2-back-perl is &lt;2.4.41-18.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030813"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049893"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145358" version="1" comment="openldap2-devel is &lt;2.4.41-18.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030546"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049893"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145359" version="1" comment="openldap2-devel-static is &lt;2.4.41-18.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038762"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049893"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131800" version="1" comment="openslp-devel is &lt;2.0.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047980"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145360" version="1" comment="pango-devel is &lt;1.40.1-9.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033190"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131807" version="1" comment="php5-devel is &lt;5.5.14-73.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031659"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048019"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131811" version="1" comment="php7-devel is &lt;7.0.7-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040708"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145361" version="1" comment="polkit-devel is &lt;0.113-5.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034516"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049906"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131808" version="1" comment="postgresql94-devel is &lt;9.4.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039798"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047984"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128393" version="1" comment="quagga-devel is &lt;0.99.22.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047628"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145362" version="1" comment="rhythmbox-devel is &lt;3.4-6.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145363" version="1" comment="rpm-devel is &lt;4.11.2-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049973"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145364" version="1" comment="ruby2.1-devel is &lt;2.1.2-12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131793" version="1" comment="samba-test-devel is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145365" version="1" comment="spice-gtk-devel is &lt;0.31-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037401"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049917"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145366" version="1" comment="typelib-1_0-SpiceClientGtk-2_0 is &lt;0.31-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037404"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049917"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130778" version="1" comment="sqlite3-devel is &lt;3.8.10.2-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040585"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145367" version="1" comment="sudo-devel is &lt;1.8.10p3-6.16" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035732"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049983"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145368" version="1" comment="systemtap-sdt-devel is &lt;3.0-7.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033715"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145369" version="1" comment="unixODBC-devel is &lt;2.3.4-6.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145370" version="1" comment="vte2-devel is &lt;0.28.2-19.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037180"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049931"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145371" version="1" comment="webkit2gtk3-devel is &lt;2.12.5-1.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040319"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049892"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131810" version="1" comment="wireshark-devel is &lt;1.12.13-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031520"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047986"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145187" version="1" comment="xalan-j2-demo is &lt;2.7.0-264.38" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037988"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049998"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145188" version="1" comment="xalan-j2-manual is &lt;2.7.0-264.38" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037990"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049998"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145372" version="1" comment="xen-devel is &lt;4.7.0_12-23.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145373" version="1" comment="xfsprogs-devel is &lt;4.3.0-8.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050001"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145190" version="1" comment="xorg-x11-devel is &lt;7.6-45.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031330"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050006"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145374" version="1" comment="xorg-x11-server-sdk is &lt;7.6_1.18.3-57.34" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145375" version="1" comment="yast2-core-devel is &lt;3.1.23-6.38" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030807"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159484" version="1" comment="sle-sdk-release is ==12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032762"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052091"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159736" version="1" comment="FastCGI is &lt;2.4.0-168.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034781"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052243"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159737" version="1" comment="FastCGI-devel is &lt;2.4.0-168.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034780"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052243"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159738" version="1" comment="perl-FastCGI is &lt;2.4.0-168.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034782"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052243"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156379" version="1" comment="ImageMagick-devel is &lt;6.8.8.1-70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030421"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156380" version="1" comment="libMagick++-devel is &lt;6.8.8.1-70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031645"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156381" version="1" comment="perl-PerlMagick is &lt;6.8.8.1-70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030834"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051794"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157361" version="1" comment="MozillaFirefox-devel is &lt;52.2.0esr-108.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034520"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051954"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159739" version="1" comment="NetworkManager-devel is &lt;1.0.12-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159740" version="1" comment="aaa_base-malloccheck is &lt;13.2+git20140911.61c1681-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037562"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052092"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159741" version="1" comment="alsa-devel is &lt;1.0.27.2-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040937"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052093"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159742" version="1" comment="apache-pdfbox is &lt;1.8.12-1.29" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041797"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157606" version="1" comment="apache2-devel is &lt;2.4.23-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030665"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051978"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159743" version="1" comment="apache2-mod_perl-devel is &lt;2.0.8-11.43" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150581" version="1" comment="audiofile-devel is &lt;0.3.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051493"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159744" version="1" comment="augeas-devel is &lt;1.2.0-15.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038076"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155574" version="1" comment="bash-devel is &lt;4.3-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037112"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155575" version="1" comment="readline-devel is &lt;6.3-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032536"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051708"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157743" version="1" comment="bind-devel is &lt;9.9.9P1-62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157362" version="1" comment="cairo-devel is &lt;1.15.2-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031469"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159745" version="1" comment="crash-devel is &lt;7.1.8-3.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037907"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052100"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159746" version="1" comment="cups-ddk is &lt;1.7.5-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159747" version="1" comment="cups-devel is &lt;1.7.5-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030426"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159748" version="1" comment="dbus-1-devel is &lt;1.8.22-28.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052105"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159749" version="1" comment="dbus-1-devel-doc is &lt;1.8.22-28.19" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052104"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159750" version="1" comment="dovecot22-devel is &lt;2.2.30.2-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052107"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159751" version="1" comment="e2fsprogs-devel is &lt;1.42.11-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030787"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159752" version="1" comment="libcom_err-devel is &lt;1.42.11-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031456"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159753" version="1" comment="libext2fs-devel is &lt;1.42.11-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031460"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159754" version="1" comment="finch-devel is &lt;2.12.0-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031747"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159755" version="1" comment="libpurple-devel is &lt;2.12.0-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159756" version="1" comment="pidgin-devel is &lt;2.12.0-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031751"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159757" version="1" comment="freeradius-server-devel is &lt;3.0.14-1.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032989"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159758" version="1" comment="freetype2-devel is &lt;2.6.3-7.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052112"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136677" version="1" comment="gc-devel is &lt;7.2d-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048711"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148458" version="1" comment="gd-devel is &lt;2.1.0-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051266"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159759" version="1" comment="gdk-pixbuf-devel is &lt;2.34.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030590"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149585" version="1" comment="gegl-devel is &lt;0.2.0-14.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051401"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155982" version="1" comment="ghostscript-devel is &lt;9.15-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032847"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051747"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150808" version="1" comment="gimp-devel is &lt;2.8.18-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030654"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051505"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155662" version="1" comment="git is &lt;2.12.3-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031794"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051729"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155665" version="1" comment="git-arch is &lt;2.12.3-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031789"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051729"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155666" version="1" comment="git-cvs is &lt;2.12.3-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031791"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051729"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155667" version="1" comment="git-daemon is &lt;2.12.3-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034066"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051729"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155664" version="1" comment="git-doc is &lt;2.12.3-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051729"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155668" version="1" comment="git-email is &lt;2.12.3-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031792"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051729"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155669" version="1" comment="git-gui is &lt;2.12.3-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034067"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051729"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155670" version="1" comment="git-svn is &lt;2.12.3-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031793"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051729"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155671" version="1" comment="git-web is &lt;2.12.3-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034068"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051729"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155672" version="1" comment="gitk is &lt;2.12.3-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031795"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051729"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157042" version="1" comment="glibc-devel-static is &lt;2.22-61.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036782"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051913"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159760" version="1" comment="gnome-online-accounts-devel is &lt;3.20.5-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035608"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052136"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159761" version="1" comment="gnome-settings-daemon-devel is &lt;3.20.1-49.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038174"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159762" version="1" comment="gnome-shell-devel is &lt;3.20.4-76.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041254"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052115"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154937" version="1" comment="graphite2-devel is &lt;1.3.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039085"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051622"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147827" version="1" comment="gstreamer-0_10-plugins-bad-devel is &lt;0.10.23-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154339" version="1" comment="gstreamer-0_10-plugins-base-devel is &lt;0.10.36-17.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051534"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154340" version="1" comment="typelib-1_0-GstApp-0_10 is &lt;0.10.36-17.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041380"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051534"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154341" version="1" comment="typelib-1_0-GstInterfaces-0_10 is &lt;0.10.36-17.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041381"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051534"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150852" version="1" comment="gstreamer-devel is &lt;1.8.3-9.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051513"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150850" version="1" comment="gstreamer-plugins-bad-devel is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041151"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150851" version="1" comment="libgstinsertbin-1_0-0 is &lt;1.8.3-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041164"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154452" version="1" comment="gstreamer-plugins-base-devel is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041339"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154453" version="1" comment="typelib-1_0-GstAllocators-1_0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041364"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154454" version="1" comment="typelib-1_0-GstApp-1_0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041365"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154455" version="1" comment="typelib-1_0-GstFft-1_0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041367"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154456" version="1" comment="typelib-1_0-GstRtp-1_0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154457" version="1" comment="typelib-1_0-GstRtsp-1_0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041371"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154458" version="1" comment="typelib-1_0-GstSdp-1_0 is &lt;1.8.3-12.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148159" version="1" comment="guile-devel is &lt;2.0.9-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040812"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051212"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148160" version="1" comment="libguilereadline-v-18-18 is &lt;2.0.9-8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040815"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051212"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159763" version="1" comment="hplip-devel is &lt;3.16.11-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041255"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155703" version="1" comment="java-1_7_1-ibm-devel is &lt;1.7.1_sr4.5-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038262"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155707" version="1" comment="java-1_8_0-ibm-devel is &lt;1.8.0_sr4.5-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039523"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159764" version="1" comment="kernel-docs is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032101"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159765" version="1" comment="kernel-obs-build is &lt;4.4.73-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038297"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159766" version="1" comment="libQt5Bootstrap-devel-static is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038882"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159767" version="1" comment="libQt5Concurrent-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038884"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159768" version="1" comment="libQt5Core-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159769" version="1" comment="libQt5Core-private-headers-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038889"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159770" version="1" comment="libQt5DBus-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038893"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159771" version="1" comment="libQt5DBus-private-headers-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038894"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159772" version="1" comment="libQt5Gui-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038898"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159773" version="1" comment="libQt5Gui-private-headers-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038899"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159774" version="1" comment="libQt5Network-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038901"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159775" version="1" comment="libQt5Network-private-headers-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038902"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159776" version="1" comment="libQt5OpenGL-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038906"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159777" version="1" comment="libQt5OpenGL-private-headers-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038907"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159778" version="1" comment="libQt5OpenGLExtensions-devel-static is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038911"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159779" version="1" comment="libQt5PlatformHeaders-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039614"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159780" version="1" comment="libQt5PlatformSupport-devel-static is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038913"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159781" version="1" comment="libQt5PlatformSupport-private-headers-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159782" version="1" comment="libQt5PrintSupport-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159783" version="1" comment="libQt5PrintSupport-private-headers-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159784" version="1" comment="libQt5Sql-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038921"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159785" version="1" comment="libQt5Sql-private-headers-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159786" version="1" comment="libQt5Test-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159787" version="1" comment="libQt5Test-private-headers-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159788" version="1" comment="libQt5Widgets-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159789" version="1" comment="libQt5Widgets-private-headers-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038936"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159790" version="1" comment="libQt5Xml-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038938"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159791" version="1" comment="libqt5-qtbase-common-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038941"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159792" version="1" comment="libqt5-qtbase-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037617"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159793" version="1" comment="libqt5-qtbase-private-headers-devel is &lt;5.6.2-5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037618"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159794" version="1" comment="libQt5WebKit-private-headers-devel is &lt;5.6.2-1.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159795" version="1" comment="libQt5WebKit5-devel is &lt;5.6.2-1.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159796" version="1" comment="libQt5WebKitWidgets-devel is &lt;5.6.2-1.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159797" version="1" comment="libQt5WebKitWidgets-private-headers-devel is &lt;5.6.2-1.31" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052128"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136407" version="1" comment="libX11-devel is &lt;1.6.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036220"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135059" version="1" comment="libXfixes-devel is &lt;5.0.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036082"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136675" version="1" comment="libXi-devel is &lt;1.7.4-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048708"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148457" version="1" comment="libXpm-devel is &lt;3.5.11-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051265"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148460" version="1" comment="libXpm-tools is &lt;3.5.11-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041460"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051265"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135560" version="1" comment="libXrender-devel is &lt;0.9.8-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036097"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048550"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135079" version="1" comment="libXtst-devel is &lt;1.2.2-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036175"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048475"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135084" version="1" comment="libXv-devel is &lt;1.0.10-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036113"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048476"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135561" version="1" comment="libXvMC-devel is &lt;1.0.8-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036183"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048551"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159798" version="1" comment="libapparmor-devel is &lt;2.8.2-49.21" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052095"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135984" version="1" comment="libarchive-devel is &lt;3.1.2-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032780"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048607"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142758" version="1" comment="libass-devel is &lt;0.10.2-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041135"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050324"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159799" version="1" comment="libblkid-devel is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159800" version="1" comment="libmount-devel is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038352"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159801" version="1" comment="libsmartcols-devel is &lt;2.29.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155271" version="1" comment="libbotan-1_10-0 is &lt;1.10.9-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051669"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155272" version="1" comment="libbotan-devel is &lt;1.10.9-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041589"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051669"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146076" version="1" comment="libcares-devel is &lt;1.9.1-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040901"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159802" version="1" comment="libcgroup-devel is &lt;0.41.rc1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034328"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052132"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159803" version="1" comment="libcolord-devel is &lt;1.3.3-12.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036641"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159804" version="1" comment="typelib-1_0-ColorHug-1_0 is &lt;1.3.3-12.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159805" version="1" comment="typelib-1_0-Colord-1_0 is &lt;1.3.3-12.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154450" version="1" comment="libcurl-devel is &lt;7.37.0-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051543"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148248" version="1" comment="libexpat-devel is &lt;2.1.0-20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051231"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154940" version="1" comment="libfbembed-devel is &lt;2.5.2.26539-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035736"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051619"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157041" version="1" comment="libgcrypt-devel is &lt;1.6.1-16.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036340"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051912"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148270" version="1" comment="libgit2-24 is &lt;0.24.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051238"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145391" version="1" comment="libgme-devel is &lt;0.6.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041272"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050823"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159806" version="1" comment="libgnutls-devel is &lt;3.3.27-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033052"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159807" version="1" comment="libgnutls-openssl-devel is &lt;3.3.27-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035958"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159808" version="1" comment="libgnutlsxx-devel is &lt;3.3.27-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159809" version="1" comment="libgnutlsxx28 is &lt;3.3.27-1.10" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035966"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159810" version="1" comment="libguestfs-devel is &lt;1.32.4-19.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159811" version="1" comment="ocaml-libguestfs-devel is &lt;1.32.4-19.24" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041262"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159812" version="1" comment="libipa_hbac-devel is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036550"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159813" version="1" comment="libsss_idmap-devel is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036553"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159814" version="1" comment="libsss_nss_idmap-devel is &lt;1.13.4-33.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150816" version="1" comment="libjasper-devel is &lt;1.900.14-194.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159815" version="1" comment="libldb-devel is &lt;1.1.29-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033912"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052138"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159816" version="1" comment="python-ldb is &lt;1.1.29-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041798"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052138"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159817" version="1" comment="python-ldb-devel is &lt;1.1.29-1.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041799"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052138"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156861" version="1" comment="libmicrohttpd-devel is &lt;0.9.30-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159818" version="1" comment="libmysqlclient-devel is &lt;10.0.30-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031261"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159819" version="1" comment="libmysqld-devel is &lt;10.0.30-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033734"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159820" version="1" comment="libmysqld18 is &lt;10.0.30-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035441"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052141"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009139267" version="1" comment="libnetpbm-devel is &lt;10.66.3-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031289"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049415"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156353" version="1" comment="libnettle-devel is &lt;2.7.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039818"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148267" version="1" comment="libopus-devel is &lt;1.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148268" version="1" comment="libopus-devel-static is &lt;1.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155066" version="1" comment="libosip2-devel is &lt;3.5.0-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051643"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159821" version="1" comment="libpacemaker-devel is &lt;1.1.16-4.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040866"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052242"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143043" version="1" comment="pcre-devel is &lt;8.39-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050373"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143044" version="1" comment="pcre-devel-static is &lt;8.39-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038695"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050373"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143045" version="1" comment="pcre-tools is &lt;8.39-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038697"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050373"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147773" version="1" comment="libpcscspy0 is &lt;1.8.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041265"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147774" version="1" comment="pcsc-lite-devel is &lt;1.8.10-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032525"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155708" version="1" comment="libplist++-devel is &lt;1.12-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051734"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155709" version="1" comment="libplist-devel is &lt;1.12-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041442"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051734"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150239" version="1" comment="libpng12-compat-devel is &lt;1.2.50-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051458"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150240" version="1" comment="libpng12-devel is &lt;1.2.50-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034636"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051458"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150210" version="1" comment="libpng16-compat-devel is &lt;1.6.8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037595"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150211" version="1" comment="libpng16-devel is &lt;1.6.8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157354" version="1" comment="libpoppler44 is &lt;0.24.4-14.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159822" version="1" comment="libpulse-devel is &lt;5.0-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033658"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052143"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149139" version="1" comment="libquicktime-devel is &lt;1.2.4-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051348"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159823" version="1" comment="libreoffice-sdk is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034839"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159824" version="1" comment="libsmbclient-devel is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030441"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159825" version="1" comment="libwbclient-devel is &lt;4.6.5+git.27.6afd48b1083-2.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032945"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155690" version="1" comment="libsndfile-devel is &lt;1.0.25-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031882"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051732"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159826" version="1" comment="libspice-server-devel is &lt;0.12.8-1.17" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052148"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159827" version="1" comment="libtasn1-devel is &lt;4.9-1.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038047"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052151"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135887" version="1" comment="libtcnative-1-0-devel is &lt;1.1.34-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036682"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048585"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154451" version="1" comment="libtiff-devel is &lt;4.0.7-43.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031676"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051544"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155576" version="1" comment="libtirpc-devel is &lt;1.0.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041289"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051709"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159828" version="1" comment="libudev-devel is &lt;228-142.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033169"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159829" version="1" comment="systemd-devel is &lt;228-142.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157776" version="1" comment="libunrar-devel is &lt;5.0.14-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051990"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157777" version="1" comment="libunrar5_0_14 is &lt;5.0.14-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041668"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051990"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159830" version="1" comment="libvirt-devel is &lt;3.3.0-4.28" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031848"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052152"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157778" version="1" comment="libxml2-devel is &lt;2.9.4-45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051991"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155570" version="1" comment="libxslt-devel is &lt;1.1.28-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030842"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051705"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159831" version="1" comment="zeromq-devel is &lt;4.0.4-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038178"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052234"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154703" version="1" comment="zziplib-devel is &lt;0.13.62-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159832" version="1" comment="lua-devel is &lt;5.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038157"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052140"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157040" version="1" comment="mercurial is &lt;2.8.2-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032900"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051918"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155344" version="1" comment="mozilla-nspr-devel is &lt;4.13.1-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051685"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155345" version="1" comment="mozilla-nss-devel is &lt;3.29.5-57.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156774" version="1" comment="openldap2-back-perl is &lt;2.4.41-18.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030813"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156775" version="1" comment="openldap2-devel is &lt;2.4.41-18.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030546"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156776" version="1" comment="openldap2-devel-static is &lt;2.4.41-18.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038762"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131843" version="1" comment="openslp-devel is &lt;2.0.0-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159833" version="1" comment="osc is &lt;0.158.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034837"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155981" version="1" comment="pam-devel is &lt;1.1.8-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032518"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051749"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157331" version="1" comment="php5-devel is &lt;5.5.14-108.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031659"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157744" version="1" comment="php7-devel is &lt;7.0.7-49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040708"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051984"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159834" version="1" comment="postgresql96-devel is &lt;9.6.3-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041800"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052134"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148459" version="1" comment="ppp-devel is &lt;2.4.7-3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038134"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051267"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159835" version="1" comment="python3-devel is &lt;3.4.6-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036919"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052145"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131839" version="1" comment="quagga-devel is &lt;0.99.22.1-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048047"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146871" version="1" comment="rrdtool-devel is &lt;1.4.7-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038285"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050954"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159836" version="1" comment="ruby2.1-devel is &lt;2.1.9-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052146"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149641" version="1" comment="sane-backends-devel is &lt;1.0.24-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051413"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159837" version="1" comment="spice-gtk-devel is &lt;0.33-1.33" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037401"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052147"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159838" version="1" comment="sqlite3-devel is &lt;3.8.10.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040585"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052149"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159839" version="1" comment="sudo-devel is &lt;1.8.20p2-1.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035732"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052173"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159840" version="1" comment="systemtap-sdt-devel is &lt;3.0-10.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033715"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149827" version="1" comment="virglrenderer-devel is &lt;0.5.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051433"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157332" version="1" comment="wireshark-devel is &lt;2.2.7-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031520"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051948"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159841" version="1" comment="xen-devel is &lt;4.9.0_08-2.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159842" version="1" comment="xfsprogs-devel is &lt;4.3.0-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052182"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157364" version="1" comment="xorg-x11-server-sdk is &lt;7.6_1.18.3-71.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051957"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159843" version="1" comment="yast2-core-devel is &lt;3.2.2-1.29" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030807"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156396" version="1" comment="yodl is &lt;3.03.0-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051797"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146187" version="1" comment="zlib-devel-32bit is &lt;1.2.8-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031158"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146188" version="1" comment="zlib-devel-static is &lt;1.2.8-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117478" version="1" comment="sle-we-release is ==12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045919"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118890" version="1" comment="sle-we-release is ==12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046486"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136016" version="1" comment="sle-we-release is ==12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047590"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144630" version="1" comment="libreoffice-l10n-bg is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034367"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144631" version="1" comment="libreoffice-l10n-hr is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034376"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144632" version="1" comment="libreoffice-l10n-lt is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144633" version="1" comment="libreoffice-l10n-uk is &lt;5.1.5.2-29.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034394"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159844" version="1" comment="sle-we-release is ==12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052091"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159845" version="1" comment="libreoffice-l10n-bg is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034367"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159846" version="1" comment="libreoffice-l10n-hr is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034376"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159847" version="1" comment="libreoffice-l10n-lt is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159848" version="1" comment="libreoffice-l10n-uk is &lt;5.2.5.1-42.13" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034394"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052233"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103563" version="1" comment="libreoffice is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103653" version="1" comment="libreoffice-sdk is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034839"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117415" version="1" comment="sle-bsk-release is ==12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039398"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045919"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102212" version="1" comment="libreoffice is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102302" version="1" comment="libreoffice-sdk is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034839"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107603" version="1" comment="cups is &lt;1.7.5-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030428"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044694"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107605" version="1" comment="cups-ddk is &lt;1.7.5-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044694"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107854" version="1" comment="kernel-zfcpdump is &lt;3.12.38-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044725"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108390" version="1" comment="kernel-zfcpdump is &lt;3.12.39-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105335" version="1" comment="kernel-zfcpdump is &lt;3.12.32-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110317" version="1" comment="cups-ddk is &lt;1.7.5-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045101"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110528" version="1" comment="kernel-zfcpdump is &lt;3.12.43-52.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111355" version="1" comment="krb5-mini is &lt;1.12.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111356" version="1" comment="krb5-mini-devel is &lt;1.12.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045244"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111593" version="1" comment="kernel-zfcpdump is &lt;3.12.44-52.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113199" version="1" comment="python-Jinja2 is &lt;2.7.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045498"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105766" version="1" comment="kernel-zfcpdump is &lt;3.12.36-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044478"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114119" version="1" comment="libwmf is &lt;0.2.8.4-242.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030641"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114453" version="1" comment="kernel-zfcpdump is &lt;3.12.44-52.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115006" version="1" comment="kernel-zfcpdump is &lt;3.12.48-52.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106082" version="1" comment="krb5-mini is &lt;1.12.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044539"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106083" version="1" comment="krb5-mini-devel is &lt;1.12.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044539"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115939" version="1" comment="krb5-mini is &lt;1.12.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115940" version="1" comment="krb5-mini-devel is &lt;1.12.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115575" version="1" comment="flute is &lt;1.3.0-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039081"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045854"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115590" version="1" comment="libbase is &lt;1.1.3-4.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045859"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115611" version="1" comment="libfonts is &lt;1.1.3-4.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039117"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045863"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115613" version="1" comment="libformula is &lt;1.1.3-4.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039119"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045859"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115632" version="1" comment="liblayout is &lt;0.2.10-4.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045868"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115634" version="1" comment="libloader is &lt;1.1.3-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045869"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115752" version="1" comment="libreoffice-sdk is &lt;5.0.2.2-13.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034839"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045876"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115756" version="1" comment="librepository is &lt;1.1.3-4.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039168"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045859"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115758" version="1" comment="librevenge is &lt;0.0.2-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039170"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115760" version="1" comment="librevenge-devel is &lt;0.0.2-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039172"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115762" version="1" comment="librevenge-generators-0_0-0 is &lt;0.0.2-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039174"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115764" version="1" comment="libserializer is &lt;1.1.2-4.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039176"/>
		<state state_ref="oval:org.opensuse.security:ste:2009035579"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115781" version="1" comment="mdds is &lt;0.12.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115782" version="1" comment="mdds-devel is &lt;0.12.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039194"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115925" version="1" comment="pentaho-libxml is &lt;1.1.3-4.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039337"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045859"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115927" version="1" comment="pentaho-reporting-flow-engine is &lt;0.9.4-4.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039339"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045884"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115929" version="1" comment="sac is &lt;1.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106173" version="1" comment="perl-Capture-Tiny is &lt;0.23-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118154" version="1" comment="kernel-zfcpdump is &lt;3.12.51-52.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118556" version="1" comment="krb5-mini is &lt;1.12.1-22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046465"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118557" version="1" comment="krb5-mini-devel is &lt;1.12.1-22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046465"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119006" version="1" comment="python-tdb is &lt;1.3.8-2.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038090"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119007" version="1" comment="python-tevent is &lt;0.9.26-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046556"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119008" version="1" comment="tdb is &lt;1.3.8-2.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038092"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119009" version="1" comment="tevent is &lt;0.9.26-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046556"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129267" version="1" comment="kernel-zfcpdump is &lt;3.12.60-52.49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129383" version="1" comment="kernel-zfcpdump is &lt;3.12.60-52.54.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047757"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129446" version="1" comment="libreoffice is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129447" version="1" comment="libreoffice-sdk is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034839"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121130" version="1" comment="kernel-zfcpdump is &lt;3.12.51-52.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121621" version="1" comment="kernel-zfcpdump is &lt;3.12.51-52.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122485" version="1" comment="krb5-mini is &lt;1.12.1-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046909"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122486" version="1" comment="krb5-mini-devel is &lt;1.12.1-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046909"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124799" version="1" comment="kernel-zfcpdump is &lt;3.12.55-52.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125319" version="1" comment="ghostscript-mini is &lt;9.15-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047301"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125320" version="1" comment="ghostscript-mini-devel is &lt;9.15-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038877"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047301"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125667" version="1" comment="go is &lt;1.5.3-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038204"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047342"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125668" version="1" comment="go-doc is &lt;1.5.3-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038205"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047342"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125711" version="1" comment="gcc5-go is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125712" version="1" comment="libgo7 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040371"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125713" version="1" comment="krb5-mini is &lt;1.12.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047353"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125714" version="1" comment="krb5-mini-devel is &lt;1.12.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047353"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126706" version="1" comment="go is &lt;1.5.4-20.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038204"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047429"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126707" version="1" comment="go-doc is &lt;1.5.4-20.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038205"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047429"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127131" version="1" comment="go is &lt;1.6.1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038204"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047479"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127132" version="1" comment="go-doc is &lt;1.6.1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038205"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047479"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127705" version="1" comment="libudev-mini-devel is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127706" version="1" comment="libudev-mini1 is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127707" version="1" comment="systemd-mini is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127708" version="1" comment="systemd-mini-devel is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127709" version="1" comment="udev-mini is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128636" version="1" comment="libpoppler-cpp0 is &lt;0.24.4-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037286"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128637" version="1" comment="poppler is &lt;0.24.4-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128890" version="1" comment="kernel-zfcpdump is &lt;3.12.55-52.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047687"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118982" version="1" comment="kernel-zfcpdump is &lt;3.12.51-60.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046551"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118772" version="1" comment="sle-bsk-release is ==12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039398"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046486"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119010" version="1" comment="python-tdb is &lt;1.3.8-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038090"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046557"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119011" version="1" comment="python-tevent is &lt;0.9.26-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046558"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119012" version="1" comment="tdb is &lt;1.3.8-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038092"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046557"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119013" version="1" comment="tevent is &lt;0.9.26-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046558"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129343" version="1" comment="kernel-zfcpdump is &lt;3.12.59-60.41.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129384" version="1" comment="kernel-zfcpdump is &lt;3.12.59-60.45.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047758"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121526" version="1" comment="kernel-zfcpdump is &lt;3.12.51-60.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130929" version="1" comment="kernel-zfcpdump is &lt;3.12.62-60.62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130931" version="1" comment="cracklib-dict-small is &lt;2.9.0-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040611"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047936"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130932" version="1" comment="krb5-mini is &lt;1.12.1-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047937"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130933" version="1" comment="krb5-mini-devel is &lt;1.12.1-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047937"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130934" version="1" comment="ocaml is &lt;4.02.3-6.6.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047938"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130935" version="1" comment="ocaml-ocamldoc is &lt;4.02.3-6.6.14" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047938"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130936" version="1" comment="kdelibs4 is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031689"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130937" version="1" comment="kdelibs4-branding-upstream is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033524"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130938" version="1" comment="kdelibs4-core is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031687"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130939" version="1" comment="kdelibs4-doc is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031688"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130940" version="1" comment="libkde4-devel is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031692"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130941" version="1" comment="libkdecore4-devel is &lt;4.12.0-7.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031696"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047939"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130942" version="1" comment="libmdbodbc1 is &lt;0.7-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047940"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130944" version="1" comment="mdbtools-devel is &lt;0.7-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040614"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047940"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130945" version="1" comment="virtuoso is &lt;6.1.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040615"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047941"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130946" version="1" comment="virtuoso-drivers is &lt;6.1.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040616"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047941"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130947" version="1" comment="virtuoso-server is &lt;6.1.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040617"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047941"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130950" version="1" comment="libudev-mini-devel is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130951" version="1" comment="libudev-mini1 is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130952" version="1" comment="systemd-mini is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130953" version="1" comment="systemd-mini-devel is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130954" version="1" comment="udev-mini is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130955" version="1" comment="ghostscript-mini is &lt;9.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130956" version="1" comment="ghostscript-mini-devel is &lt;9.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038877"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130957" version="1" comment="kernel-zfcpdump is &lt;3.12.62-60.64.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130958" version="1" comment="ghostscript-mini is &lt;9.15-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047946"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130959" version="1" comment="ghostscript-mini-devel is &lt;9.15-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038877"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047946"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135535" version="1" comment="ghostscript-mini is &lt;9.15-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048547"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135536" version="1" comment="ghostscript-mini-devel is &lt;9.15-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038877"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048547"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135962" version="1" comment="kernel-zfcpdump is &lt;3.12.67-60.64.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136628" version="1" comment="kernel-zfcpdump is &lt;3.12.67-60.64.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143054" version="1" comment="kernel-zfcpdump is &lt;3.12.67-60.64.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050376"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123251" version="1" comment="kernel-zfcpdump is &lt;3.12.53-60.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125715" version="1" comment="kernel-zfcpdump is &lt;3.12.57-60.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047354"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127710" version="1" comment="libudev-mini-devel is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127711" version="1" comment="libudev-mini1 is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127712" version="1" comment="systemd-mini is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127713" version="1" comment="systemd-mini-devel is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127714" version="1" comment="udev-mini is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148394" version="1" comment="kernel-zfcpdump is &lt;3.12.69-60.64.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148657" version="1" comment="kernel-zfcpdump is &lt;3.12.69-60.64.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051298"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149121" version="1" comment="lynx is &lt;2.8.7-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030725"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051341"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149945" version="1" comment="kernel-zfcpdump is &lt;3.12.69-60.64.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146958" version="1" comment="python-Twisted is &lt;15.2.1-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041174"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050965"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154699" version="1" comment="dpkg is &lt;1.16.10-12.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038754"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051586"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154805" version="1" comment="ghostscript-mini is &lt;9.15-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051604"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154806" version="1" comment="ghostscript-mini-devel is &lt;9.15-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038877"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051604"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154903" version="1" comment="firebird is &lt;2.5.2.26539-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035739"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051619"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154904" version="1" comment="libfbclient2 is &lt;2.5.2.26539-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035748"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051619"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154905" version="1" comment="libfbclient2-devel is &lt;2.5.2.26539-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051619"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155607" version="1" comment="kdelibs4 is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031689"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155608" version="1" comment="kdelibs4-branding-upstream is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033524"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155609" version="1" comment="kdelibs4-core is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031687"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155610" version="1" comment="kdelibs4-doc is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031688"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155611" version="1" comment="libkde4-devel is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031692"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155612" version="1" comment="libkdecore4-devel is &lt;4.12.0-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031696"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155646" version="1" comment="kernel-zfcpdump is &lt;3.12.74-60.64.40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051728"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155968" version="1" comment="ghostscript-mini is &lt;9.15-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051747"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155969" version="1" comment="ghostscript-mini-devel is &lt;9.15-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038877"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051747"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135537" version="1" comment="sle-bsk-release is ==12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039398"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047590"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136629" version="1" comment="kernel-zfcpdump is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142719" version="1" comment="kernel-zfcpdump is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157579" version="1" comment="kernel-zfcpdump is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157910" version="1" comment="libudev-mini-devel is &lt;228-149.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052003"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157911" version="1" comment="libudev-mini1 is &lt;228-149.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052003"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157912" version="1" comment="systemd-mini is &lt;228-149.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052003"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157913" version="1" comment="systemd-mini-devel is &lt;228-149.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052003"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157914" version="1" comment="udev-mini is &lt;228-149.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052003"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158168" version="1" comment="libreoffice is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158169" version="1" comment="libreoffice-sdk is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034839"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158775" version="1" comment="kernel-zfcpdump is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158897" version="1" comment="libudev-mini-devel is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158898" version="1" comment="libudev-mini1 is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158899" version="1" comment="systemd-mini is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158900" version="1" comment="systemd-mini-devel is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158901" version="1" comment="udev-mini is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159502" version="1" comment="libpoppler-cpp0 is &lt;0.43.0-16.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037286"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159503" version="1" comment="poppler is &lt;0.43.0-16.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161399" version="1" comment="kernel-zfcpdump is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161756" version="1" comment="kernel-zfcpdump is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163123" version="1" comment="python-pycrypto is &lt;2.6.1-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052850"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147618" version="1" comment="libudev-mini-devel is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147619" version="1" comment="libudev-mini1 is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147620" version="1" comment="systemd-mini is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147621" version="1" comment="systemd-mini-devel is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147622" version="1" comment="udev-mini is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164281" version="1" comment="kernel-zfcpdump is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165065" version="1" comment="krb5-mini is &lt;1.12.5-40.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053025"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165066" version="1" comment="krb5-mini-devel is &lt;1.12.5-40.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053025"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166109" version="1" comment="kernel-zfcpdump is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166648" version="1" comment="krb5-mini is &lt;1.12.5-40.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166649" version="1" comment="krb5-mini-devel is &lt;1.12.5-40.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167424" version="1" comment="lynx is &lt;2.8.7-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030725"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053312"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167747" version="1" comment="kernel-zfcpdump is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168778" version="1" comment="kernel-zfcpdump is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149008" version="1" comment="kernel-zfcpdump is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149946" version="1" comment="kernel-zfcpdump is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155049" version="1" comment="kernel-zfcpdump is &lt;4.4.59-92.17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051642"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147203" version="1" comment="kernel-zfcpdump is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156952" version="1" comment="kernel-zfcpdump is &lt;4.4.59-92.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169032" version="1" comment="kernel-zfcpdump is &lt;4.4.103-92.56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053471"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170438" version="1" comment="libudev-mini-devel is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170439" version="1" comment="libudev-mini1 is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170440" version="1" comment="systemd-mini is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170441" version="1" comment="systemd-mini-devel is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170442" version="1" comment="udev-mini is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171089" version="1" comment="ghostscript-mini is &lt;9.15-23.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171090" version="1" comment="ghostscript-mini-devel is &lt;9.15-23.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038877"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171091" version="1" comment="kernel-zfcpdump is &lt;4.4.114-92.64.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053744"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171160" version="1" comment="libreoffice is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171161" version="1" comment="libreoffice-sdk is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034839"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172454" version="1" comment="libudev-mini-devel is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172455" version="1" comment="libudev-mini1 is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172456" version="1" comment="systemd-mini is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172457" version="1" comment="systemd-mini-devel is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172458" version="1" comment="udev-mini is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172680" version="1" comment="cups is &lt;1.7.5-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030428"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172681" version="1" comment="cups-ddk is &lt;1.7.5-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169434" version="1" comment="kernel-zfcpdump is &lt;4.4.103-92.59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173598" version="1" comment="kernel-zfcpdump is &lt;4.4.120-92.70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173987" version="1" comment="krb5-mini is &lt;1.12.5-40.23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033679"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054136"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173988" version="1" comment="krb5-mini-devel is &lt;1.12.5-40.23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033678"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054136"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159504" version="1" comment="sle-bsk-release is ==12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039398"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052091"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161352" version="1" comment="libudev-mini-devel is &lt;228-150.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052660"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161353" version="1" comment="libudev-mini1 is &lt;228-150.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037369"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052660"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161354" version="1" comment="systemd-mini is &lt;228-150.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052660"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161355" version="1" comment="systemd-mini-devel is &lt;228-150.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037372"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052660"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161356" version="1" comment="udev-mini is &lt;228-150.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052660"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162426" version="1" comment="kernel-zfcpdump is &lt;4.4.82-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162651" version="1" comment="libreoffice is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162652" version="1" comment="libreoffice-sdk is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034839"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164282" version="1" comment="kernel-zfcpdump is &lt;4.4.82-6.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166002" version="1" comment="kernel-zfcpdump is &lt;4.4.92-6.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167748" version="1" comment="kernel-zfcpdump is &lt;4.4.92-6.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168747" version="1" comment="kernel-zfcpdump is &lt;4.4.103-6.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169033" version="1" comment="kernel-zfcpdump is &lt;4.4.103-6.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170928" version="1" comment="kernel-zfcpdump is &lt;4.4.114-94.11.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053715"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171271" version="1" comment="libreoffice is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171272" version="1" comment="libreoffice-sdk is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034839"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173371" version="1" comment="python-tevent is &lt;0.9.34-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173372" version="1" comment="tevent is &lt;0.9.34-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173599" version="1" comment="kernel-zfcpdump is &lt;4.4.120-94.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174550" version="1" comment="ocaml is &lt;4.03.0-8.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054222"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174551" version="1" comment="ocaml-ocamldoc is &lt;4.03.0-8.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054222"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174739" version="1" comment="kernel-zfcpdump is &lt;4.4.126-94.22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174740" version="1" comment="PackageKit is &lt;1.1.3-24.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032963"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174741" version="1" comment="PackageKit-branding-upstream is &lt;1.1.3-24.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035663"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174876" version="1" comment="libreoffice is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174877" version="1" comment="libreoffice-sdk is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034839"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169767" version="1" comment="kernel-zfcpdump is &lt;4.4.103-94.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053579"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102623" version="1" comment="tigervnc is &lt;1.3.0-22.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102624" version="1" comment="xorg-x11-Xvnc is &lt;1.3.0-22.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102886" version="1" comment="gnutls is &lt;3.2.15-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030524"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102891" version="1" comment="libgnutls28 is &lt;3.2.15-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102892" version="1" comment="libgnutls28-32bit is &lt;3.2.15-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102895" version="1" comment="flash-player is &lt;11.2.202.425-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044023"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102896" version="1" comment="flash-player-gnome is &lt;11.2.202.425-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044023"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102940" version="1" comment="mailx is &lt;12.5-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044033"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102931" version="1" comment="flac is &lt;1.3.0-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030774"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103131" version="1" comment="ntp is &lt;4.2.6p5-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103132" version="1" comment="ntp-doc is &lt;4.2.6p5-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044076"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103128" version="1" comment="openvpn is &lt;2.3.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044075"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103545" version="1" comment="dbus-1 is &lt;1.8.12-6.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103547" version="1" comment="dbus-1-x11 is &lt;1.8.12-6.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103551" version="1" comment="libdbus-1-3 is &lt;1.8.12-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103552" version="1" comment="libdbus-1-3-32bit is &lt;1.8.12-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103556" version="1" comment="tcpdump is &lt;4.5.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044112"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103657" version="1" comment="libssh is &lt;0.6.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044115"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103660" version="1" comment="libssh4 is &lt;0.6.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035367"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044115"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103564" version="1" comment="libreoffice-base is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103565" version="1" comment="libreoffice-base-drivers-mysql is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103566" version="1" comment="libreoffice-base-drivers-postgresql is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103568" version="1" comment="libreoffice-calc is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103569" version="1" comment="libreoffice-calc-extensions is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103570" version="1" comment="libreoffice-draw is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103571" version="1" comment="libreoffice-filters-optional is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103572" version="1" comment="libreoffice-gnome is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103578" version="1" comment="libreoffice-icon-theme-tango is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103579" version="1" comment="libreoffice-impress is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103581" version="1" comment="libreoffice-l10n-af is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103582" version="1" comment="libreoffice-l10n-ar is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103587" version="1" comment="libreoffice-l10n-ca is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103588" version="1" comment="libreoffice-l10n-cs is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103590" version="1" comment="libreoffice-l10n-da is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103591" version="1" comment="libreoffice-l10n-de is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103594" version="1" comment="libreoffice-l10n-en is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103595" version="1" comment="libreoffice-l10n-es is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103599" version="1" comment="libreoffice-l10n-fi is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103600" version="1" comment="libreoffice-l10n-fr is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103603" version="1" comment="libreoffice-l10n-gu is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103605" version="1" comment="libreoffice-l10n-hi is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103607" version="1" comment="libreoffice-l10n-hu is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103608" version="1" comment="libreoffice-l10n-it is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103609" version="1" comment="libreoffice-l10n-ja is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103612" version="1" comment="libreoffice-l10n-ko is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103618" version="1" comment="libreoffice-l10n-nb is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103619" version="1" comment="libreoffice-l10n-nl is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103620" version="1" comment="libreoffice-l10n-nn is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103625" version="1" comment="libreoffice-l10n-pl is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103626" version="1" comment="libreoffice-l10n-pt-BR is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034145"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103627" version="1" comment="libreoffice-l10n-pt-PT is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103629" version="1" comment="libreoffice-l10n-ru is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103631" version="1" comment="libreoffice-l10n-sk is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103636" version="1" comment="libreoffice-l10n-sv is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103645" version="1" comment="libreoffice-l10n-xh is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103646" version="1" comment="libreoffice-l10n-zh-Hans is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038231"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103647" version="1" comment="libreoffice-l10n-zh-Hant is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103648" version="1" comment="libreoffice-l10n-zu is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103649" version="1" comment="libreoffice-mailmerge is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103650" version="1" comment="libreoffice-math is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103651" version="1" comment="libreoffice-officebean is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103652" version="1" comment="libreoffice-pyuno is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103655" version="1" comment="libreoffice-writer is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103656" version="1" comment="libreoffice-writer-extensions is &lt;4.3.5.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009101424" version="1" comment="flash-player is &lt;11.2.202.411-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043844"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009101425" version="1" comment="flash-player-gnome is &lt;11.2.202.411-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043844"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009101430" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.71-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043845"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009101434" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.71-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043845"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009101705" version="1" comment="rsyslog is &lt;8.4.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033100"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043861"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102009" version="1" comment="flash-player is &lt;11.2.202.418-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102010" version="1" comment="flash-player-gnome is &lt;11.2.202.418-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043882"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102213" version="1" comment="libreoffice-base is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102214" version="1" comment="libreoffice-base-drivers-mysql is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102215" version="1" comment="libreoffice-base-drivers-postgresql is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102217" version="1" comment="libreoffice-calc is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102218" version="1" comment="libreoffice-calc-extensions is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102219" version="1" comment="libreoffice-draw is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102220" version="1" comment="libreoffice-filters-optional is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102221" version="1" comment="libreoffice-gnome is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102227" version="1" comment="libreoffice-icon-theme-tango is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102228" version="1" comment="libreoffice-impress is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102230" version="1" comment="libreoffice-l10n-af is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102231" version="1" comment="libreoffice-l10n-ar is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102236" version="1" comment="libreoffice-l10n-ca is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102237" version="1" comment="libreoffice-l10n-cs is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102239" version="1" comment="libreoffice-l10n-da is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102240" version="1" comment="libreoffice-l10n-de is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102243" version="1" comment="libreoffice-l10n-en is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102244" version="1" comment="libreoffice-l10n-es is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102248" version="1" comment="libreoffice-l10n-fi is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102249" version="1" comment="libreoffice-l10n-fr is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102252" version="1" comment="libreoffice-l10n-gu is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102254" version="1" comment="libreoffice-l10n-hi is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102256" version="1" comment="libreoffice-l10n-hu is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102257" version="1" comment="libreoffice-l10n-it is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102258" version="1" comment="libreoffice-l10n-ja is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102261" version="1" comment="libreoffice-l10n-ko is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102267" version="1" comment="libreoffice-l10n-nb is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102268" version="1" comment="libreoffice-l10n-nl is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102269" version="1" comment="libreoffice-l10n-nn is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102274" version="1" comment="libreoffice-l10n-pl is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102275" version="1" comment="libreoffice-l10n-pt-BR is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034145"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102276" version="1" comment="libreoffice-l10n-pt-PT is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102278" version="1" comment="libreoffice-l10n-ru is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102280" version="1" comment="libreoffice-l10n-sk is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102285" version="1" comment="libreoffice-l10n-sv is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102294" version="1" comment="libreoffice-l10n-xh is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102295" version="1" comment="libreoffice-l10n-zh-Hans is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038231"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102296" version="1" comment="libreoffice-l10n-zh-Hant is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102297" version="1" comment="libreoffice-l10n-zu is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102298" version="1" comment="libreoffice-mailmerge is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102299" version="1" comment="libreoffice-math is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102300" version="1" comment="libreoffice-officebean is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102301" version="1" comment="libreoffice-pyuno is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102304" version="1" comment="libreoffice-writer is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102305" version="1" comment="libreoffice-writer-extensions is &lt;4.3.3.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043914"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102643" version="1" comment="MozillaFirefox is &lt;31.3.0esr-15.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043971"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102642" version="1" comment="MozillaFirefox-branding-SLE is &lt;31.0-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038244"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102646" version="1" comment="MozillaFirefox-translations is &lt;31.3.0esr-15.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043971"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102647" version="1" comment="libfreebl3 is &lt;3.17.2-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102648" version="1" comment="libfreebl3-32bit is &lt;3.17.2-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102651" version="1" comment="libsoftokn3 is &lt;3.17.2-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102652" version="1" comment="libsoftokn3-32bit is &lt;3.17.2-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102655" version="1" comment="mozilla-nss is &lt;3.17.2-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102656" version="1" comment="mozilla-nss-32bit is &lt;3.17.2-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102657" version="1" comment="mozilla-nss-certs is &lt;3.17.2-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102658" version="1" comment="mozilla-nss-certs-32bit is &lt;3.17.2-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102662" version="1" comment="mozilla-nss-tools is &lt;3.17.2-12.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102867" version="1" comment="libpython2_7-1_0 is &lt;2.7.7-9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102868" version="1" comment="libpython2_7-1_0-32bit is &lt;2.7.7-9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034538"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102875" version="1" comment="python is &lt;2.7.7-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102869" version="1" comment="python-base is &lt;2.7.7-9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102877" version="1" comment="python-curses is &lt;2.7.7-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102871" version="1" comment="python-devel is &lt;2.7.7-9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102881" version="1" comment="python-tk is &lt;2.7.7-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102872" version="1" comment="python-xml is &lt;2.7.7-9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102625" version="1" comment="compat-openssl098 is &lt;0.9.8j-66.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043968"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102626" version="1" comment="libopenssl0_9_8 is &lt;0.9.8j-66.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043968"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102627" version="1" comment="libopenssl0_9_8-32bit is &lt;0.9.8j-66.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043968"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102665" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043973"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102666" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043973"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102669" version="1" comment="openssl is &lt;1.0.1i-9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043973"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102488" version="1" comment="flash-player is &lt;11.2.202.424-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102489" version="1" comment="flash-player-gnome is &lt;11.2.202.424-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102467" version="1" comment="file is &lt;5.19-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030456"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102469" version="1" comment="file-magic is &lt;5.19-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037852"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102471" version="1" comment="libmagic1 is &lt;5.19-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037850"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009102470" version="1" comment="libmagic1-32bit is &lt;5.19-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009043930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009103733" version="1" comment="libxml2 is &lt;2.9.1-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118566" version="1" comment="xen is &lt;4.4.3_06-22.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046468"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118567" version="1" comment="xen-kmp-default is &lt;4.4.3_06_k3.12.48_52.27-22.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046469"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118568" version="1" comment="xen-libs is &lt;4.4.3_06-22.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046468"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118569" version="1" comment="xen-libs-32bit is &lt;4.4.3_06-22.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046468"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119510" version="1" comment="MozillaFirefox is &lt;38.5.0esr-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046598"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119511" version="1" comment="MozillaFirefox-translations is &lt;38.5.0esr-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046598"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119311" version="1" comment="bind is &lt;9.9.6P1-28.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046586"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119312" version="1" comment="bind-libs is &lt;9.9.6P1-28.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046586"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119313" version="1" comment="bind-libs-32bit is &lt;9.9.6P1-28.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046586"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119314" version="1" comment="bind-utils is &lt;9.9.6P1-28.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046586"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118719" version="1" comment="compat-openssl098 is &lt;0.9.8j-87.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046501"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118720" version="1" comment="libopenssl0_9_8 is &lt;0.9.8j-87.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046501"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118721" version="1" comment="libopenssl0_9_8-32bit is &lt;0.9.8j-87.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046501"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106878" version="1" comment="xorg-x11-server is &lt;7.6_1.15.2-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044600"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106879" version="1" comment="xorg-x11-server-extra is &lt;7.6_1.15.2-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044600"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116182" version="1" comment="xfsprogs is &lt;3.2.1-3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119797" version="1" comment="grub2 is &lt;2.02~beta2-56.9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046630"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119798" version="1" comment="grub2-i386-pc is &lt;2.02~beta2-56.9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046630"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119799" version="1" comment="grub2-snapper-plugin is &lt;2.02~beta2-56.9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039508"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046630"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119800" version="1" comment="grub2-x86_64-efi is &lt;2.02~beta2-56.9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046630"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119801" version="1" comment="grub2-x86_64-xen is &lt;2.02~beta2-56.9.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046630"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120801" version="1" comment="flash-player is &lt;11.2.202.559-117.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046709"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120802" version="1" comment="flash-player-gnome is &lt;11.2.202.559-117.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046709"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106933" version="1" comment="MozillaFirefox is &lt;31.5.0esr-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044608"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106936" version="1" comment="MozillaFirefox-translations is &lt;31.5.0esr-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044608"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107574" version="1" comment="freetype2 is &lt;2.5.3-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030613"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044681"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107579" version="1" comment="ft2demos is &lt;2.5.3-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034838"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044681"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107577" version="1" comment="libfreetype6 is &lt;2.5.3-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033880"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044681"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107578" version="1" comment="libfreetype6-32bit is &lt;2.5.3-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044681"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107604" version="1" comment="cups-client is &lt;1.7.5-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044694"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107607" version="1" comment="cups-libs is &lt;1.7.5-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030427"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044694"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107608" version="1" comment="cups-libs-32bit is &lt;1.7.5-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030730"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044694"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107616" version="1" comment="libecpg6 is &lt;9.3.6-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107618" version="1" comment="libpq5 is &lt;9.3.6-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107617" version="1" comment="libpq5-32bit is &lt;9.3.6-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107621" version="1" comment="postgresql93 is &lt;9.3.6-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038473"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044697"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107620" version="1" comment="postgresql93-libs is &lt;9.3.6-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105078" version="1" comment="unzip is &lt;6.00-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031638"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044367"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107710" version="1" comment="flash-player is &lt;11.2.202.451-77.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044714"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107711" version="1" comment="flash-player-gnome is &lt;11.2.202.451-77.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044714"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107690" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.75-11.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044711"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107694" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.75-11.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044711"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107707" version="1" comment="libmspack is &lt;0.4-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044713"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107808" version="1" comment="glibc is &lt;2.19-20.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044723"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107819" version="1" comment="glibc-32bit is &lt;2.19-20.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044723"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107809" version="1" comment="glibc-devel is &lt;2.19-20.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044723"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107820" version="1" comment="glibc-devel-32bit is &lt;2.19-20.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044723"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107813" version="1" comment="glibc-i18ndata is &lt;2.19-20.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044723"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107815" version="1" comment="glibc-locale is &lt;2.19-20.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044723"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107822" version="1" comment="glibc-locale-32bit is &lt;2.19-20.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044723"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107818" version="1" comment="nscd is &lt;2.19-20.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044723"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107833" version="1" comment="kernel-default is &lt;3.12.38-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044725"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107835" version="1" comment="kernel-default-devel is &lt;3.12.38-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044725"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107836" version="1" comment="kernel-default-extra is &lt;3.12.38-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044725"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107825" version="1" comment="kernel-devel is &lt;3.12.38-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044725"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107826" version="1" comment="kernel-macros is &lt;3.12.38-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044725"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107827" version="1" comment="kernel-source is &lt;3.12.38-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044725"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107843" version="1" comment="kernel-syms is &lt;3.12.38-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044725"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107846" version="1" comment="kernel-xen is &lt;3.12.38-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044725"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107848" version="1" comment="kernel-xen-devel is &lt;3.12.38-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044725"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107890" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044733"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107891" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044733"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107894" version="1" comment="openssl is &lt;1.0.1i-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044733"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107968" version="1" comment="compat-openssl098 is &lt;0.9.8j-73.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044744"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107969" version="1" comment="libopenssl0_9_8 is &lt;0.9.8j-73.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044744"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009107970" version="1" comment="libopenssl0_9_8-32bit is &lt;0.9.8j-73.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044744"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108095" version="1" comment="xerces-c is &lt;3.1.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038595"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108131" version="1" comment="xen is &lt;4.4.1_10-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044774"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108137" version="1" comment="xen-kmp-default is &lt;4.4.1_10_k3.12.36_38-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108134" version="1" comment="xen-libs is &lt;4.4.1_10-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044774"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108133" version="1" comment="xen-libs-32bit is &lt;4.4.1_10-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044774"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108202" version="1" comment="MozillaFirefox is &lt;31.5.3esr-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108205" version="1" comment="MozillaFirefox-translations is &lt;31.5.3esr-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108358" version="1" comment="wireshark is &lt;1.10.13-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108369" version="1" comment="kernel-default is &lt;3.12.39-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108371" version="1" comment="kernel-default-devel is &lt;3.12.39-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108372" version="1" comment="kernel-default-extra is &lt;3.12.39-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108361" version="1" comment="kernel-devel is &lt;3.12.39-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108362" version="1" comment="kernel-macros is &lt;3.12.39-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108363" version="1" comment="kernel-source is &lt;3.12.39-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108379" version="1" comment="kernel-syms is &lt;3.12.39-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108382" version="1" comment="kernel-xen is &lt;3.12.39-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108384" version="1" comment="kernel-xen-devel is &lt;3.12.39-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044800"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108429" version="1" comment="libzip is &lt;0.11.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036927"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044809"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108431" version="1" comment="libzip2 is &lt;0.11.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044809"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108421" version="1" comment="libarchive is &lt;3.1.2-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032781"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108428" version="1" comment="libssh2_org is &lt;1.4.3-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105092" version="1" comment="libksba is &lt;1.3.0-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038296"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044372"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108627" version="1" comment="webkitgtk is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038624"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108641" version="1" comment="webkitgtk3 is &lt;2.4.8-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038638"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044828"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108651" version="1" comment="libXfont is &lt;1.4.7-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037585"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044832"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108656" version="1" comment="xen is &lt;4.4.2_02-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044833"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108662" version="1" comment="xen-kmp-default is &lt;4.4.2_02_k3.12.38_44-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044834"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108659" version="1" comment="xen-libs is &lt;4.4.2_02-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044833"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108658" version="1" comment="xen-libs-32bit is &lt;4.4.2_02-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044833"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108664" version="1" comment="MozillaFirefox is &lt;31.6.0esr-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044835"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108667" version="1" comment="MozillaFirefox-translations is &lt;31.6.0esr-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044835"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108877" version="1" comment="flash-player is &lt;11.2.202.457-80.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044887"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108878" version="1" comment="flash-player-gnome is &lt;11.2.202.457-80.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044887"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108906" version="1" comment="gnutls is &lt;3.2.15-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030524"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044897"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108911" version="1" comment="libgnutls28 is &lt;3.2.15-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044897"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108912" version="1" comment="libgnutls28-32bit is &lt;3.2.15-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044897"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108923" version="1" comment="libmysqlclient18 is &lt;10.0.16-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044899"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108924" version="1" comment="libmysqlclient18-32bit is &lt;10.0.16-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044899"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108925" version="1" comment="libmysqlclient_r18 is &lt;10.0.16-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044899"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108926" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.16-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044899"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108929" version="1" comment="mariadb is &lt;10.0.16-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044899"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108931" version="1" comment="mariadb-client is &lt;10.0.16-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044899"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009108933" version="1" comment="mariadb-errormessages is &lt;10.0.16-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044899"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109136" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.79-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109140" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.79-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044942"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109167" version="1" comment="cups-filters is &lt;1.0.58-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038657"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109168" version="1" comment="cups-filters-cups-browsed is &lt;1.0.58-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038658"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109170" version="1" comment="cups-filters-foomatic-rip is &lt;1.0.58-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038660"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109171" version="1" comment="cups-filters-ghostscript is &lt;1.0.58-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109160" version="1" comment="gdm is &lt;3.10.0.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030629"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109161" version="1" comment="gdm-branding-upstream is &lt;3.10.0.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033988"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109163" version="1" comment="gdm-lang is &lt;3.10.0.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033989"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109164" version="1" comment="gdmflexiserver is &lt;3.10.0.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109165" version="1" comment="libgdm1 is &lt;3.10.0.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038574"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109166" version="1" comment="typelib-1_0-Gdm-1_0 is &lt;3.10.0.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038575"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044950"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105374" version="1" comment="xorg-x11-server is &lt;7.6_1.15.2-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044425"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105375" version="1" comment="xorg-x11-server-extra is &lt;7.6_1.15.2-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044425"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105445" version="1" comment="flash-player is &lt;11.2.202.429-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044434"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105446" version="1" comment="flash-player-gnome is &lt;11.2.202.429-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044434"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109543" version="1" comment="ntp is &lt;4.2.6p5-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109544" version="1" comment="ntp-doc is &lt;4.2.6p5-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109608" version="1" comment="flash-player is &lt;11.2.202.460-83.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109609" version="1" comment="flash-player-gnome is &lt;11.2.202.460-83.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109615" version="1" comment="libspice-server1 is &lt;0.12.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044989"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109616" version="1" comment="spice is &lt;0.12.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044989"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109666" version="1" comment="qemu is &lt;2.0.2-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109668" version="1" comment="qemu-block-curl is &lt;2.0.2-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109671" version="1" comment="qemu-ipxe is &lt;1.0.0-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045005"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109672" version="1" comment="qemu-kvm is &lt;2.0.2-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109676" version="1" comment="qemu-seabios is &lt;1.7.4-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045006"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109677" version="1" comment="qemu-sgabios is &lt;8-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109678" version="1" comment="qemu-tools is &lt;2.0.2-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109679" version="1" comment="qemu-vgabios is &lt;1.7.4-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045006"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109680" version="1" comment="qemu-x86 is &lt;2.0.2-46.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109715" version="1" comment="xen is &lt;4.4.2_04-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045016"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109721" version="1" comment="xen-kmp-default is &lt;4.4.2_04_k3.12.39_47-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045017"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109718" version="1" comment="xen-libs is &lt;4.4.2_04-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045016"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109717" version="1" comment="xen-libs-32bit is &lt;4.4.2_04-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045016"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105317" version="1" comment="kernel-default is &lt;3.12.32-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105319" version="1" comment="kernel-default-devel is &lt;3.12.32-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105320" version="1" comment="kernel-default-extra is &lt;3.12.32-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105309" version="1" comment="kernel-devel is &lt;3.12.32-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105310" version="1" comment="kernel-macros is &lt;3.12.32-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105311" version="1" comment="kernel-source is &lt;3.12.32-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105327" version="1" comment="kernel-syms is &lt;3.12.32-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105330" version="1" comment="kernel-xen is &lt;3.12.32-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105332" version="1" comment="kernel-xen-devel is &lt;3.12.32-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044422"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109833" version="1" comment="fltk is &lt;1.3.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038725"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045040"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109837" version="1" comment="libfltk1 is &lt;1.3.2-10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045040"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109839" version="1" comment="tigervnc is &lt;1.4.1-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109840" version="1" comment="xorg-x11-Xvnc is &lt;1.4.1-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109960" version="1" comment="MozillaFirefox is &lt;31.7.0esr-34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045058"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109963" version="1" comment="MozillaFirefox-translations is &lt;31.7.0esr-34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045058"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009109991" version="1" comment="dnsmasq is &lt;2.71-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031669"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110203" version="1" comment="vorbis-tools is &lt;1.4.0-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030840"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110204" version="1" comment="vorbis-tools-lang is &lt;1.4.0-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038438"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105448" version="1" comment="MozillaFirefox is &lt;31.4.0esr-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044435"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105451" version="1" comment="MozillaFirefox-translations is &lt;31.4.0esr-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044435"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105452" version="1" comment="libfreebl3 is &lt;3.17.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105453" version="1" comment="libfreebl3-32bit is &lt;3.17.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105456" version="1" comment="libsoftokn3 is &lt;3.17.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105457" version="1" comment="libsoftokn3-32bit is &lt;3.17.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105460" version="1" comment="mozilla-nss is &lt;3.17.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105461" version="1" comment="mozilla-nss-32bit is &lt;3.17.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105462" version="1" comment="mozilla-nss-certs is &lt;3.17.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105463" version="1" comment="mozilla-nss-certs-32bit is &lt;3.17.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105467" version="1" comment="mozilla-nss-tools is &lt;3.17.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110329" version="1" comment="xen is &lt;4.4.2_06-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045104"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110335" version="1" comment="xen-kmp-default is &lt;4.4.2_06_k3.12.39_47-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045105"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110332" version="1" comment="xen-libs is &lt;4.4.2_06-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045104"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110331" version="1" comment="xen-libs-32bit is &lt;4.4.2_06-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045104"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110337" version="1" comment="flash-player is &lt;11.2.202.466-86.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045106"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110338" version="1" comment="flash-player-gnome is &lt;11.2.202.466-86.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045106"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110327" version="1" comment="wireshark is &lt;1.10.14-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045103"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110507" version="1" comment="kernel-default is &lt;3.12.43-52.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110509" version="1" comment="kernel-default-devel is &lt;3.12.43-52.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110510" version="1" comment="kernel-default-extra is &lt;3.12.43-52.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110499" version="1" comment="kernel-devel is &lt;3.12.43-52.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110500" version="1" comment="kernel-macros is &lt;3.12.43-52.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110501" version="1" comment="kernel-source is &lt;3.12.43-52.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110517" version="1" comment="kernel-syms is &lt;3.12.43-52.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110520" version="1" comment="kernel-xen is &lt;3.12.43-52.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110522" version="1" comment="kernel-xen-devel is &lt;3.12.43-52.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045120"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110560" version="1" comment="libldap-2_4-2 is &lt;2.4.39-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033420"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110561" version="1" comment="libldap-2_4-2-32bit is &lt;2.4.39-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110562" version="1" comment="openldap2-client is &lt;2.4.39-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030545"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045127"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110629" version="1" comment="xorg-x11-server is &lt;7.6_1.15.2-28.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110630" version="1" comment="xorg-x11-server-extra is &lt;7.6_1.15.2-28.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045142"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110661" version="1" comment="flash-player is &lt;11.2.202.468-89.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110662" version="1" comment="flash-player-gnome is &lt;11.2.202.468-89.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045150"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110698" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110699" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110702" version="1" comment="openssl is &lt;1.0.1i-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110759" version="1" comment="compat-openssl098 is &lt;0.9.8j-78.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045164"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110760" version="1" comment="libopenssl0_9_8 is &lt;0.9.8j-78.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045164"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110761" version="1" comment="libopenssl0_9_8-32bit is &lt;0.9.8j-78.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045164"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105415" version="1" comment="curl is &lt;7.37.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044430"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105418" version="1" comment="libcurl4 is &lt;7.37.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044430"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105417" version="1" comment="libcurl4-32bit is &lt;7.37.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044430"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110847" version="1" comment="libgcrypt is &lt;1.6.1-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036338"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110851" version="1" comment="libgcrypt20 is &lt;1.6.1-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009110852" version="1" comment="libgcrypt20-32bit is &lt;1.6.1-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038772"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045180"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111024" version="1" comment="bind is &lt;9.9.6P1-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045193"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111029" version="1" comment="bind-libs is &lt;9.9.6P1-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045193"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111028" version="1" comment="bind-libs-32bit is &lt;9.9.6P1-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045193"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111031" version="1" comment="bind-utils is &lt;9.9.6P1-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045193"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111113" version="1" comment="flash-player is &lt;11.2.202.481-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111114" version="1" comment="flash-player-gnome is &lt;11.2.202.481-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045204"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111508" version="1" comment="flash-player is &lt;11.2.202.491-96.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111509" version="1" comment="flash-player-gnome is &lt;11.2.202.491-96.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111445" version="1" comment="libecpg6 is &lt;9.3.8-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111447" version="1" comment="libpq5 is &lt;9.3.8-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111446" version="1" comment="libpq5-32bit is &lt;9.3.8-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111450" version="1" comment="postgresql93 is &lt;9.3.8-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038473"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111449" version="1" comment="postgresql93-libs is &lt;9.3.8-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105437" version="1" comment="libpng16 is &lt;1.6.8-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037592"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044433"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111472" version="1" comment="MozillaFirefox is &lt;31.8.0esr-37.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045251"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111475" version="1" comment="MozillaFirefox-translations is &lt;31.8.0esr-37.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045251"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111479" version="1" comment="libfreebl3 is &lt;3.19.2_CKBI_1.98-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111480" version="1" comment="libfreebl3-32bit is &lt;3.19.2_CKBI_1.98-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111483" version="1" comment="libsoftokn3 is &lt;3.19.2_CKBI_1.98-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111484" version="1" comment="libsoftokn3-32bit is &lt;3.19.2_CKBI_1.98-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111477" version="1" comment="mozilla-nspr is &lt;4.10.8-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111476" version="1" comment="mozilla-nspr-32bit is &lt;4.10.8-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111487" version="1" comment="mozilla-nss is &lt;3.19.2_CKBI_1.98-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111488" version="1" comment="mozilla-nss-32bit is &lt;3.19.2_CKBI_1.98-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111490" version="1" comment="mozilla-nss-certs is &lt;3.19.2_CKBI_1.98-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111491" version="1" comment="mozilla-nss-certs-32bit is &lt;3.19.2_CKBI_1.98-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111495" version="1" comment="mozilla-nss-tools is &lt;3.19.2_CKBI_1.98-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111459" version="1" comment="libmysqlclient18 is &lt;10.0.20-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111460" version="1" comment="libmysqlclient18-32bit is &lt;10.0.20-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111461" version="1" comment="libmysqlclient_r18 is &lt;10.0.20-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111462" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.20-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111465" version="1" comment="mariadb is &lt;10.0.20-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111467" version="1" comment="mariadb-client is &lt;10.0.20-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111469" version="1" comment="mariadb-errormessages is &lt;10.0.20-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111500" version="1" comment="xen is &lt;4.4.2_08-22.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045255"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111506" version="1" comment="xen-kmp-default is &lt;4.4.2_08_k3.12.43_52.6-22.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111503" version="1" comment="xen-libs is &lt;4.4.2_08-22.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045255"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111502" version="1" comment="xen-libs-32bit is &lt;4.4.2_08-22.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045255"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111511" version="1" comment="bind is &lt;9.9.6P1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045258"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111516" version="1" comment="bind-libs is &lt;9.9.6P1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045258"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111515" version="1" comment="bind-libs-32bit is &lt;9.9.6P1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045258"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111518" version="1" comment="bind-utils is &lt;9.9.6P1-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045258"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111526" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.85-18.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045262"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111530" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.85-18.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045262"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111572" version="1" comment="kernel-default is &lt;3.12.44-52.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111574" version="1" comment="kernel-default-devel is &lt;3.12.44-52.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111575" version="1" comment="kernel-default-extra is &lt;3.12.44-52.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111564" version="1" comment="kernel-devel is &lt;3.12.44-52.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111565" version="1" comment="kernel-macros is &lt;3.12.44-52.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111566" version="1" comment="kernel-source is &lt;3.12.44-52.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111582" version="1" comment="kernel-syms is &lt;3.12.44-52.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111585" version="1" comment="kernel-xen is &lt;3.12.44-52.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009111587" version="1" comment="kernel-xen-devel is &lt;3.12.44-52.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105429" version="1" comment="bind is &lt;9.9.5P1-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105434" version="1" comment="bind-libs is &lt;9.9.5P1-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105433" version="1" comment="bind-libs-32bit is &lt;9.9.5P1-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105436" version="1" comment="bind-utils is &lt;9.9.5P1-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113266" version="1" comment="libpython2_7-1_0 is &lt;2.7.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045508"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113267" version="1" comment="libpython2_7-1_0-32bit is &lt;2.7.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034538"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045508"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113274" version="1" comment="python is &lt;2.7.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045508"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113268" version="1" comment="python-base is &lt;2.7.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045508"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113276" version="1" comment="python-curses is &lt;2.7.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045508"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113270" version="1" comment="python-devel is &lt;2.7.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045508"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113280" version="1" comment="python-tk is &lt;2.7.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045508"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113271" version="1" comment="python-xml is &lt;2.7.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045508"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113425" version="1" comment="libqt4-sql-plugins is &lt;4.8.6-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105336" version="1" comment="evolution-data-server is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105339" version="1" comment="evolution-data-server-lang is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030993"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105340" version="1" comment="libcamel-1_2-45 is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038376"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105341" version="1" comment="libcamel-1_2-45-32bit is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038377"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105342" version="1" comment="libebackend-1_2-7 is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105343" version="1" comment="libebackend-1_2-7-32bit is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105344" version="1" comment="libebook-1_2-14 is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038380"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105345" version="1" comment="libebook-1_2-14-32bit is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038381"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105346" version="1" comment="libebook-contacts-1_2-0 is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038382"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105347" version="1" comment="libebook-contacts-1_2-0-32bit is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038383"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105348" version="1" comment="libecal-1_2-16 is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038384"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105349" version="1" comment="libecal-1_2-16-32bit is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038385"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105350" version="1" comment="libedata-book-1_2-20 is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038386"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105351" version="1" comment="libedata-book-1_2-20-32bit is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038387"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105352" version="1" comment="libedata-cal-1_2-23 is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038388"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105353" version="1" comment="libedata-cal-1_2-23-32bit is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038389"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105354" version="1" comment="libedataserver-1_2-18 is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038390"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105355" version="1" comment="libedataserver-1_2-18-32bit is &lt;3.10.4-5.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038391"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044423"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113504" version="1" comment="flash-player is &lt;11.2.202.508-99.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045526"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113505" version="1" comment="flash-player-gnome is &lt;11.2.202.508-99.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045526"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113520" version="1" comment="MozillaFirefox is &lt;31.8.0esr-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045530"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113523" version="1" comment="MozillaFirefox-translations is &lt;31.8.0esr-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045530"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113777" version="1" comment="xen is &lt;4.4.2_10-22.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113783" version="1" comment="xen-kmp-default is &lt;4.4.2_10_k3.12.44_52.10-22.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045564"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113780" version="1" comment="xen-libs is &lt;4.4.2_10-22.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113779" version="1" comment="xen-libs-32bit is &lt;4.4.2_10-22.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113667" version="1" comment="libQt5Core5 is &lt;5.3.1-4.4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045561"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113672" version="1" comment="libQt5DBus5 is &lt;5.3.1-4.4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038896"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045561"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113677" version="1" comment="libQt5Gui5 is &lt;5.3.1-4.4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037608"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045561"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113720" version="1" comment="libQt5Widgets5 is &lt;5.3.1-4.4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037614"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045561"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113725" version="1" comment="libqt5-qtbase is &lt;5.3.1-4.4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037616"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045561"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105070" version="1" comment="libyaml is &lt;0.1.6-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037638"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044364"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105069" version="1" comment="libyaml-0-2 is &lt;0.1.6-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037637"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044364"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105403" version="1" comment="rpm-python is &lt;4.11.2-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044428"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113856" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-27.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045575"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113857" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-27.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045575"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009113860" version="1" comment="openssl is &lt;1.0.1i-27.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045575"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105468" version="1" comment="flash-player is &lt;11.2.202.438-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044437"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105469" version="1" comment="flash-player-gnome is &lt;11.2.202.438-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044437"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105471" version="1" comment="flash-player is &lt;11.2.202.440-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044438"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105472" version="1" comment="flash-player-gnome is &lt;11.2.202.440-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044438"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105377" version="1" comment="binutils is &lt;2.24-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030609"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044426"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105598" version="1" comment="libsndfile is &lt;1.0.25-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044452"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114063" version="1" comment="MozillaFirefox is &lt;38.2.1esr-45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045605"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114062" version="1" comment="MozillaFirefox-branding-SLE is &lt;31.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038244"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045604"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114066" version="1" comment="MozillaFirefox-translations is &lt;38.2.1esr-45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045605"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114067" version="1" comment="libfreebl3 is &lt;3.19.2.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114068" version="1" comment="libfreebl3-32bit is &lt;3.19.2.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114071" version="1" comment="libsoftokn3 is &lt;3.19.2.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114072" version="1" comment="libsoftokn3-32bit is &lt;3.19.2.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114075" version="1" comment="mozilla-nss is &lt;3.19.2.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114076" version="1" comment="mozilla-nss-32bit is &lt;3.19.2.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114078" version="1" comment="mozilla-nss-certs is &lt;3.19.2.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114079" version="1" comment="mozilla-nss-certs-32bit is &lt;3.19.2.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114083" version="1" comment="mozilla-nss-tools is &lt;3.19.2.0-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114049" version="1" comment="bind is &lt;9.9.6P1-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045602"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114054" version="1" comment="bind-libs is &lt;9.9.6P1-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045602"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114053" version="1" comment="bind-libs-32bit is &lt;9.9.6P1-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045602"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114056" version="1" comment="bind-utils is &lt;9.9.6P1-26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045602"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105748" version="1" comment="kernel-default is &lt;3.12.36-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044478"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105750" version="1" comment="kernel-default-devel is &lt;3.12.36-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044478"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105751" version="1" comment="kernel-default-extra is &lt;3.12.36-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044478"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105740" version="1" comment="kernel-devel is &lt;3.12.36-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044478"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105741" version="1" comment="kernel-macros is &lt;3.12.36-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044478"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105742" version="1" comment="kernel-source is &lt;3.12.36-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044478"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105758" version="1" comment="kernel-syms is &lt;3.12.36-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044478"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105761" version="1" comment="kernel-xen is &lt;3.12.36-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044478"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105763" version="1" comment="kernel-xen-devel is &lt;3.12.36-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044478"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105738" version="1" comment="clamav is &lt;0.98.5-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044476"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114237" version="1" comment="zeromq is &lt;4.0.4-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038177"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045633"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105072" version="1" comment="jasper is &lt;1.900.1-166.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044365"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105074" version="1" comment="libjasper1 is &lt;1.900.1-166.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034778"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044365"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105075" version="1" comment="libjasper1-32bit is &lt;1.900.1-166.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034777"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044365"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114239" version="1" comment="libgcrypt is &lt;1.6.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036338"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045634"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114263" version="1" comment="qemu is &lt;2.0.2-48.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045637"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114265" version="1" comment="qemu-block-curl is &lt;2.0.2-48.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045637"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114268" version="1" comment="qemu-ipxe is &lt;1.0.0-48.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045638"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114269" version="1" comment="qemu-kvm is &lt;2.0.2-48.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045637"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114273" version="1" comment="qemu-seabios is &lt;1.7.4-48.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045639"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114274" version="1" comment="qemu-sgabios is &lt;8-48.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045640"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114275" version="1" comment="qemu-tools is &lt;2.0.2-48.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045637"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114276" version="1" comment="qemu-vgabios is &lt;1.7.4-48.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045639"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114277" version="1" comment="qemu-x86 is &lt;2.0.2-48.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045637"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105785" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044484"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105786" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044484"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105789" version="1" comment="openssl is &lt;1.0.1i-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044484"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114321" version="1" comment="openssh-askpass-gnome is &lt;6.6p1-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032625"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045651"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105816" version="1" comment="mpfr is &lt;3.1.2-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038432"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044491"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114336" version="1" comment="libsnmp30 is &lt;5.7.2.1-4.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037001"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045654"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114335" version="1" comment="libsnmp30-32bit is &lt;5.7.2.1-4.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045654"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114337" version="1" comment="net-snmp is &lt;5.7.2.1-4.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030550"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045654"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114341" version="1" comment="perl-SNMP is &lt;5.7.2.1-4.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030792"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045654"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114342" version="1" comment="snmp-mibs is &lt;5.7.2.1-4.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031643"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045654"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105980" version="1" comment="flash-player is &lt;11.2.202.442-67.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105981" version="1" comment="flash-player-gnome is &lt;11.2.202.442-67.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114454" version="1" comment="flash-player is &lt;11.2.202.521-102.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114455" version="1" comment="flash-player-gnome is &lt;11.2.202.521-102.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114432" version="1" comment="kernel-default is &lt;3.12.44-52.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114434" version="1" comment="kernel-default-devel is &lt;3.12.44-52.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114435" version="1" comment="kernel-default-extra is &lt;3.12.44-52.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114424" version="1" comment="kernel-devel is &lt;3.12.44-52.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114425" version="1" comment="kernel-macros is &lt;3.12.44-52.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114426" version="1" comment="kernel-source is &lt;3.12.44-52.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114442" version="1" comment="kernel-syms is &lt;3.12.44-52.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114445" version="1" comment="kernel-xen is &lt;3.12.44-52.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114447" version="1" comment="kernel-xen-devel is &lt;3.12.44-52.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045676"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105957" version="1" comment="libvirt is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105958" version="1" comment="libvirt-client is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105959" version="1" comment="libvirt-client-32bit is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105960" version="1" comment="libvirt-daemon is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105961" version="1" comment="libvirt-daemon-config-network is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105962" version="1" comment="libvirt-daemon-config-nwfilter is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105963" version="1" comment="libvirt-daemon-driver-interface is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105978" version="1" comment="libvirt-daemon-driver-libxl is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105964" version="1" comment="libvirt-daemon-driver-lxc is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105965" version="1" comment="libvirt-daemon-driver-network is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105966" version="1" comment="libvirt-daemon-driver-nodedev is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105967" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105968" version="1" comment="libvirt-daemon-driver-qemu is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105969" version="1" comment="libvirt-daemon-driver-secret is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105970" version="1" comment="libvirt-daemon-driver-storage is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105971" version="1" comment="libvirt-daemon-lxc is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105972" version="1" comment="libvirt-daemon-qemu is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105979" version="1" comment="libvirt-daemon-xen is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105975" version="1" comment="libvirt-doc is &lt;1.2.5-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114770" version="1" comment="MozillaFirefox is &lt;38.3.0esr-48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045704"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114773" version="1" comment="MozillaFirefox-translations is &lt;38.3.0esr-48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045704"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114775" version="1" comment="mozilla-nspr is &lt;4.10.9-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045705"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114774" version="1" comment="mozilla-nspr-32bit is &lt;4.10.9-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045705"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114953" version="1" comment="rpcbind is &lt;0.2.1_rc4-13.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045733"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114954" version="1" comment="libssh is &lt;0.6.3-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045734"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114985" version="1" comment="kernel-default is &lt;3.12.48-52.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114987" version="1" comment="kernel-default-devel is &lt;3.12.48-52.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114988" version="1" comment="kernel-default-extra is &lt;3.12.48-52.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114977" version="1" comment="kernel-devel is &lt;3.12.48-52.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114978" version="1" comment="kernel-macros is &lt;3.12.48-52.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114979" version="1" comment="kernel-source is &lt;3.12.48-52.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114995" version="1" comment="kernel-syms is &lt;3.12.48-52.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114998" version="1" comment="kernel-xen is &lt;3.12.48-52.27.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045741"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115000" version="1" comment="kernel-xen-devel is &lt;3.12.48-52.27.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045741"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106050" version="1" comment="libblkid1 is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106051" version="1" comment="libblkid1-32bit is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106054" version="1" comment="libmount1 is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106055" version="1" comment="libmount1-32bit is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038355"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106057" version="1" comment="libsmartcols1 is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106058" version="1" comment="libuuid-devel is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106060" version="1" comment="libuuid1 is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106061" version="1" comment="libuuid1-32bit is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106045" version="1" comment="python-libmount is &lt;2.25-10.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044527"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106062" version="1" comment="util-linux is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106063" version="1" comment="util-linux-lang is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106046" version="1" comment="util-linux-systemd is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106047" version="1" comment="uuidd is &lt;2.25-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044528"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115020" version="1" comment="libspice-server1 is &lt;0.12.4-8.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045746"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115021" version="1" comment="spice is &lt;0.12.4-8.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045746"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115023" version="1" comment="flash-player is &lt;11.2.202.535-105.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045747"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115024" version="1" comment="flash-player-gnome is &lt;11.2.202.535-105.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045747"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106066" version="1" comment="ntp is &lt;4.2.6p5-37.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044531"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106067" version="1" comment="ntp-doc is &lt;4.2.6p5-37.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044531"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115053" version="1" comment="flash-player is &lt;11.2.202.540-108.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045758"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115054" version="1" comment="flash-player-gnome is &lt;11.2.202.540-108.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045758"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116187" version="1" comment="strongswan is &lt;5.1.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031037"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045937"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116188" version="1" comment="strongswan-doc is &lt;5.1.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031036"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045937"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116189" version="1" comment="strongswan-ipsec is &lt;5.1.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033871"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045937"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116190" version="1" comment="strongswan-libs0 is &lt;5.1.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033872"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045937"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115065" version="1" comment="qemu is &lt;2.0.2-48.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045762"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115067" version="1" comment="qemu-block-curl is &lt;2.0.2-48.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045762"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115070" version="1" comment="qemu-ipxe is &lt;1.0.0-48.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045763"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115071" version="1" comment="qemu-kvm is &lt;2.0.2-48.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045762"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115075" version="1" comment="qemu-seabios is &lt;1.7.4-48.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115076" version="1" comment="qemu-sgabios is &lt;8-48.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115077" version="1" comment="qemu-tools is &lt;2.0.2-48.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045762"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115078" version="1" comment="qemu-vgabios is &lt;1.7.4-48.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115079" version="1" comment="qemu-x86 is &lt;2.0.2-48.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045762"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106108" version="1" comment="jasper is &lt;1.900.1-170.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106084" version="1" comment="krb5 is &lt;1.12.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044539"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106085" version="1" comment="krb5-32bit is &lt;1.12.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044539"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106086" version="1" comment="krb5-client is &lt;1.12.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044539"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115143" version="1" comment="postgresql93 is &lt;9.3.10-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038473"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045780"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115142" version="1" comment="postgresql93-libs is &lt;9.3.10-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038472"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045780"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106112" version="1" comment="clamav is &lt;0.98.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115384" version="1" comment="glibc is &lt;2.19-22.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115395" version="1" comment="glibc-32bit is &lt;2.19-22.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115385" version="1" comment="glibc-devel is &lt;2.19-22.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115396" version="1" comment="glibc-devel-32bit is &lt;2.19-22.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115389" version="1" comment="glibc-i18ndata is &lt;2.19-22.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115391" version="1" comment="glibc-locale is &lt;2.19-22.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115398" version="1" comment="glibc-locale-32bit is &lt;2.19-22.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115394" version="1" comment="nscd is &lt;2.19-22.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106135" version="1" comment="compat-openssl098 is &lt;0.9.8j-70.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044547"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106136" version="1" comment="libopenssl0_9_8 is &lt;0.9.8j-70.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044547"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106137" version="1" comment="libopenssl0_9_8-32bit is &lt;0.9.8j-70.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044547"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115562" version="1" comment="libvdpau is &lt;0.8-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038956"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115931" version="1" comment="xen is &lt;4.4.3_02-22.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115937" version="1" comment="xen-kmp-default is &lt;4.4.3_02_k3.12.48_52.27-22.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045887"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115934" version="1" comment="xen-libs is &lt;4.4.3_02-22.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115933" version="1" comment="xen-libs-32bit is &lt;4.4.3_02-22.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115569" version="1" comment="apache-commons-logging is &lt;1.1.3-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045852"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115570" version="1" comment="cmis-client is &lt;0.5.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039076"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045853"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115578" version="1" comment="graphite2 is &lt;1.3.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045856"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115582" version="1" comment="hyphen is &lt;2.8.8-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039088"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115585" version="1" comment="libabw is &lt;0.1.1-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045858"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115586" version="1" comment="libabw-0_1-1 is &lt;0.1.1-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039092"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045858"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115592" version="1" comment="libcdr is &lt;0.1.1-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045858"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115593" version="1" comment="libcdr-0_1-1 is &lt;0.1.1-5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039099"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045858"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115571" version="1" comment="libcmis-0_5-5 is &lt;0.5.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039077"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045853"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115597" version="1" comment="libe-book is &lt;0.1.2-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039103"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045860"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115598" version="1" comment="libe-book-0_1-1 is &lt;0.1.2-4.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039104"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045860"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115606" version="1" comment="libetonyek is &lt;0.1.3-3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039112"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045862"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115607" version="1" comment="libetonyek-0_1-1 is &lt;0.1.3-3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039113"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045862"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115615" version="1" comment="libfreehand is &lt;0.1.1-4.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039121"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045864"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115616" version="1" comment="libfreehand-0_1-1 is &lt;0.1.1-4.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045864"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115620" version="1" comment="libgltf is &lt;0.0.1-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045865"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115621" version="1" comment="libgltf-0_0-0 is &lt;0.0.1-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045865"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115580" version="1" comment="libgraphite2-3 is &lt;1.3.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045856"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115581" version="1" comment="libgraphite2-3-32bit is &lt;1.3.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039087"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045856"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115584" version="1" comment="libhyphen0 is &lt;2.8.8-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039090"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045857"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115623" version="1" comment="libixion is &lt;0.9.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045866"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115624" version="1" comment="libixion-0_10-0 is &lt;0.9.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045866"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115628" version="1" comment="liblangtag is &lt;0.5.7-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039134"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115631" version="1" comment="liblangtag1 is &lt;0.5.7-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115636" version="1" comment="libmspub is &lt;0.1.2-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045870"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115637" version="1" comment="libmspub-0_1-1 is &lt;0.1.2-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045870"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115641" version="1" comment="libmwaw is &lt;0.3.6-3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045871"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115642" version="1" comment="libmwaw-0_3-3 is &lt;0.3.6-3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045871"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115646" version="1" comment="libodfgen is &lt;0.1.4-3.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045872"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115647" version="1" comment="libodfgen-0_1-1 is &lt;0.1.4-3.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045872"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115650" version="1" comment="liborcus is &lt;0.7.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039156"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115651" version="1" comment="liborcus-0_8-0 is &lt;0.7.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039157"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115654" version="1" comment="libpagemaker is &lt;0.0.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045874"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115655" version="1" comment="libpagemaker-0_0-0 is &lt;0.0.2-2.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045874"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115659" version="1" comment="libreoffice-share-linker is &lt;1-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044802"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115660" version="1" comment="libreoffice-voikko is &lt;4.1-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034424"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045875"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115759" version="1" comment="librevenge-0_0-0 is &lt;0.0.2-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039171"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115763" version="1" comment="librevenge-stream-0_0-0 is &lt;0.0.2-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039175"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115766" version="1" comment="libvisio is &lt;0.1.3-4.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039178"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115767" version="1" comment="libvisio-0_1-1 is &lt;0.1.3-4.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039179"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115771" version="1" comment="libvoikko is &lt;3.7.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039183"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115773" version="1" comment="libvoikko1 is &lt;3.7.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039185"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115776" version="1" comment="libwps is &lt;0.4.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045880"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115777" version="1" comment="libwps-0_4-4 is &lt;0.4.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039189"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045880"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115780" version="1" comment="malaga-suomi is &lt;1.18-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039192"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045881"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115784" version="1" comment="myspell-af_ZA is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039196"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115787" version="1" comment="myspell-ar is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115805" version="1" comment="myspell-be_BY is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039217"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115806" version="1" comment="myspell-bg_BG is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039218"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115807" version="1" comment="myspell-bn_BD is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115811" version="1" comment="myspell-bs_BA is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115812" version="1" comment="myspell-ca is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115818" version="1" comment="myspell-cs_CZ is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039230"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115819" version="1" comment="myspell-da_DK is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039231"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115820" version="1" comment="myspell-de is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115824" version="1" comment="myspell-dictionaries is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039236"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115825" version="1" comment="myspell-el_GR is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115826" version="1" comment="myspell-en is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115844" version="1" comment="myspell-es is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039256"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115865" version="1" comment="myspell-et_EE is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039277"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115869" version="1" comment="myspell-fr_FR is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039281"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115875" version="1" comment="myspell-gu_IN is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039287"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115876" version="1" comment="myspell-he_IL is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115877" version="1" comment="myspell-hi_IN is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039289"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115878" version="1" comment="myspell-hr_HR is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039290"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115879" version="1" comment="myspell-hu_HU is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039291"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115882" version="1" comment="myspell-it_IT is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039294"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115890" version="1" comment="myspell-lo_LA is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115891" version="1" comment="myspell-lt_LT is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115892" version="1" comment="myspell-lv_LV is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115896" version="1" comment="myspell-nl_NL is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115898" version="1" comment="myspell-no is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115900" version="1" comment="myspell-pl_PL is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115902" version="1" comment="myspell-pt_BR is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039314"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115903" version="1" comment="myspell-pt_PT is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039315"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115904" version="1" comment="myspell-ro is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115906" version="1" comment="myspell-ru_RU is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039318"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115908" version="1" comment="myspell-sk_SK is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039320"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115909" version="1" comment="myspell-sl_SI is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039321"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115910" version="1" comment="myspell-sr is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039322"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115916" version="1" comment="myspell-sv_SE is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039328"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115919" version="1" comment="myspell-te_IN is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039331"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115920" version="1" comment="myspell-th_TH is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039332"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115922" version="1" comment="myspell-vi is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009115924" version="1" comment="myspell-zu_ZA is &lt;20150827-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039336"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045883"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105060" version="1" comment="xen is &lt;4.4.1_08-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044361"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105066" version="1" comment="xen-kmp-default is &lt;4.4.1_08_k3.12.28_4-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044362"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105063" version="1" comment="xen-libs is &lt;4.4.1_08-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044361"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009105062" version="1" comment="xen-libs-32bit is &lt;4.4.1_08-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044361"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116010" version="1" comment="MozillaFirefox-branding-SLE is &lt;31.0-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038244"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045900"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106166" version="1" comment="wireshark is &lt;1.10.12-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044553"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119270" version="1" comment="libsndfile is &lt;1.0.25-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117928" version="1" comment="libpng12 is &lt;1.2.50-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036867"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046349"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117929" version="1" comment="libpng12-0 is &lt;1.2.50-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030967"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046349"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117930" version="1" comment="libpng12-0-32bit is &lt;1.2.50-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046349"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117931" version="1" comment="libpng16 is &lt;1.6.8-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037592"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046350"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117932" version="1" comment="libpng16-16 is &lt;1.6.8-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037593"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046350"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117933" version="1" comment="libpng16-16-32bit is &lt;1.6.8-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037594"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046350"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119619" version="1" comment="libksba is &lt;1.3.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038296"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046614"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119620" version="1" comment="libksba8 is &lt;1.3.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046614"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116168" version="1" comment="dracut is &lt;037-51.17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045930"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106365" version="1" comment="qemu is &lt;2.0.2-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044572"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106367" version="1" comment="qemu-block-curl is &lt;2.0.2-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044572"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106370" version="1" comment="qemu-ipxe is &lt;1.0.0-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044573"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106371" version="1" comment="qemu-kvm is &lt;2.0.2-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044572"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106375" version="1" comment="qemu-seabios is &lt;1.7.4-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044574"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106376" version="1" comment="qemu-sgabios is &lt;8-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044575"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106377" version="1" comment="qemu-tools is &lt;2.0.2-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044572"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106378" version="1" comment="qemu-vgabios is &lt;1.7.4-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044574"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106379" version="1" comment="qemu-x86 is &lt;2.0.2-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044572"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119308" version="1" comment="LibVNCServer is &lt;0.9.9-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046585"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009116129" version="1" comment="sblim-sfcb is &lt;1.4.8-5.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106387" version="1" comment="libdcerpc-binding0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106386" version="1" comment="libdcerpc-binding0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106393" version="1" comment="libdcerpc0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106392" version="1" comment="libdcerpc0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106396" version="1" comment="libgensec0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106395" version="1" comment="libgensec0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106400" version="1" comment="libndr-krb5pac0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106399" version="1" comment="libndr-krb5pac0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106403" version="1" comment="libndr-nbt0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106402" version="1" comment="libndr-nbt0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106406" version="1" comment="libndr-standard0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106405" version="1" comment="libndr-standard0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106408" version="1" comment="libndr0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106407" version="1" comment="libndr0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106411" version="1" comment="libnetapi0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106410" version="1" comment="libnetapi0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106414" version="1" comment="libpdb0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037471"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106413" version="1" comment="libpdb0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037470"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106417" version="1" comment="libregistry0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106420" version="1" comment="libsamba-credentials0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106419" version="1" comment="libsamba-credentials0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106423" version="1" comment="libsamba-hostconfig0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106422" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106429" version="1" comment="libsamba-util0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106428" version="1" comment="libsamba-util0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106432" version="1" comment="libsamdb0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106431" version="1" comment="libsamdb0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106436" version="1" comment="libsmbclient-raw0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106435" version="1" comment="libsmbclient-raw0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106438" version="1" comment="libsmbclient0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106437" version="1" comment="libsmbclient0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106441" version="1" comment="libsmbconf0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106440" version="1" comment="libsmbconf0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106444" version="1" comment="libsmbldap0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106443" version="1" comment="libsmbldap0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106449" version="1" comment="libtevent-util0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106448" version="1" comment="libtevent-util0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106452" version="1" comment="libwbclient0 is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106451" version="1" comment="libwbclient0-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106454" version="1" comment="samba is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106453" version="1" comment="samba-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106456" version="1" comment="samba-client is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106455" version="1" comment="samba-client-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106458" version="1" comment="samba-doc is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106460" version="1" comment="samba-libs is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106459" version="1" comment="samba-libs-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106466" version="1" comment="samba-winbind is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106465" version="1" comment="samba-winbind-32bit is &lt;4.1.12-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044577"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118162" version="1" comment="kernel-default is &lt;3.12.51-52.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118163" version="1" comment="kernel-default-devel is &lt;3.12.51-52.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118164" version="1" comment="kernel-default-extra is &lt;3.12.51-52.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118165" version="1" comment="kernel-devel is &lt;3.12.51-52.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118166" version="1" comment="kernel-macros is &lt;3.12.51-52.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118167" version="1" comment="kernel-source is &lt;3.12.51-52.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118168" version="1" comment="kernel-syms is &lt;3.12.51-52.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118169" version="1" comment="kernel-xen is &lt;3.12.51-52.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118170" version="1" comment="kernel-xen-devel is &lt;3.12.51-52.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119604" version="1" comment="gdk-pixbuf is &lt;2.30.6-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030591"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046610"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119605" version="1" comment="gdk-pixbuf-lang is &lt;2.30.6-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037124"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046610"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119606" version="1" comment="gdk-pixbuf-query-loaders is &lt;2.30.6-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046610"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119607" version="1" comment="gdk-pixbuf-query-loaders-32bit is &lt;2.30.6-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046610"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119608" version="1" comment="libgdk_pixbuf-2_0-0 is &lt;2.30.6-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037131"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046610"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119609" version="1" comment="libgdk_pixbuf-2_0-0-32bit is &lt;2.30.6-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037132"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046610"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119610" version="1" comment="typelib-1_0-GdkPixbuf-2_0 is &lt;2.30.6-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038954"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046610"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106469" version="1" comment="libmspack is &lt;0.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044579"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106471" version="1" comment="libmspack0 is &lt;0.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038420"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044579"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118716" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-27.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046500"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118717" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-27.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046500"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118718" version="1" comment="openssl is &lt;1.0.1i-27.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046500"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118875" version="1" comment="flash-player is &lt;11.2.202.554-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046532"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118876" version="1" comment="flash-player-gnome is &lt;11.2.202.554-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046532"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106467" version="1" comment="vorbis-tools is &lt;1.4.0-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030840"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044578"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009106468" version="1" comment="vorbis-tools-lang is &lt;1.4.0-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038438"/>
		<state state_ref="oval:org.opensuse.security:ste:2009044578"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118563" version="1" comment="krb5 is &lt;1.12.1-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046467"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118564" version="1" comment="krb5-32bit is &lt;1.12.1-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046467"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118565" version="1" comment="krb5-client is &lt;1.12.1-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046467"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119014" version="1" comment="ldb is &lt;1.1.24-4.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038081"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046559"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119015" version="1" comment="libdcerpc-binding0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119016" version="1" comment="libdcerpc-binding0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119017" version="1" comment="libdcerpc0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119018" version="1" comment="libdcerpc0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119019" version="1" comment="libgensec0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119020" version="1" comment="libgensec0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119021" version="1" comment="libldb1 is &lt;1.1.24-4.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034884"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046559"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119022" version="1" comment="libldb1-32bit is &lt;1.1.24-4.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034886"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046559"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119023" version="1" comment="libndr-krb5pac0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119024" version="1" comment="libndr-krb5pac0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119025" version="1" comment="libndr-nbt0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119026" version="1" comment="libndr-nbt0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119027" version="1" comment="libndr-standard0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119028" version="1" comment="libndr-standard0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119029" version="1" comment="libndr0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119030" version="1" comment="libndr0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119031" version="1" comment="libnetapi0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119032" version="1" comment="libnetapi0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119033" version="1" comment="libpdb0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037471"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119034" version="1" comment="libpdb0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037470"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119035" version="1" comment="libregistry0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119036" version="1" comment="libsamba-credentials0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119037" version="1" comment="libsamba-credentials0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119038" version="1" comment="libsamba-hostconfig0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119039" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119040" version="1" comment="libsamba-util0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119041" version="1" comment="libsamba-util0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119042" version="1" comment="libsamdb0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119043" version="1" comment="libsamdb0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119044" version="1" comment="libsmbclient-raw0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119045" version="1" comment="libsmbclient-raw0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119046" version="1" comment="libsmbclient0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119047" version="1" comment="libsmbclient0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119048" version="1" comment="libsmbconf0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119049" version="1" comment="libsmbconf0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119050" version="1" comment="libsmbldap0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119051" version="1" comment="libsmbldap0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119052" version="1" comment="libtalloc2 is &lt;2.1.5-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046561"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119053" version="1" comment="libtalloc2-32bit is &lt;2.1.5-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046561"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119054" version="1" comment="libtdb1 is &lt;1.3.8-2.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032944"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119055" version="1" comment="libtdb1-32bit is &lt;1.3.8-2.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032942"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119056" version="1" comment="libtevent-util0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119057" version="1" comment="libtevent-util0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119058" version="1" comment="libtevent0 is &lt;0.9.26-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046556"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119059" version="1" comment="libtevent0-32bit is &lt;0.9.26-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034887"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046556"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119060" version="1" comment="libwbclient0 is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119061" version="1" comment="libwbclient0-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119062" version="1" comment="pytalloc is &lt;2.1.5-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046561"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119063" version="1" comment="pytalloc-32bit is &lt;2.1.5-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038087"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046561"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119064" version="1" comment="samba is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119065" version="1" comment="samba-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119066" version="1" comment="samba-client is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119067" version="1" comment="samba-client-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119068" version="1" comment="samba-doc is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119069" version="1" comment="samba-libs is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119070" version="1" comment="samba-libs-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119071" version="1" comment="samba-winbind is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119072" version="1" comment="samba-winbind-32bit is &lt;4.1.12-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046560"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119073" version="1" comment="talloc is &lt;2.1.5-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038089"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046561"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129268" version="1" comment="kernel-default is &lt;3.12.60-52.49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129269" version="1" comment="kernel-default-devel is &lt;3.12.60-52.49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129270" version="1" comment="kernel-default-extra is &lt;3.12.60-52.49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129271" version="1" comment="kernel-devel is &lt;3.12.60-52.49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129272" version="1" comment="kernel-macros is &lt;3.12.60-52.49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129273" version="1" comment="kernel-source is &lt;3.12.60-52.49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129274" version="1" comment="kernel-syms is &lt;3.12.60-52.49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129275" version="1" comment="kernel-xen is &lt;3.12.60-52.49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129276" version="1" comment="kernel-xen-devel is &lt;3.12.60-52.49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047736"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129277" version="1" comment="dhcp is &lt;4.2.6-14.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129278" version="1" comment="dhcp-client is &lt;4.2.6-14.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030726"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129279" version="1" comment="MozillaFirefox is &lt;45.2.0esr-75.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047738"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129280" version="1" comment="MozillaFirefox-branding-SLE is &lt;45.0-28.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038244"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047739"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129281" version="1" comment="MozillaFirefox-translations is &lt;45.2.0esr-75.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047738"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129385" version="1" comment="kernel-default is &lt;3.12.60-52.54.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047757"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129386" version="1" comment="kernel-default-devel is &lt;3.12.60-52.54.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047757"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129387" version="1" comment="kernel-default-extra is &lt;3.12.60-52.54.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047757"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129388" version="1" comment="kernel-devel is &lt;3.12.60-52.54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047759"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129389" version="1" comment="kernel-macros is &lt;3.12.60-52.54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047759"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129390" version="1" comment="kernel-source is &lt;3.12.60-52.54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047759"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129391" version="1" comment="kernel-syms is &lt;3.12.60-52.54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047759"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129392" version="1" comment="kernel-xen is &lt;3.12.60-52.54.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047757"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129393" version="1" comment="kernel-xen-devel is &lt;3.12.60-52.54.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047757"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129394" version="1" comment="glibc is &lt;2.19-22.16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047760"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129395" version="1" comment="glibc-32bit is &lt;2.19-22.16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047760"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129396" version="1" comment="glibc-devel is &lt;2.19-22.16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047760"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129397" version="1" comment="glibc-devel-32bit is &lt;2.19-22.16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047760"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129398" version="1" comment="glibc-i18ndata is &lt;2.19-22.16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047760"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129399" version="1" comment="glibc-locale is &lt;2.19-22.16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047760"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129400" version="1" comment="glibc-locale-32bit is &lt;2.19-22.16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047760"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129401" version="1" comment="nscd is &lt;2.19-22.16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047760"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129448" version="1" comment="boost is &lt;1.54.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031617"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129449" version="1" comment="boost-license1_54_0 is &lt;1.54.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040521"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129450" version="1" comment="cmis-client is &lt;0.5.1-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039076"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129451" version="1" comment="hunspell is &lt;1.3.2-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033415"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047769"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129452" version="1" comment="hunspell-32bit is &lt;1.3.2-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047769"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129453" version="1" comment="hunspell-tools is &lt;1.3.2-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040522"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047769"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129454" version="1" comment="hyphen is &lt;2.8.8-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039088"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129455" version="1" comment="libOpenCOLLADA0 is &lt;1_3335ac1-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040523"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047771"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129456" version="1" comment="libboost_atomic1_54_0 is &lt;1.54.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040524"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129457" version="1" comment="libboost_date_time1_54_0 is &lt;1.54.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040525"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129458" version="1" comment="libboost_filesystem1_54_0 is &lt;1.54.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040526"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129459" version="1" comment="libboost_iostreams1_54_0 is &lt;1.54.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040527"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129460" version="1" comment="libboost_program_options1_54_0 is &lt;1.54.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040528"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129461" version="1" comment="libboost_regex1_54_0 is &lt;1.54.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040529"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129462" version="1" comment="libboost_signals1_54_0 is &lt;1.54.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040530"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129463" version="1" comment="libboost_system1_54_0 is &lt;1.54.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129464" version="1" comment="libboost_thread1_54_0 is &lt;1.54.0-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040532"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129465" version="1" comment="libcmis-0_5-5 is &lt;0.5.1-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039077"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129466" version="1" comment="libetonyek is &lt;0.1.6-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039112"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047772"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129467" version="1" comment="libetonyek-0_1-1 is &lt;0.1.6-6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039113"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047772"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129468" version="1" comment="libhyphen0 is &lt;2.8.8-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039090"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129469" version="1" comment="libixion is &lt;0.11.0-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047773"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129470" version="1" comment="libixion-0_11-0 is &lt;0.11.0-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040533"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047773"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129471" version="1" comment="liborcus is &lt;0.11.0-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039156"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047774"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129472" version="1" comment="liborcus-0_11-0 is &lt;0.11.0-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040534"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047774"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129473" version="1" comment="libreoffice-base is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129474" version="1" comment="libreoffice-base-drivers-mysql is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129475" version="1" comment="libreoffice-base-drivers-postgresql is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129476" version="1" comment="libreoffice-calc is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129477" version="1" comment="libreoffice-calc-extensions is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129478" version="1" comment="libreoffice-draw is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129479" version="1" comment="libreoffice-filters-optional is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129480" version="1" comment="libreoffice-gnome is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129481" version="1" comment="libreoffice-icon-theme-galaxy is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129482" version="1" comment="libreoffice-icon-theme-tango is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129483" version="1" comment="libreoffice-impress is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129484" version="1" comment="libreoffice-l10n-af is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129485" version="1" comment="libreoffice-l10n-ar is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129486" version="1" comment="libreoffice-l10n-ca is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129487" version="1" comment="libreoffice-l10n-cs is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129488" version="1" comment="libreoffice-l10n-da is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129489" version="1" comment="libreoffice-l10n-de is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129490" version="1" comment="libreoffice-l10n-en is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129491" version="1" comment="libreoffice-l10n-es is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129492" version="1" comment="libreoffice-l10n-fi is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129493" version="1" comment="libreoffice-l10n-fr is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129494" version="1" comment="libreoffice-l10n-gu is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129495" version="1" comment="libreoffice-l10n-hi is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129496" version="1" comment="libreoffice-l10n-hu is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129497" version="1" comment="libreoffice-l10n-it is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129498" version="1" comment="libreoffice-l10n-ja is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129499" version="1" comment="libreoffice-l10n-ko is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129500" version="1" comment="libreoffice-l10n-nb is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129501" version="1" comment="libreoffice-l10n-nl is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129502" version="1" comment="libreoffice-l10n-nn is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129503" version="1" comment="libreoffice-l10n-pl is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129504" version="1" comment="libreoffice-l10n-pt-BR is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034145"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129505" version="1" comment="libreoffice-l10n-pt-PT is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129506" version="1" comment="libreoffice-l10n-ru is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129507" version="1" comment="libreoffice-l10n-sk is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129508" version="1" comment="libreoffice-l10n-sv is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129509" version="1" comment="libreoffice-l10n-xh is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129510" version="1" comment="libreoffice-l10n-zh-Hans is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038231"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129511" version="1" comment="libreoffice-l10n-zh-Hant is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129512" version="1" comment="libreoffice-l10n-zu is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129513" version="1" comment="libreoffice-mailmerge is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129514" version="1" comment="libreoffice-math is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129515" version="1" comment="libreoffice-officebean is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129516" version="1" comment="libreoffice-pyuno is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129517" version="1" comment="libreoffice-writer is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129518" version="1" comment="libreoffice-writer-extensions is &lt;5.1.3.2-22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129519" version="1" comment="libvisio is &lt;0.1.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039178"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129520" version="1" comment="libvisio-0_1-1 is &lt;0.1.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039179"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129521" version="1" comment="libwps is &lt;0.4.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129522" version="1" comment="libwps-0_4-4 is &lt;0.4.2-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039189"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129523" version="1" comment="myspell-af_NA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129524" version="1" comment="myspell-af_ZA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039196"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129525" version="1" comment="myspell-ar is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129526" version="1" comment="myspell-ar_AE is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039200"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129527" version="1" comment="myspell-ar_BH is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129528" version="1" comment="myspell-ar_DZ is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129529" version="1" comment="myspell-ar_EG is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039203"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129530" version="1" comment="myspell-ar_IQ is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039204"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129531" version="1" comment="myspell-ar_JO is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039205"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129532" version="1" comment="myspell-ar_KW is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039206"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129533" version="1" comment="myspell-ar_LB is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039207"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129534" version="1" comment="myspell-ar_LY is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039208"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129535" version="1" comment="myspell-ar_MA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039209"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129536" version="1" comment="myspell-ar_OM is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039210"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129537" version="1" comment="myspell-ar_QA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039211"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129538" version="1" comment="myspell-ar_SA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039212"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129539" version="1" comment="myspell-ar_SD is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129540" version="1" comment="myspell-ar_SY is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129541" version="1" comment="myspell-ar_TN is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129542" version="1" comment="myspell-ar_YE is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039216"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129543" version="1" comment="myspell-be_BY is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039217"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129544" version="1" comment="myspell-bg_BG is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039218"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129545" version="1" comment="myspell-bn_BD is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129546" version="1" comment="myspell-bn_IN is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039220"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129547" version="1" comment="myspell-bs is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129548" version="1" comment="myspell-bs_BA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129549" version="1" comment="myspell-ca is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129550" version="1" comment="myspell-ca_AD is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039225"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129551" version="1" comment="myspell-ca_ES is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039226"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129552" version="1" comment="myspell-ca_ES_valencia is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039227"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129553" version="1" comment="myspell-ca_FR is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129554" version="1" comment="myspell-ca_IT is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039229"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129555" version="1" comment="myspell-cs_CZ is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039230"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129556" version="1" comment="myspell-da_DK is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039231"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129557" version="1" comment="myspell-de is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129558" version="1" comment="myspell-de_AT is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039233"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129559" version="1" comment="myspell-de_CH is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129560" version="1" comment="myspell-de_DE is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039235"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129561" version="1" comment="myspell-dictionaries is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039236"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129562" version="1" comment="myspell-el_GR is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129563" version="1" comment="myspell-en is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129564" version="1" comment="myspell-en_AU is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039239"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129565" version="1" comment="myspell-en_BS is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039240"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129566" version="1" comment="myspell-en_BZ is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039241"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129567" version="1" comment="myspell-en_CA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039242"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129568" version="1" comment="myspell-en_GB is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039243"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129569" version="1" comment="myspell-en_GH is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039244"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129570" version="1" comment="myspell-en_IE is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129571" version="1" comment="myspell-en_IN is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039246"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129572" version="1" comment="myspell-en_JM is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039247"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129573" version="1" comment="myspell-en_MW is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129574" version="1" comment="myspell-en_NA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129575" version="1" comment="myspell-en_NZ is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039250"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129576" version="1" comment="myspell-en_PH is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039251"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129577" version="1" comment="myspell-en_TT is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039252"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129578" version="1" comment="myspell-en_US is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039253"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129579" version="1" comment="myspell-en_ZA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039254"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129580" version="1" comment="myspell-en_ZW is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039255"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129581" version="1" comment="myspell-es is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039256"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129582" version="1" comment="myspell-es_AR is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129583" version="1" comment="myspell-es_BO is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039258"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129584" version="1" comment="myspell-es_CL is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129585" version="1" comment="myspell-es_CO is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129586" version="1" comment="myspell-es_CR is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039261"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129587" version="1" comment="myspell-es_CU is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039262"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129588" version="1" comment="myspell-es_DO is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039263"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129589" version="1" comment="myspell-es_EC is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039264"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129590" version="1" comment="myspell-es_ES is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039265"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129591" version="1" comment="myspell-es_GT is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039266"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129592" version="1" comment="myspell-es_HN is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039267"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129593" version="1" comment="myspell-es_MX is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039268"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129594" version="1" comment="myspell-es_NI is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039269"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129595" version="1" comment="myspell-es_PA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039270"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129596" version="1" comment="myspell-es_PE is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039271"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129597" version="1" comment="myspell-es_PR is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039272"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129598" version="1" comment="myspell-es_PY is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129599" version="1" comment="myspell-es_SV is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039274"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129600" version="1" comment="myspell-es_UY is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129601" version="1" comment="myspell-es_VE is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039276"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129602" version="1" comment="myspell-et_EE is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039277"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129603" version="1" comment="myspell-fr_BE is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039278"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129604" version="1" comment="myspell-fr_CA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039279"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129605" version="1" comment="myspell-fr_CH is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039280"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129606" version="1" comment="myspell-fr_FR is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039281"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129607" version="1" comment="myspell-fr_LU is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039282"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129608" version="1" comment="myspell-fr_MC is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039283"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129609" version="1" comment="myspell-gu_IN is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039287"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129610" version="1" comment="myspell-he_IL is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129611" version="1" comment="myspell-hi_IN is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039289"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129612" version="1" comment="myspell-hr_HR is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039290"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129613" version="1" comment="myspell-hu_HU is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039291"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129614" version="1" comment="myspell-it_IT is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039294"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129615" version="1" comment="myspell-lightproof-en is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039298"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129616" version="1" comment="myspell-lightproof-hu_HU is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039299"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129617" version="1" comment="myspell-lightproof-pt_BR is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129618" version="1" comment="myspell-lightproof-ru_RU is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129619" version="1" comment="myspell-lo_LA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129620" version="1" comment="myspell-lt_LT is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129621" version="1" comment="myspell-lv_LV is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129622" version="1" comment="myspell-nb_NO is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039305"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129623" version="1" comment="myspell-nl_BE is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129624" version="1" comment="myspell-nl_NL is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129625" version="1" comment="myspell-nn_NO is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129626" version="1" comment="myspell-no is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129627" version="1" comment="myspell-pl_PL is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129628" version="1" comment="myspell-pt_AO is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129629" version="1" comment="myspell-pt_BR is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039314"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129630" version="1" comment="myspell-pt_PT is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039315"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129631" version="1" comment="myspell-ro is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129632" version="1" comment="myspell-ro_RO is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039317"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129633" version="1" comment="myspell-ru_RU is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039318"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129634" version="1" comment="myspell-sk_SK is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039320"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129635" version="1" comment="myspell-sl_SI is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039321"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129636" version="1" comment="myspell-sr is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039322"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129637" version="1" comment="myspell-sr_CS is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039323"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129638" version="1" comment="myspell-sr_Latn_CS is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039324"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129639" version="1" comment="myspell-sr_Latn_RS is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039325"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129640" version="1" comment="myspell-sr_RS is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039326"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129641" version="1" comment="myspell-sv_FI is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039327"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129642" version="1" comment="myspell-sv_SE is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039328"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129643" version="1" comment="myspell-te is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039330"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129644" version="1" comment="myspell-te_IN is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039331"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129645" version="1" comment="myspell-th_TH is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039332"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129646" version="1" comment="myspell-vi is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129647" version="1" comment="myspell-vi_VN is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039335"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129648" version="1" comment="myspell-zu_ZA is &lt;20160511-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039336"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129649" version="1" comment="openCOLLADA is &lt;1_3335ac1-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040535"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047771"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121563" version="1" comment="libtiff5 is &lt;4.0.6-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121564" version="1" comment="libtiff5-32bit is &lt;4.0.6-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121565" version="1" comment="tiff is &lt;4.0.6-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046810"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121131" version="1" comment="kernel-default is &lt;3.12.51-52.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121132" version="1" comment="kernel-default-devel is &lt;3.12.51-52.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121133" version="1" comment="kernel-default-extra is &lt;3.12.51-52.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121134" version="1" comment="kernel-devel is &lt;3.12.51-52.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121135" version="1" comment="kernel-macros is &lt;3.12.51-52.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121136" version="1" comment="kernel-source is &lt;3.12.51-52.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121137" version="1" comment="kernel-syms is &lt;3.12.51-52.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121138" version="1" comment="kernel-xen is &lt;3.12.51-52.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121139" version="1" comment="kernel-xen-devel is &lt;3.12.51-52.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118755" version="1" comment="qemu is &lt;2.0.2-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046509"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118756" version="1" comment="qemu-block-curl is &lt;2.0.2-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046509"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118757" version="1" comment="qemu-ipxe is &lt;1.0.0-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046510"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118758" version="1" comment="qemu-kvm is &lt;2.0.2-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046509"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118759" version="1" comment="qemu-seabios is &lt;1.7.4-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118760" version="1" comment="qemu-sgabios is &lt;8-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046512"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118761" version="1" comment="qemu-tools is &lt;2.0.2-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046509"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118762" version="1" comment="qemu-vgabios is &lt;1.7.4-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118763" version="1" comment="qemu-x86 is &lt;2.0.2-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046509"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121168" version="1" comment="rsync is &lt;3.1.0-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030761"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046751"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121331" version="1" comment="libxml2 is &lt;2.9.1-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121332" version="1" comment="libxml2-2 is &lt;2.9.1-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121333" version="1" comment="libxml2-2-32bit is &lt;2.9.1-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121334" version="1" comment="libxml2-tools is &lt;2.9.1-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121335" version="1" comment="python-libxml2 is &lt;2.9.1-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046770"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121634" version="1" comment="bind is &lt;9.9.6P1-28.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121635" version="1" comment="bind-libs is &lt;9.9.6P1-28.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121636" version="1" comment="bind-libs-32bit is &lt;9.9.6P1-28.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121637" version="1" comment="bind-utils is &lt;9.9.6P1-28.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121622" version="1" comment="giflib is &lt;5.0.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032176"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121623" version="1" comment="libgif6 is &lt;5.0.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039791"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121624" version="1" comment="libgif6-32bit is &lt;5.0.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039792"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046814"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121625" version="1" comment="kernel-default is &lt;3.12.51-52.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121626" version="1" comment="kernel-default-devel is &lt;3.12.51-52.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121627" version="1" comment="kernel-default-extra is &lt;3.12.51-52.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121628" version="1" comment="kernel-devel is &lt;3.12.51-52.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121629" version="1" comment="kernel-macros is &lt;3.12.51-52.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121630" version="1" comment="kernel-source is &lt;3.12.51-52.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121631" version="1" comment="kernel-syms is &lt;3.12.51-52.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121632" version="1" comment="kernel-xen is &lt;3.12.51-52.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121633" version="1" comment="kernel-xen-devel is &lt;3.12.51-52.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046813"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118608" version="1" comment="libldap-2_4-2 is &lt;2.4.41-18.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033420"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046477"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118609" version="1" comment="libldap-2_4-2-32bit is &lt;2.4.41-18.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046477"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118610" version="1" comment="openldap2-client is &lt;2.4.41-18.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030545"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046477"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121140" version="1" comment="gdk-pixbuf is &lt;2.30.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030591"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046746"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121141" version="1" comment="gdk-pixbuf-lang is &lt;2.30.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037124"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046746"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121142" version="1" comment="gdk-pixbuf-query-loaders is &lt;2.30.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046746"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121143" version="1" comment="gdk-pixbuf-query-loaders-32bit is &lt;2.30.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046746"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121144" version="1" comment="libgdk_pixbuf-2_0-0 is &lt;2.30.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037131"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046746"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121145" version="1" comment="libgdk_pixbuf-2_0-0-32bit is &lt;2.30.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037132"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046746"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121146" version="1" comment="typelib-1_0-GdkPixbuf-2_0 is &lt;2.30.6-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038954"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046746"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119223" version="1" comment="libpng16 is &lt;1.6.8-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037592"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046569"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122055" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.95-24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046854"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122058" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.95-24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046854"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121001" version="1" comment="libvirt is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121002" version="1" comment="libvirt-client is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121003" version="1" comment="libvirt-client-32bit is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121004" version="1" comment="libvirt-daemon is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121005" version="1" comment="libvirt-daemon-config-network is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121006" version="1" comment="libvirt-daemon-config-nwfilter is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121007" version="1" comment="libvirt-daemon-driver-interface is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121008" version="1" comment="libvirt-daemon-driver-libxl is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121009" version="1" comment="libvirt-daemon-driver-lxc is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121010" version="1" comment="libvirt-daemon-driver-network is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121011" version="1" comment="libvirt-daemon-driver-nodedev is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121012" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121013" version="1" comment="libvirt-daemon-driver-qemu is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121014" version="1" comment="libvirt-daemon-driver-secret is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121015" version="1" comment="libvirt-daemon-driver-storage is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121016" version="1" comment="libvirt-daemon-lxc is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121017" version="1" comment="libvirt-daemon-qemu is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121018" version="1" comment="libvirt-daemon-xen is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121019" version="1" comment="libvirt-doc is &lt;1.2.5-27.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046737"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122759" version="1" comment="MozillaFirefox is &lt;38.6.0esr-57.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122404" version="1" comment="MozillaFirefox-branding-SLE is &lt;31.0-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038244"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046895"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122760" version="1" comment="MozillaFirefox-translations is &lt;38.6.0esr-57.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046966"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122761" version="1" comment="libfreebl3 is &lt;3.20.2-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122762" version="1" comment="libfreebl3-32bit is &lt;3.20.2-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122763" version="1" comment="libsoftokn3 is &lt;3.20.2-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122764" version="1" comment="libsoftokn3-32bit is &lt;3.20.2-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122765" version="1" comment="mozilla-nss is &lt;3.20.2-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122766" version="1" comment="mozilla-nss-32bit is &lt;3.20.2-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122767" version="1" comment="mozilla-nss-certs is &lt;3.20.2-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122768" version="1" comment="mozilla-nss-certs-32bit is &lt;3.20.2-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122769" version="1" comment="mozilla-nss-sysinit is &lt;3.20.2-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122770" version="1" comment="mozilla-nss-sysinit-32bit is &lt;3.20.2-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122771" version="1" comment="mozilla-nss-tools is &lt;3.20.2-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118764" version="1" comment="libmspack is &lt;0.4-14.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046513"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122211" version="1" comment="curl is &lt;7.37.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046869"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122212" version="1" comment="libcurl4 is &lt;7.37.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046869"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122213" version="1" comment="libcurl4-32bit is &lt;7.37.0-18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046869"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123016" version="1" comment="flash-player is &lt;11.2.202.569-120.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047010"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123017" version="1" comment="flash-player-gnome is &lt;11.2.202.569-120.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047010"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122487" version="1" comment="krb5 is &lt;1.12.1-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046909"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122488" version="1" comment="krb5-32bit is &lt;1.12.1-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046909"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122489" version="1" comment="krb5-client is &lt;1.12.1-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046909"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123013" version="1" comment="libnettle is &lt;2.7.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039815"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122324" version="1" comment="glibc is &lt;2.19-22.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122325" version="1" comment="glibc-32bit is &lt;2.19-22.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122326" version="1" comment="glibc-devel is &lt;2.19-22.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122327" version="1" comment="glibc-devel-32bit is &lt;2.19-22.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122328" version="1" comment="glibc-i18ndata is &lt;2.19-22.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122329" version="1" comment="glibc-locale is &lt;2.19-22.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122330" version="1" comment="glibc-locale-32bit is &lt;2.19-22.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122331" version="1" comment="nscd is &lt;2.19-22.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046885"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123489" version="1" comment="postgresql93 is &lt;9.3.11-14.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038473"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047102"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122214" version="1" comment="dhcp is &lt;4.2.6-14.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046870"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122215" version="1" comment="dhcp-client is &lt;4.2.6-14.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030726"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046870"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123662" version="1" comment="libecpg6 is &lt;9.4.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123663" version="1" comment="libpq5 is &lt;9.4.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123664" version="1" comment="libpq5-32bit is &lt;9.4.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123665" version="1" comment="postgresql94 is &lt;9.4.6-7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039800"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047138"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123666" version="1" comment="postgresql94-libs is &lt;9.4.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039799"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123667" version="1" comment="MozillaFirefox is &lt;38.6.1esr-60.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047139"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123668" version="1" comment="MozillaFirefox-translations is &lt;38.6.1esr-60.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047139"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123864" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-27.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047162"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123865" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-27.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047162"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123866" version="1" comment="openssl is &lt;1.0.1i-27.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047162"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123867" version="1" comment="libssh is &lt;0.6.3-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047163"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124405" version="1" comment="compat-openssl098 is &lt;0.9.8j-94.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124406" version="1" comment="libopenssl0_9_8 is &lt;0.9.8j-94.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124407" version="1" comment="libopenssl0_9_8-32bit is &lt;0.9.8j-94.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119220" version="1" comment="libpng12 is &lt;1.2.50-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036867"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046568"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119282" version="1" comment="libxml2 is &lt;2.9.1-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046581"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119283" version="1" comment="libxml2-2 is &lt;2.9.1-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046581"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119284" version="1" comment="libxml2-2-32bit is &lt;2.9.1-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046581"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119285" version="1" comment="libxml2-tools is &lt;2.9.1-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046581"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119286" version="1" comment="python-libxml2 is &lt;2.9.1-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046581"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124477" version="1" comment="libotr is &lt;4.0.0-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047205"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124589" version="1" comment="flash-player is &lt;11.2.202.577-123.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124590" version="1" comment="flash-player-gnome is &lt;11.2.202.577-123.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047218"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124591" version="1" comment="libssh2-1 is &lt;1.4.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038580"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047219"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124592" version="1" comment="libssh2-1-32bit is &lt;1.4.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047219"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124593" version="1" comment="libssh2_org is &lt;1.4.3-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047219"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124594" version="1" comment="MozillaFirefox is &lt;38.7.0esr-63.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047220"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124595" version="1" comment="MozillaFirefox-translations is &lt;38.7.0esr-63.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047220"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124596" version="1" comment="libfreebl3 is &lt;3.20.2-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124597" version="1" comment="libfreebl3-32bit is &lt;3.20.2-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124598" version="1" comment="libsoftokn3 is &lt;3.20.2-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124599" version="1" comment="libsoftokn3-32bit is &lt;3.20.2-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124600" version="1" comment="mozilla-nspr is &lt;4.12-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047222"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124601" version="1" comment="mozilla-nspr-32bit is &lt;4.12-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047222"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124602" version="1" comment="mozilla-nss is &lt;3.20.2-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124603" version="1" comment="mozilla-nss-32bit is &lt;3.20.2-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124604" version="1" comment="mozilla-nss-certs is &lt;3.20.2-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124605" version="1" comment="mozilla-nss-certs-32bit is &lt;3.20.2-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124606" version="1" comment="mozilla-nss-sysinit is &lt;3.20.2-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124607" version="1" comment="mozilla-nss-sysinit-32bit is &lt;3.20.2-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124608" version="1" comment="mozilla-nss-tools is &lt;3.20.2-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124728" version="1" comment="graphite2 is &lt;1.3.1-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047245"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124731" version="1" comment="bind is &lt;9.9.6P1-28.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047246"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124732" version="1" comment="bind-libs is &lt;9.9.6P1-28.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047246"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124733" version="1" comment="bind-libs-32bit is &lt;9.9.6P1-28.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047246"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124734" version="1" comment="bind-utils is &lt;9.9.6P1-28.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047246"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124800" version="1" comment="kernel-default is &lt;3.12.55-52.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124801" version="1" comment="kernel-default-devel is &lt;3.12.55-52.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124802" version="1" comment="kernel-default-extra is &lt;3.12.55-52.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124803" version="1" comment="kernel-devel is &lt;3.12.55-52.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124804" version="1" comment="kernel-macros is &lt;3.12.55-52.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124805" version="1" comment="kernel-source is &lt;3.12.55-52.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124806" version="1" comment="kernel-syms is &lt;3.12.55-52.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124807" version="1" comment="kernel-xen is &lt;3.12.55-52.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124808" version="1" comment="kernel-xen-devel is &lt;3.12.55-52.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124880" version="1" comment="libdcerpc-binding0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124881" version="1" comment="libdcerpc-binding0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124882" version="1" comment="libdcerpc0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124883" version="1" comment="libdcerpc0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124884" version="1" comment="libgensec0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124885" version="1" comment="libgensec0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124886" version="1" comment="libndr-krb5pac0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124887" version="1" comment="libndr-krb5pac0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124888" version="1" comment="libndr-nbt0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124889" version="1" comment="libndr-nbt0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124890" version="1" comment="libndr-standard0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124891" version="1" comment="libndr-standard0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124892" version="1" comment="libndr0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124893" version="1" comment="libndr0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124894" version="1" comment="libnetapi0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124895" version="1" comment="libnetapi0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124896" version="1" comment="libpdb0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037471"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124897" version="1" comment="libpdb0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037470"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124898" version="1" comment="libregistry0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124899" version="1" comment="libsamba-credentials0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124900" version="1" comment="libsamba-credentials0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124901" version="1" comment="libsamba-hostconfig0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124902" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124903" version="1" comment="libsamba-util0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124904" version="1" comment="libsamba-util0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124905" version="1" comment="libsamdb0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124906" version="1" comment="libsamdb0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124907" version="1" comment="libsmbclient-raw0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124908" version="1" comment="libsmbclient-raw0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124909" version="1" comment="libsmbclient0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124910" version="1" comment="libsmbclient0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124911" version="1" comment="libsmbconf0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124912" version="1" comment="libsmbconf0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124913" version="1" comment="libsmbldap0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124914" version="1" comment="libsmbldap0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124915" version="1" comment="libtevent-util0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124916" version="1" comment="libtevent-util0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124917" version="1" comment="libwbclient0 is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124918" version="1" comment="libwbclient0-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124919" version="1" comment="samba is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124920" version="1" comment="samba-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124921" version="1" comment="samba-client is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124922" version="1" comment="samba-client-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124923" version="1" comment="samba-doc is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124924" version="1" comment="samba-libs is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124925" version="1" comment="samba-libs-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124926" version="1" comment="samba-winbind is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124927" version="1" comment="samba-winbind-32bit is &lt;4.1.12-18.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047268"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125276" version="1" comment="libqt4-sql-plugins is &lt;4.8.6-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125492" version="1" comment="pidgin-otr is &lt;4.0.0-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033522"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047325"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125669" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.99-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047343"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125670" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.99-27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047343"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125718" version="1" comment="libatomic1 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125719" version="1" comment="libatomic1-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040367"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125720" version="1" comment="libcilkrts5 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040343"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125721" version="1" comment="libcilkrts5-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125722" version="1" comment="libffi-gcc5 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125725" version="1" comment="libgcc_s1 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125726" version="1" comment="libgcc_s1-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040359"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125727" version="1" comment="libgfortran3 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040348"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125728" version="1" comment="libgfortran3-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125729" version="1" comment="libgomp1 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125730" version="1" comment="libgomp1-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125731" version="1" comment="libitm1 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040349"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125732" version="1" comment="libitm1-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125733" version="1" comment="liblsan0 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040351"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125738" version="1" comment="libquadmath0 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040352"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125739" version="1" comment="libquadmath0-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125740" version="1" comment="libstdc++6 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040364"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125741" version="1" comment="libstdc++6-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040365"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125742" version="1" comment="libstdc++6-locale is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040366"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125743" version="1" comment="libtsan0 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040355"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125744" version="1" comment="libubsan0 is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125745" version="1" comment="libubsan0-32bit is &lt;5.3.1+r233831-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047352"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125746" version="1" comment="flash-player is &lt;11.2.202.616-126.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047355"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125747" version="1" comment="flash-player-gnome is &lt;11.2.202.616-126.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047355"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125748" version="1" comment="krb5 is &lt;1.12.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047353"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125749" version="1" comment="krb5-32bit is &lt;1.12.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047353"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125750" version="1" comment="krb5-client is &lt;1.12.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047353"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127078" version="1" comment="python-backports.ssl_match_hostname is &lt;3.4.0.2-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040421"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047470"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127079" version="1" comment="python-tornado is &lt;4.2.1-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047471"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125751" version="1" comment="libdcerpc-binding0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125752" version="1" comment="libdcerpc-binding0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125753" version="1" comment="libdcerpc0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125754" version="1" comment="libdcerpc0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125755" version="1" comment="libgensec0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125756" version="1" comment="libgensec0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125757" version="1" comment="libndr-krb5pac0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125758" version="1" comment="libndr-krb5pac0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125759" version="1" comment="libndr-nbt0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125760" version="1" comment="libndr-nbt0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125761" version="1" comment="libndr-standard0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125762" version="1" comment="libndr-standard0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125763" version="1" comment="libndr0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125764" version="1" comment="libndr0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125765" version="1" comment="libnetapi0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125766" version="1" comment="libnetapi0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125767" version="1" comment="libregistry0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125768" version="1" comment="libsamba-credentials0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125769" version="1" comment="libsamba-credentials0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125770" version="1" comment="libsamba-hostconfig0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125771" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125772" version="1" comment="libsamba-passdb0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125773" version="1" comment="libsamba-passdb0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125774" version="1" comment="libsamba-util0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125775" version="1" comment="libsamba-util0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125776" version="1" comment="libsamdb0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125777" version="1" comment="libsamdb0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125778" version="1" comment="libsmbclient-raw0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125779" version="1" comment="libsmbclient-raw0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125780" version="1" comment="libsmbclient0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125781" version="1" comment="libsmbclient0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125782" version="1" comment="libsmbconf0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125783" version="1" comment="libsmbconf0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125784" version="1" comment="libsmbldap0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125785" version="1" comment="libsmbldap0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125786" version="1" comment="libtevent-util0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125787" version="1" comment="libtevent-util0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125788" version="1" comment="libwbclient0 is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125789" version="1" comment="libwbclient0-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125790" version="1" comment="samba is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125791" version="1" comment="samba-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125792" version="1" comment="samba-client is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125793" version="1" comment="samba-client-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125794" version="1" comment="samba-doc is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125795" version="1" comment="samba-libs is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125796" version="1" comment="samba-libs-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125797" version="1" comment="samba-winbind is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125798" version="1" comment="samba-winbind-32bit is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126091" version="1" comment="libxerces-c-3_1 is &lt;3.1.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038592"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047381"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126092" version="1" comment="libxerces-c-3_1-32bit is &lt;3.1.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038593"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047381"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126093" version="1" comment="xerces-c is &lt;3.1.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038595"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047381"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126428" version="1" comment="libgcrypt is &lt;1.6.1-16.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036338"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047402"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126429" version="1" comment="libgcrypt20 is &lt;1.6.1-16.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047402"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126430" version="1" comment="libgcrypt20-32bit is &lt;1.6.1-16.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038772"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047402"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126453" version="1" comment="cairo is &lt;1.12.16-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031471"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047406"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126454" version="1" comment="libcairo-gobject2 is &lt;1.12.16-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040386"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047406"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126455" version="1" comment="libcairo-gobject2-32bit is &lt;1.12.16-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040387"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047406"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126456" version="1" comment="libcairo2 is &lt;1.12.16-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040390"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047406"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126457" version="1" comment="libcairo2-32bit is &lt;1.12.16-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040391"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047406"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126708" version="1" comment="giflib is &lt;5.0.5-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032176"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047430"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127080" version="1" comment="libxml2 is &lt;2.9.1-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127081" version="1" comment="libxml2-2 is &lt;2.9.1-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127082" version="1" comment="libxml2-2-32bit is &lt;2.9.1-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127083" version="1" comment="libxml2-tools is &lt;2.9.1-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127084" version="1" comment="python-libxml2 is &lt;2.9.1-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127133" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-27.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047480"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127134" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-27.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047480"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127135" version="1" comment="openssl is &lt;1.0.1i-27.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047480"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127260" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.101-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047500"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127261" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.101-30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047500"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127262" version="1" comment="ntp is &lt;4.2.8p6-46.5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047501"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127263" version="1" comment="ntp-doc is &lt;4.2.8p6-46.5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047501"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127264" version="1" comment="yast2-ntp-client is &lt;3.1.12.4-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047502"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127265" version="1" comment="MozillaFirefox is &lt;38.8.0esr-66.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047503"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127266" version="1" comment="MozillaFirefox-translations is &lt;38.8.0esr-66.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047503"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127284" version="1" comment="ImageMagick is &lt;6.8.8.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047506"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127285" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047506"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127286" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047506"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127287" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047506"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127288" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047506"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127361" version="1" comment="compat-openssl098 is &lt;0.9.8j-97.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047514"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127362" version="1" comment="libopenssl0_9_8 is &lt;0.9.8j-97.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031008"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047514"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127363" version="1" comment="libopenssl0_9_8-32bit is &lt;0.9.8j-97.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031006"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047514"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120991" version="1" comment="wireshark is &lt;1.12.9-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046731"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127579" version="1" comment="flash-player is &lt;11.2.202.621-130.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047535"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127580" version="1" comment="flash-player-gnome is &lt;11.2.202.621-130.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047535"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127594" version="1" comment="xen is &lt;4.4.4_02-22.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047539"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127595" version="1" comment="xen-kmp-default is &lt;4.4.4_02_k3.12.55_52.42-22.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047540"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127596" version="1" comment="xen-libs is &lt;4.4.4_02-22.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047539"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127597" version="1" comment="xen-libs-32bit is &lt;4.4.4_02-22.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047539"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127715" version="1" comment="wireshark is &lt;1.12.11-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047556"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127716" version="1" comment="libgudev-1_0-0 is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127717" version="1" comment="libgudev-1_0-0-32bit is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037376"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127718" version="1" comment="libudev1 is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127719" version="1" comment="libudev1-32bit is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127720" version="1" comment="systemd is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127721" version="1" comment="systemd-32bit is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127722" version="1" comment="systemd-bash-completion is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127723" version="1" comment="systemd-sysvinit is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127724" version="1" comment="udev is &lt;210-70.48.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047554"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128012" version="1" comment="openssh is &lt;6.6p1-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047588"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128013" version="1" comment="openssh-askpass-gnome is &lt;6.6p1-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032625"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047588"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128014" version="1" comment="openssh-helpers is &lt;6.6p1-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047588"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121336" version="1" comment="openssh is &lt;6.6p1-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046771"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121337" version="1" comment="openssh-askpass-gnome is &lt;6.6p1-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032625"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046771"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121338" version="1" comment="openssh-helpers is &lt;6.6p1-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046771"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119512" version="1" comment="libmysqlclient18 is &lt;10.0.22-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119513" version="1" comment="libmysqlclient18-32bit is &lt;10.0.22-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119514" version="1" comment="libmysqlclient_r18 is &lt;10.0.22-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119515" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.22-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119516" version="1" comment="mariadb is &lt;10.0.22-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119517" version="1" comment="mariadb-client is &lt;10.0.22-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119518" version="1" comment="mariadb-errormessages is &lt;10.0.22-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128463" version="1" comment="supportutils is &lt;3.0-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034036"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047634"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128467" version="1" comment="libksba is &lt;1.3.0-23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038296"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128615" version="1" comment="libxml2 is &lt;2.9.1-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047655"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128616" version="1" comment="libxml2-2 is &lt;2.9.1-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047655"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128617" version="1" comment="libxml2-2-32bit is &lt;2.9.1-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047655"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128618" version="1" comment="libxml2-tools is &lt;2.9.1-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047655"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128619" version="1" comment="python-libxml2 is &lt;2.9.1-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047655"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128638" version="1" comment="libpoppler-glib8 is &lt;0.24.4-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128639" version="1" comment="libpoppler-qt4-4 is &lt;0.24.4-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037283"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128641" version="1" comment="poppler-qt is &lt;0.24.4-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128642" version="1" comment="poppler-tools is &lt;0.24.4-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128786" version="1" comment="qemu is &lt;2.0.2-48.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128787" version="1" comment="qemu-block-curl is &lt;2.0.2-48.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128788" version="1" comment="qemu-ipxe is &lt;1.0.0-48.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047671"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128789" version="1" comment="qemu-kvm is &lt;2.0.2-48.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128790" version="1" comment="qemu-seabios is &lt;1.7.4-48.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128791" version="1" comment="qemu-sgabios is &lt;8-48.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047673"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128792" version="1" comment="qemu-tools is &lt;2.0.2-48.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128793" version="1" comment="qemu-vgabios is &lt;1.7.4-48.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128794" version="1" comment="qemu-x86 is &lt;2.0.2-48.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128795" version="1" comment="libspice-server1 is &lt;0.12.4-8.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047674"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128796" version="1" comment="spice is &lt;0.12.4-8.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047674"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128808" version="1" comment="ntp is &lt;4.2.8p8-46.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047677"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128809" version="1" comment="ntp-doc is &lt;4.2.8p8-46.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047677"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128810" version="1" comment="ImageMagick is &lt;6.8.8.1-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128811" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128812" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128813" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128814" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128883" version="1" comment="libarchive is &lt;3.1.2-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032781"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128884" version="1" comment="libarchive13 is &lt;3.1.2-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047684"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128892" version="1" comment="kernel-default is &lt;3.12.55-52.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047687"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128893" version="1" comment="kernel-default-devel is &lt;3.12.55-52.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047687"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128894" version="1" comment="kernel-default-extra is &lt;3.12.55-52.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047687"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128895" version="1" comment="kernel-devel is &lt;3.12.55-52.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047687"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128896" version="1" comment="kernel-macros is &lt;3.12.55-52.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047687"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128897" version="1" comment="kernel-source is &lt;3.12.55-52.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047687"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128898" version="1" comment="kernel-syms is &lt;3.12.55-52.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047687"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128899" version="1" comment="kernel-xen is &lt;3.12.55-52.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047687"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128900" version="1" comment="kernel-xen-devel is &lt;3.12.55-52.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047687"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128937" version="1" comment="flash-player is &lt;11.2.202.626-133.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047695"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128938" version="1" comment="flash-player-gnome is &lt;11.2.202.626-133.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047695"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128939" version="1" comment="libmysqlclient18 is &lt;10.0.25-20.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128940" version="1" comment="libmysqlclient18-32bit is &lt;10.0.25-20.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128941" version="1" comment="libmysqlclient_r18 is &lt;10.0.25-20.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128942" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.25-20.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128943" version="1" comment="mariadb is &lt;10.0.25-20.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128944" version="1" comment="mariadb-client is &lt;10.0.25-20.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128945" version="1" comment="mariadb-errormessages is &lt;10.0.25-20.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129017" version="1" comment="imap is &lt;2007e_suse-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031146"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047710"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129018" version="1" comment="libc-client2007e_suse is &lt;2007e_suse-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047710"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129089" version="1" comment="libimobiledevice is &lt;1.1.5-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129090" version="1" comment="libimobiledevice-tools is &lt;1.1.5-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129091" version="1" comment="libimobiledevice4 is &lt;1.1.5-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040469"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129092" version="1" comment="libusbmuxd2 is &lt;1.0.8-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129093" version="1" comment="usbmuxd is &lt;1.0.8-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034832"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120771" version="1" comment="libfreebl3 is &lt;3.19.2.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120772" version="1" comment="libfreebl3-32bit is &lt;3.19.2.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120773" version="1" comment="libsoftokn3 is &lt;3.19.2.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120774" version="1" comment="libsoftokn3-32bit is &lt;3.19.2.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120775" version="1" comment="mozilla-nss is &lt;3.19.2.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120776" version="1" comment="mozilla-nss-32bit is &lt;3.19.2.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120777" version="1" comment="mozilla-nss-certs is &lt;3.19.2.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120778" version="1" comment="mozilla-nss-certs-32bit is &lt;3.19.2.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120779" version="1" comment="mozilla-nss-sysinit is &lt;3.19.2.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120780" version="1" comment="mozilla-nss-sysinit-32bit is &lt;3.19.2.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009120781" version="1" comment="mozilla-nss-tools is &lt;3.19.2.2-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119519" version="1" comment="bind is &lt;9.9.6P1-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046600"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119520" version="1" comment="bind-libs is &lt;9.9.6P1-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046600"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119521" version="1" comment="bind-libs-32bit is &lt;9.9.6P1-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046600"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119522" version="1" comment="bind-utils is &lt;9.9.6P1-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046600"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118775" version="1" comment="grub2 is &lt;2.02~beta2-73.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046514"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118776" version="1" comment="grub2-i386-pc is &lt;2.02~beta2-73.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039507"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046514"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118777" version="1" comment="grub2-snapper-plugin is &lt;2.02~beta2-73.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039508"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046514"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118778" version="1" comment="grub2-x86_64-efi is &lt;2.02~beta2-73.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046514"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118779" version="1" comment="grub2-x86_64-xen is &lt;2.02~beta2-73.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039510"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046514"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118801" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046505"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118802" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046505"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118734" version="1" comment="openssl is &lt;1.0.1i-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046505"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118983" version="1" comment="kernel-default is &lt;3.12.51-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046552"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118984" version="1" comment="kernel-default-devel is &lt;3.12.51-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046552"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118985" version="1" comment="kernel-default-extra is &lt;3.12.51-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046552"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118986" version="1" comment="kernel-devel is &lt;3.12.51-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046552"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118987" version="1" comment="kernel-macros is &lt;3.12.51-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046552"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118988" version="1" comment="kernel-source is &lt;3.12.51-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046552"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118989" version="1" comment="kernel-syms is &lt;3.12.51-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046552"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118990" version="1" comment="kernel-xen is &lt;3.12.51-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046552"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118991" version="1" comment="kernel-xen-devel is &lt;3.12.51-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046552"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119074" version="1" comment="ldb is &lt;1.1.24-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038081"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046562"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119075" version="1" comment="libdcerpc-binding0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119076" version="1" comment="libdcerpc-binding0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119077" version="1" comment="libdcerpc0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119078" version="1" comment="libdcerpc0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119079" version="1" comment="libgensec0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119080" version="1" comment="libgensec0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119081" version="1" comment="libldb1 is &lt;1.1.24-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034884"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046562"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119082" version="1" comment="libldb1-32bit is &lt;1.1.24-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034886"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046562"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119083" version="1" comment="libndr-krb5pac0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119084" version="1" comment="libndr-krb5pac0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119085" version="1" comment="libndr-nbt0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119086" version="1" comment="libndr-nbt0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119087" version="1" comment="libndr-standard0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119088" version="1" comment="libndr-standard0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119089" version="1" comment="libndr0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119090" version="1" comment="libndr0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119091" version="1" comment="libnetapi0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119092" version="1" comment="libnetapi0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119093" version="1" comment="libregistry0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119094" version="1" comment="libsamba-credentials0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119095" version="1" comment="libsamba-credentials0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119096" version="1" comment="libsamba-hostconfig0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119097" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119098" version="1" comment="libsamba-passdb0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119099" version="1" comment="libsamba-passdb0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119100" version="1" comment="libsamba-util0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119101" version="1" comment="libsamba-util0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119102" version="1" comment="libsamdb0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119103" version="1" comment="libsamdb0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119104" version="1" comment="libsmbclient-raw0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119105" version="1" comment="libsmbclient-raw0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119106" version="1" comment="libsmbclient0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119107" version="1" comment="libsmbclient0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119108" version="1" comment="libsmbconf0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119109" version="1" comment="libsmbconf0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119110" version="1" comment="libsmbldap0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119111" version="1" comment="libsmbldap0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119112" version="1" comment="libtalloc2 is &lt;2.1.5-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046564"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119113" version="1" comment="libtalloc2-32bit is &lt;2.1.5-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046564"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119114" version="1" comment="libtdb1 is &lt;1.3.8-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032944"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046557"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119115" version="1" comment="libtdb1-32bit is &lt;1.3.8-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032942"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046557"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119116" version="1" comment="libtevent-util0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119117" version="1" comment="libtevent-util0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119118" version="1" comment="libtevent0 is &lt;0.9.26-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046558"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119119" version="1" comment="libtevent0-32bit is &lt;0.9.26-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034887"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046558"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119120" version="1" comment="libwbclient0 is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119121" version="1" comment="libwbclient0-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119122" version="1" comment="pytalloc is &lt;2.1.5-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046564"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119123" version="1" comment="pytalloc-32bit is &lt;2.1.5-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038087"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046564"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119124" version="1" comment="samba is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119125" version="1" comment="samba-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119126" version="1" comment="samba-client is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119127" version="1" comment="samba-client-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119128" version="1" comment="samba-doc is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119129" version="1" comment="samba-libs is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119130" version="1" comment="samba-libs-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119131" version="1" comment="samba-winbind is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119132" version="1" comment="samba-winbind-32bit is &lt;4.2.4-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119133" version="1" comment="talloc is &lt;2.1.5-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038089"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046564"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118661" version="1" comment="xen is &lt;4.5.2_02-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046488"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118780" version="1" comment="xen-kmp-default is &lt;4.5.2_02_k3.12.49_11-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046515"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118781" version="1" comment="xen-libs is &lt;4.5.2_02-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046488"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118782" version="1" comment="xen-libs-32bit is &lt;4.5.2_02-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046488"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129344" version="1" comment="kernel-default is &lt;3.12.59-60.41.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129345" version="1" comment="kernel-default-devel is &lt;3.12.59-60.41.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129346" version="1" comment="kernel-default-extra is &lt;3.12.59-60.41.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129347" version="1" comment="kernel-devel is &lt;3.12.59-60.41.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129348" version="1" comment="kernel-macros is &lt;3.12.59-60.41.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129349" version="1" comment="kernel-source is &lt;3.12.59-60.41.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129350" version="1" comment="kernel-syms is &lt;3.12.59-60.41.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047746"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129351" version="1" comment="kernel-xen is &lt;3.12.59-60.41.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129352" version="1" comment="kernel-xen-devel is &lt;3.12.59-60.41.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129369" version="1" comment="qemu is &lt;2.3.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047753"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129370" version="1" comment="qemu-block-curl is &lt;2.3.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047753"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129371" version="1" comment="qemu-ipxe is &lt;1.0.0-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129372" version="1" comment="qemu-kvm is &lt;2.3.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047753"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129373" version="1" comment="qemu-seabios is &lt;1.8.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047755"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129374" version="1" comment="qemu-sgabios is &lt;8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047756"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129375" version="1" comment="qemu-tools is &lt;2.3.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047753"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129376" version="1" comment="qemu-vgabios is &lt;1.8.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047755"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129377" version="1" comment="qemu-x86 is &lt;2.3.1-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047753"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129402" version="1" comment="kernel-default is &lt;3.12.59-60.45.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047758"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129403" version="1" comment="kernel-default-devel is &lt;3.12.59-60.45.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047758"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129404" version="1" comment="kernel-default-extra is &lt;3.12.59-60.45.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047758"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129405" version="1" comment="kernel-devel is &lt;3.12.59-60.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047761"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129406" version="1" comment="kernel-macros is &lt;3.12.59-60.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047761"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129407" version="1" comment="kernel-source is &lt;3.12.59-60.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047761"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129408" version="1" comment="kernel-syms is &lt;3.12.59-60.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047761"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129409" version="1" comment="kernel-xen is &lt;3.12.59-60.45.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047758"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129410" version="1" comment="kernel-xen-devel is &lt;3.12.59-60.45.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047758"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129722" version="1" comment="glibc is &lt;2.19-38.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129723" version="1" comment="glibc-32bit is &lt;2.19-38.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129724" version="1" comment="glibc-devel is &lt;2.19-38.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129725" version="1" comment="glibc-devel-32bit is &lt;2.19-38.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129726" version="1" comment="glibc-i18ndata is &lt;2.19-38.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129727" version="1" comment="glibc-locale is &lt;2.19-38.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129728" version="1" comment="glibc-locale-32bit is &lt;2.19-38.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129729" version="1" comment="nscd is &lt;2.19-38.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047785"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129904" version="1" comment="ImageMagick is &lt;6.8.8.1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129905" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129906" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129907" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129908" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130569" version="1" comment="flash-player is &lt;11.2.202.632-137.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047870"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130570" version="1" comment="flash-player-gnome is &lt;11.2.202.632-137.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047870"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130723" version="1" comment="libarchive is &lt;3.1.2-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032781"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121638" version="1" comment="bind is &lt;9.9.6P1-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046816"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121639" version="1" comment="bind-libs is &lt;9.9.6P1-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046816"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121640" version="1" comment="bind-libs-32bit is &lt;9.9.6P1-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046816"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121641" version="1" comment="bind-utils is &lt;9.9.6P1-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046816"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130787" version="1" comment="gimp is &lt;2.8.10-7.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030642"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047908"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130788" version="1" comment="gimp-lang is &lt;2.8.10-7.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047908"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130789" version="1" comment="gimp-plugins-python is &lt;2.8.10-7.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047908"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130790" version="1" comment="libgimp-2_0-0 is &lt;2.8.10-7.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047908"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130791" version="1" comment="libgimpui-2_0-0 is &lt;2.8.10-7.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034558"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047908"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130964" version="1" comment="libvirt is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130965" version="1" comment="libvirt-client is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130966" version="1" comment="libvirt-client-32bit is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130967" version="1" comment="libvirt-daemon is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130968" version="1" comment="libvirt-daemon-config-network is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130969" version="1" comment="libvirt-daemon-config-nwfilter is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130970" version="1" comment="libvirt-daemon-driver-interface is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130971" version="1" comment="libvirt-daemon-driver-libxl is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130972" version="1" comment="libvirt-daemon-driver-lxc is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130973" version="1" comment="libvirt-daemon-driver-network is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130974" version="1" comment="libvirt-daemon-driver-nodedev is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130975" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130976" version="1" comment="libvirt-daemon-driver-qemu is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130977" version="1" comment="libvirt-daemon-driver-secret is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130978" version="1" comment="libvirt-daemon-driver-storage is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130979" version="1" comment="libvirt-daemon-lxc is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130980" version="1" comment="libvirt-daemon-qemu is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130981" version="1" comment="libvirt-daemon-xen is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130982" version="1" comment="libvirt-doc is &lt;1.2.18.4-11.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047949"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130988" version="1" comment="libidn is &lt;1.28-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033251"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130991" version="1" comment="xen is &lt;4.5.3_08-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047952"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130992" version="1" comment="xen-kmp-default is &lt;4.5.3_08_k3.12.59_60.45-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130993" version="1" comment="xen-libs is &lt;4.5.3_08-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047952"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130994" version="1" comment="xen-libs-32bit is &lt;4.5.3_08-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047952"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121536" version="1" comment="kernel-default is &lt;3.12.51-60.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121537" version="1" comment="kernel-default-devel is &lt;3.12.51-60.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121538" version="1" comment="kernel-default-extra is &lt;3.12.51-60.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121539" version="1" comment="kernel-devel is &lt;3.12.51-60.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121540" version="1" comment="kernel-macros is &lt;3.12.51-60.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121541" version="1" comment="kernel-source is &lt;3.12.51-60.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121542" version="1" comment="kernel-syms is &lt;3.12.51-60.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121543" version="1" comment="kernel-xen is &lt;3.12.51-60.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121544" version="1" comment="kernel-xen-devel is &lt;3.12.51-60.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046807"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131004" version="1" comment="kernel-default is &lt;3.12.62-60.62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131005" version="1" comment="kernel-default-devel is &lt;3.12.62-60.62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131006" version="1" comment="kernel-default-extra is &lt;3.12.62-60.62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131007" version="1" comment="kernel-devel is &lt;3.12.62-60.62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131008" version="1" comment="kernel-macros is &lt;3.12.62-60.62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131009" version="1" comment="kernel-source is &lt;3.12.62-60.62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131010" version="1" comment="kernel-syms is &lt;3.12.62-60.62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131011" version="1" comment="kernel-xen is &lt;3.12.62-60.62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131012" version="1" comment="kernel-xen-devel is &lt;3.12.62-60.62.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047935"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131015" version="1" comment="MozillaFirefox is &lt;45.3.0esr-78.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047957"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131016" version="1" comment="MozillaFirefox-translations is &lt;45.3.0esr-78.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047957"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131017" version="1" comment="krb5 is &lt;1.12.1-36.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131018" version="1" comment="krb5-32bit is &lt;1.12.1-36.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131019" version="1" comment="krb5-client is &lt;1.12.1-36.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131021" version="1" comment="rsync is &lt;3.1.0-9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030761"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047960"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131024" version="1" comment="xerces-c is &lt;3.1.1-12.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038595"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047961"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131025" version="1" comment="libstorage is &lt;2.25.35.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047962"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131026" version="1" comment="libstorage-ruby is &lt;2.25.35.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047962"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131027" version="1" comment="libstorage6 is &lt;2.25.35.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040623"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047962"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131028" version="1" comment="fontconfig is &lt;2.11.0-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032251"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047963"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131029" version="1" comment="fontconfig-32bit is &lt;2.11.0-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047963"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131030" version="1" comment="libmysqlclient18 is &lt;10.0.26-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047964"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131031" version="1" comment="libmysqlclient18-32bit is &lt;10.0.26-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047964"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131032" version="1" comment="libmysqlclient_r18 is &lt;10.0.26-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047964"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131033" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.26-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047964"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131034" version="1" comment="mariadb is &lt;10.0.26-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047964"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131035" version="1" comment="mariadb-client is &lt;10.0.26-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047964"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131036" version="1" comment="mariadb-errormessages is &lt;10.0.26-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047964"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131045" version="1" comment="openssh is &lt;6.6p1-52.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047968"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131046" version="1" comment="openssh-askpass-gnome is &lt;6.6p1-52.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032625"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047968"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131047" version="1" comment="openssh-helpers is &lt;6.6p1-52.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047968"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131050" version="1" comment="libdcerpc-binding0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131051" version="1" comment="libdcerpc-binding0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131052" version="1" comment="libdcerpc0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131053" version="1" comment="libdcerpc0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131054" version="1" comment="libgensec0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131055" version="1" comment="libgensec0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131056" version="1" comment="libndr-krb5pac0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131057" version="1" comment="libndr-krb5pac0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131058" version="1" comment="libndr-nbt0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131059" version="1" comment="libndr-nbt0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131060" version="1" comment="libndr-standard0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131061" version="1" comment="libndr-standard0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131062" version="1" comment="libndr0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131063" version="1" comment="libndr0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131064" version="1" comment="libnetapi0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131065" version="1" comment="libnetapi0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131066" version="1" comment="libregistry0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131067" version="1" comment="libsamba-credentials0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131068" version="1" comment="libsamba-credentials0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131069" version="1" comment="libsamba-hostconfig0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131070" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131071" version="1" comment="libsamba-passdb0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131072" version="1" comment="libsamba-passdb0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131073" version="1" comment="libsamba-util0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131074" version="1" comment="libsamba-util0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131075" version="1" comment="libsamdb0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131076" version="1" comment="libsamdb0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131077" version="1" comment="libsmbclient-raw0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131078" version="1" comment="libsmbclient-raw0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131079" version="1" comment="libsmbclient0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131080" version="1" comment="libsmbclient0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131081" version="1" comment="libsmbconf0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131082" version="1" comment="libsmbconf0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131083" version="1" comment="libsmbldap0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131084" version="1" comment="libsmbldap0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131085" version="1" comment="libtevent-util0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131086" version="1" comment="libtevent-util0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131087" version="1" comment="libwbclient0 is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131088" version="1" comment="libwbclient0-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131089" version="1" comment="samba is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131090" version="1" comment="samba-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131091" version="1" comment="samba-client is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131092" version="1" comment="samba-client-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131093" version="1" comment="samba-doc is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131094" version="1" comment="samba-libs is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131095" version="1" comment="samba-libs-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131096" version="1" comment="samba-winbind is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131097" version="1" comment="samba-winbind-32bit is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131099" version="1" comment="flash-player is &lt;11.2.202.635-140.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131100" version="1" comment="flash-player-gnome is &lt;11.2.202.635-140.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047972"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131104" version="1" comment="libgcrypt is &lt;1.6.1-16.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036338"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047974"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131125" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-52.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131126" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-52.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131127" version="1" comment="openssl is &lt;1.0.1i-52.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131143" version="1" comment="postgresql94-libs is &lt;9.4.9-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039799"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047984"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131147" version="1" comment="compat-openssl098 is &lt;0.9.8j-102.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131196" version="1" comment="xen is &lt;4.5.3_10-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131197" version="1" comment="xen-kmp-default is &lt;4.5.3_10_k3.12.62_60.62-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047989"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131198" version="1" comment="xen-libs is &lt;4.5.3_10-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131199" version="1" comment="xen-libs-32bit is &lt;4.5.3_10-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131200" version="1" comment="libgudev-1_0-0 is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131201" version="1" comment="libgudev-1_0-0-32bit is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037376"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131202" version="1" comment="libudev1 is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131203" version="1" comment="libudev1-32bit is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131204" version="1" comment="systemd is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131205" version="1" comment="systemd-32bit is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131206" version="1" comment="systemd-bash-completion is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131207" version="1" comment="systemd-sysvinit is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131208" version="1" comment="udev is &lt;210-114.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047943"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131209" version="1" comment="ghostscript is &lt;9.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131210" version="1" comment="ghostscript-x11 is &lt;9.15-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030822"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131211" version="1" comment="libtiff5 is &lt;4.0.6-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047990"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131212" version="1" comment="libtiff5-32bit is &lt;4.0.6-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047990"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131213" version="1" comment="tiff is &lt;4.0.6-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047990"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131214" version="1" comment="freerdp is &lt;1.0.2-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047991"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131215" version="1" comment="libfreerdp-1_0 is &lt;1.0.2-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047991"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131216" version="1" comment="libfreerdp-1_0-plugins is &lt;1.0.2-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047991"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131217" version="1" comment="libX11 is &lt;1.6.2-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131218" version="1" comment="libX11-6 is &lt;1.6.2-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131219" version="1" comment="libX11-6-32bit is &lt;1.6.2-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131220" version="1" comment="libX11-data is &lt;1.6.2-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036218"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131221" version="1" comment="libX11-xcb1 is &lt;1.6.2-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131222" version="1" comment="libX11-xcb1-32bit is &lt;1.6.2-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131223" version="1" comment="libXfixes is &lt;5.0.1-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036079"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131224" version="1" comment="libXfixes3 is &lt;5.0.1-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131225" version="1" comment="libXfixes3-32bit is &lt;5.0.1-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131226" version="1" comment="libXi is &lt;1.7.4-12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131227" version="1" comment="libXi6 is &lt;1.7.4-12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036145"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131228" version="1" comment="libXi6-32bit is &lt;1.7.4-12.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036146"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131229" version="1" comment="libXrandr is &lt;1.4.2-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036157"/>
		<state state_ref="oval:org.opensuse.security:ste:2009033815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131230" version="1" comment="libXrandr2 is &lt;1.4.2-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009033815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131231" version="1" comment="libXrandr2-32bit is &lt;1.4.2-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036162"/>
		<state state_ref="oval:org.opensuse.security:ste:2009033815"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131232" version="1" comment="libXrender is &lt;0.9.8-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036095"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047995"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131233" version="1" comment="libXrender1 is &lt;0.9.8-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036099"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047995"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131234" version="1" comment="libXrender1-32bit is &lt;0.9.8-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036100"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047995"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131235" version="1" comment="libXtst is &lt;1.2.2-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036173"/>
		<state state_ref="oval:org.opensuse.security:ste:2009033355"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131236" version="1" comment="libXtst6 is &lt;1.2.2-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036177"/>
		<state state_ref="oval:org.opensuse.security:ste:2009033355"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131237" version="1" comment="libXtst6-32bit is &lt;1.2.2-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036178"/>
		<state state_ref="oval:org.opensuse.security:ste:2009033355"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131238" version="1" comment="libXv is &lt;1.0.10-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036111"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047996"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131239" version="1" comment="libXv1 is &lt;1.0.10-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036115"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047996"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131240" version="1" comment="libXv1-32bit is &lt;1.0.10-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036116"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047996"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131241" version="1" comment="libXvMC is &lt;1.0.8-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036181"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047997"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131242" version="1" comment="libXvMC1 is &lt;1.0.8-5.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036185"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047997"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131243" version="1" comment="flash-player is &lt;11.2.202.637-143.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047998"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131244" version="1" comment="flash-player-gnome is &lt;11.2.202.637-143.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047998"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131245" version="1" comment="gtk2 is &lt;2.24.24-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030535"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131246" version="1" comment="gtk2-lang is &lt;2.24.24-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033166"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131247" version="1" comment="gtk2-tools is &lt;2.24.24-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040629"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131248" version="1" comment="gtk2-tools-32bit is &lt;2.24.24-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040630"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131249" version="1" comment="libgtk-2_0-0 is &lt;2.24.24-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131250" version="1" comment="libgtk-2_0-0-32bit is &lt;2.24.24-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040632"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131251" version="1" comment="typelib-1_0-Gtk-2_0 is &lt;2.24.24-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131252" version="1" comment="kdump is &lt;0.8.15-29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048000"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131253" version="1" comment="dbus-1 is &lt;1.8.22-22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048001"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131254" version="1" comment="dbus-1-x11 is &lt;1.8.22-22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048001"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131255" version="1" comment="libdbus-1-3 is &lt;1.8.22-22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048001"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131256" version="1" comment="libdbus-1-3-32bit is &lt;1.8.22-22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048001"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131257" version="1" comment="libipa_hbac0 is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131258" version="1" comment="libsss_idmap0 is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131259" version="1" comment="libsss_sudo is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131260" version="1" comment="python-sssd-config is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131261" version="1" comment="sssd is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034052"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131262" version="1" comment="sssd-32bit is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131263" version="1" comment="sssd-ad is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131264" version="1" comment="sssd-ipa is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131265" version="1" comment="sssd-krb5 is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038196"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131266" version="1" comment="sssd-krb5-common is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038197"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131267" version="1" comment="sssd-ldap is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038198"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131268" version="1" comment="sssd-proxy is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131269" version="1" comment="sssd-tools is &lt;1.11.5.1-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048002"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131270" version="1" comment="kernel-default is &lt;3.12.62-60.64.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131271" version="1" comment="kernel-default-devel is &lt;3.12.62-60.64.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131272" version="1" comment="kernel-default-extra is &lt;3.12.62-60.64.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131273" version="1" comment="kernel-devel is &lt;3.12.62-60.64.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131274" version="1" comment="kernel-macros is &lt;3.12.62-60.64.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131275" version="1" comment="kernel-source is &lt;3.12.62-60.64.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131276" version="1" comment="kernel-syms is &lt;3.12.62-60.64.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131277" version="1" comment="kernel-xen is &lt;3.12.62-60.64.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131278" version="1" comment="kernel-xen-devel is &lt;3.12.62-60.64.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131279" version="1" comment="qemu is &lt;2.3.1-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048003"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131280" version="1" comment="qemu-block-curl is &lt;2.3.1-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048003"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131281" version="1" comment="qemu-ipxe is &lt;1.0.0-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131282" version="1" comment="qemu-kvm is &lt;2.3.1-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048003"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131283" version="1" comment="qemu-seabios is &lt;1.8.1-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048005"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131284" version="1" comment="qemu-sgabios is &lt;8-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048006"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131285" version="1" comment="qemu-tools is &lt;2.3.1-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048003"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131286" version="1" comment="qemu-vgabios is &lt;1.8.1-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048005"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131287" version="1" comment="qemu-x86 is &lt;2.3.1-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048003"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131288" version="1" comment="libxml2 is &lt;2.9.1-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131289" version="1" comment="libxml2-2 is &lt;2.9.1-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131290" version="1" comment="libxml2-2-32bit is &lt;2.9.1-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131291" version="1" comment="libxml2-tools is &lt;2.9.1-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131292" version="1" comment="python-libxml2 is &lt;2.9.1-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131293" version="1" comment="ghostscript is &lt;9.15-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047946"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131294" version="1" comment="ghostscript-x11 is &lt;9.15-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030822"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047946"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131295" version="1" comment="libpython3_4m1_0 is &lt;3.4.5-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131296" version="1" comment="python3 is &lt;3.4.5-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131297" version="1" comment="python3-base is &lt;3.4.5-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131300" version="1" comment="flash-player is &lt;11.2.202.643-146.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048010"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131301" version="1" comment="flash-player-gnome is &lt;11.2.202.643-146.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048010"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131302" version="1" comment="gd is &lt;2.1.0-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131303" version="1" comment="gd-32bit is &lt;2.1.0-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131304" version="1" comment="ImageMagick is &lt;6.8.8.1-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048011"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131305" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048011"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131306" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048011"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131307" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048011"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131308" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048011"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135207" version="1" comment="bind is &lt;9.9.9P1-49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048499"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135208" version="1" comment="bind-libs is &lt;9.9.9P1-49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048499"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135209" version="1" comment="bind-libs-32bit is &lt;9.9.9P1-49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048499"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135210" version="1" comment="bind-utils is &lt;9.9.9P1-49.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048499"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135211" version="1" comment="curl is &lt;7.37.0-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048500"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135212" version="1" comment="libcurl4 is &lt;7.37.0-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048500"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135213" version="1" comment="libcurl4-32bit is &lt;7.37.0-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048500"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122059" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.72-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046855"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122062" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.72-3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046855"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135356" version="1" comment="libblkid1 is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135357" version="1" comment="libblkid1-32bit is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135358" version="1" comment="libmount1 is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135359" version="1" comment="libmount1-32bit is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038355"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135360" version="1" comment="libsmartcols1 is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135361" version="1" comment="libuuid-devel is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135362" version="1" comment="libuuid1 is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135363" version="1" comment="libuuid1-32bit is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135364" version="1" comment="python-libmount is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135365" version="1" comment="util-linux is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135366" version="1" comment="util-linux-lang is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135367" version="1" comment="util-linux-systemd is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135368" version="1" comment="uuidd is &lt;2.25-37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135369" version="1" comment="jasper is &lt;1.900.14-181.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048525"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135370" version="1" comment="libjasper1 is &lt;1.900.14-181.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034778"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048525"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135371" version="1" comment="libjasper1-32bit is &lt;1.900.14-181.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034777"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048525"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135487" version="1" comment="flash-player is &lt;11.2.202.644-149.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048536"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135488" version="1" comment="flash-player-gnome is &lt;11.2.202.644-149.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048536"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135538" version="1" comment="ghostscript is &lt;9.15-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048548"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135539" version="1" comment="ghostscript-x11 is &lt;9.15-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030822"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048548"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135541" version="1" comment="eog is &lt;3.10.2-2.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040274"/>
		<state state_ref="oval:org.opensuse.security:ste:2009038933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135542" version="1" comment="eog-lang is &lt;3.10.2-2.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040276"/>
		<state state_ref="oval:org.opensuse.security:ste:2009038933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135860" version="1" comment="bash is &lt;4.2-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032478"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048578"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135861" version="1" comment="bash-doc is &lt;4.2-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034959"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048578"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135862" version="1" comment="bash-lang is &lt;4.2-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037113"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048578"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135863" version="1" comment="libreadline6 is &lt;6.2-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037117"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048579"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135864" version="1" comment="libreadline6-32bit is &lt;6.2-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037116"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048579"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135865" version="1" comment="readline-doc is &lt;6.2-82.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048579"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135929" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.111-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048593"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135930" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.111-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048593"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135939" version="1" comment="tar is &lt;1.27.1-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030401"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135940" version="1" comment="tar-lang is &lt;1.27.1-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033728"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048599"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135941" version="1" comment="sudo is &lt;1.8.10p3-2.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030544"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048600"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135963" version="1" comment="libarchive is &lt;3.1.2-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032781"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048607"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135965" version="1" comment="kernel-default is &lt;3.12.67-60.64.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135966" version="1" comment="kernel-default-devel is &lt;3.12.67-60.64.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135967" version="1" comment="kernel-default-extra is &lt;3.12.67-60.64.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135968" version="1" comment="kernel-devel is &lt;3.12.67-60.64.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135969" version="1" comment="kernel-macros is &lt;3.12.67-60.64.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135970" version="1" comment="kernel-source is &lt;3.12.67-60.64.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135971" version="1" comment="kernel-syms is &lt;3.12.67-60.64.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135972" version="1" comment="kernel-xen is &lt;3.12.67-60.64.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135973" version="1" comment="kernel-xen-devel is &lt;3.12.67-60.64.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048606"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135995" version="1" comment="libmysqlclient18 is &lt;10.0.28-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135996" version="1" comment="libmysqlclient18-32bit is &lt;10.0.28-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135997" version="1" comment="libmysqlclient_r18 is &lt;10.0.28-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135998" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.28-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135999" version="1" comment="mariadb is &lt;10.0.28-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136000" version="1" comment="mariadb-client is &lt;10.0.28-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136001" version="1" comment="mariadb-errormessages is &lt;10.0.28-17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048611"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136056" version="1" comment="gvim is &lt;7.4.326-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030753"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048616"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136057" version="1" comment="vim is &lt;7.4.326-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032775"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048616"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136058" version="1" comment="vim-data is &lt;7.4.326-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031745"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048616"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136131" version="1" comment="ImageMagick is &lt;6.8.8.1-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136132" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136133" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136134" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136135" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136136" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.121-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048624"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136137" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.121-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048624"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129316" version="1" comment="imap is &lt;2007e_suse-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031146"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009129318" version="1" comment="libc-client2007e_suse is &lt;2007e_suse-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136208" version="1" comment="libpcre1 is &lt;8.39-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038688"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136209" version="1" comment="libpcre1-32bit is &lt;8.39-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038687"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136210" version="1" comment="libpcre16-0 is &lt;8.39-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038690"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136211" version="1" comment="libpcrecpp0 is &lt;8.39-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038692"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136212" version="1" comment="libpcrecpp0-32bit is &lt;8.39-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038691"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136213" version="1" comment="pcre is &lt;8.39-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136214" version="1" comment="qemu is &lt;2.3.1-24.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136215" version="1" comment="qemu-block-curl is &lt;2.3.1-24.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136216" version="1" comment="qemu-ipxe is &lt;1.0.0-24.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048637"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136217" version="1" comment="qemu-kvm is &lt;2.3.1-24.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136218" version="1" comment="qemu-seabios is &lt;1.8.1-24.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048638"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136219" version="1" comment="qemu-sgabios is &lt;8-24.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048639"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136220" version="1" comment="qemu-tools is &lt;2.3.1-24.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136221" version="1" comment="qemu-vgabios is &lt;1.8.1-24.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048638"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136222" version="1" comment="qemu-x86 is &lt;2.3.1-24.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136380" version="1" comment="libX11 is &lt;1.6.2-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048657"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136386" version="1" comment="MozillaFirefox is &lt;45.5.0esr-88.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048658"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136387" version="1" comment="MozillaFirefox-translations is &lt;45.5.0esr-88.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048658"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136388" version="1" comment="libfreebl3 is &lt;3.21.3-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136389" version="1" comment="libfreebl3-32bit is &lt;3.21.3-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136390" version="1" comment="libsoftokn3 is &lt;3.21.3-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136391" version="1" comment="libsoftokn3-32bit is &lt;3.21.3-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136392" version="1" comment="mozilla-nss is &lt;3.21.3-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136393" version="1" comment="mozilla-nss-32bit is &lt;3.21.3-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136394" version="1" comment="mozilla-nss-certs is &lt;3.21.3-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136395" version="1" comment="mozilla-nss-certs-32bit is &lt;3.21.3-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136396" version="1" comment="mozilla-nss-sysinit is &lt;3.21.3-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136397" version="1" comment="mozilla-nss-sysinit-32bit is &lt;3.21.3-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136398" version="1" comment="mozilla-nss-tools is &lt;3.21.3-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048659"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136630" version="1" comment="kernel-default is &lt;3.12.67-60.64.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136631" version="1" comment="kernel-default-devel is &lt;3.12.67-60.64.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136632" version="1" comment="kernel-default-extra is &lt;3.12.67-60.64.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136633" version="1" comment="kernel-devel is &lt;3.12.67-60.64.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136634" version="1" comment="kernel-macros is &lt;3.12.67-60.64.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136635" version="1" comment="kernel-source is &lt;3.12.67-60.64.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136636" version="1" comment="kernel-syms is &lt;3.12.67-60.64.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136637" version="1" comment="kernel-xen is &lt;3.12.67-60.64.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136638" version="1" comment="kernel-xen-devel is &lt;3.12.67-60.64.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136639" version="1" comment="libXi is &lt;1.7.4-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048708"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136642" version="1" comment="MozillaFirefox is &lt;45.5.1esr-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048709"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136643" version="1" comment="MozillaFirefox-translations is &lt;45.5.1esr-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048709"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136645" version="1" comment="gc is &lt;7.2d-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048711"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142349" version="1" comment="xen is &lt;4.5.5_02-22.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050292"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142350" version="1" comment="xen-kmp-default is &lt;4.5.5_02_k3.12.67_60.64.18-22.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050293"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142351" version="1" comment="xen-libs is &lt;4.5.5_02-22.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050292"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142352" version="1" comment="xen-libs-32bit is &lt;4.5.5_02-22.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050292"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142720" version="1" comment="libass is &lt;0.10.2-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041134"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050324"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142941" version="1" comment="flash-player is &lt;24.0.0.186-152.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050365"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142942" version="1" comment="flash-player-gnome is &lt;24.0.0.186-152.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050365"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143039" version="1" comment="pcre is &lt;8.39-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050373"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119621" version="1" comment="libmysqlclient18 is &lt;10.0.22-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046615"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119622" version="1" comment="libmysqlclient18-32bit is &lt;10.0.22-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046615"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119623" version="1" comment="libmysqlclient_r18 is &lt;10.0.22-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046615"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119624" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.22-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046615"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119625" version="1" comment="mariadb is &lt;10.0.22-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046615"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119626" version="1" comment="mariadb-client is &lt;10.0.22-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046615"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119627" version="1" comment="mariadb-errormessages is &lt;10.0.22-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046615"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143055" version="1" comment="kernel-default is &lt;3.12.67-60.64.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050376"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143056" version="1" comment="kernel-default-devel is &lt;3.12.67-60.64.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050376"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143057" version="1" comment="kernel-default-extra is &lt;3.12.67-60.64.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050376"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143058" version="1" comment="kernel-devel is &lt;3.12.67-60.64.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050376"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143059" version="1" comment="kernel-macros is &lt;3.12.67-60.64.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050376"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143060" version="1" comment="kernel-source is &lt;3.12.67-60.64.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050376"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143061" version="1" comment="kernel-syms is &lt;3.12.67-60.64.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050376"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143062" version="1" comment="kernel-xen is &lt;3.12.67-60.64.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050376"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143063" version="1" comment="kernel-xen-devel is &lt;3.12.67-60.64.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050376"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143413" version="1" comment="ntp is &lt;4.2.8p9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050458"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009143414" version="1" comment="ntp-doc is &lt;4.2.8p9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050458"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144634" version="1" comment="xen is &lt;4.5.5_04-22.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050774"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144635" version="1" comment="xen-kmp-default is &lt;4.5.5_04_k3.12.67_60.64.24-22.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144636" version="1" comment="xen-libs is &lt;4.5.5_04-22.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050774"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144637" version="1" comment="xen-libs-32bit is &lt;4.5.5_04-22.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050774"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144638" version="1" comment="gd is &lt;2.1.0-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144639" version="1" comment="gd-32bit is &lt;2.1.0-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144640" version="1" comment="MozillaFirefox is &lt;45.6.0esr-96.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144641" version="1" comment="MozillaFirefox-translations is &lt;45.6.0esr-96.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050777"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145376" version="1" comment="libgme is &lt;0.6.0-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041270"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050823"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145837" version="1" comment="ImageMagick is &lt;6.8.8.1-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050872"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145838" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050872"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145839" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050872"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145840" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050872"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145841" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050872"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145842" version="1" comment="wget is &lt;1.14-17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030457"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145843" version="1" comment="dnsmasq is &lt;2.71-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031669"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050874"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145859" version="1" comment="libdcerpc-binding0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145860" version="1" comment="libdcerpc-binding0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145861" version="1" comment="libdcerpc0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145862" version="1" comment="libdcerpc0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145863" version="1" comment="libgensec0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145864" version="1" comment="libgensec0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145865" version="1" comment="libndr-krb5pac0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145866" version="1" comment="libndr-krb5pac0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145867" version="1" comment="libndr-nbt0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145868" version="1" comment="libndr-nbt0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145869" version="1" comment="libndr-standard0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145870" version="1" comment="libndr-standard0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145871" version="1" comment="libndr0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145872" version="1" comment="libndr0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145873" version="1" comment="libnetapi0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145874" version="1" comment="libnetapi0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145875" version="1" comment="libregistry0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145876" version="1" comment="libsamba-credentials0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145877" version="1" comment="libsamba-credentials0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145878" version="1" comment="libsamba-hostconfig0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145879" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145880" version="1" comment="libsamba-passdb0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145881" version="1" comment="libsamba-passdb0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145882" version="1" comment="libsamba-util0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145883" version="1" comment="libsamba-util0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145884" version="1" comment="libsamdb0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145885" version="1" comment="libsamdb0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145886" version="1" comment="libsmbclient-raw0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145887" version="1" comment="libsmbclient-raw0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145888" version="1" comment="libsmbclient0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145889" version="1" comment="libsmbclient0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145890" version="1" comment="libsmbconf0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145891" version="1" comment="libsmbconf0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145892" version="1" comment="libsmbldap0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145893" version="1" comment="libsmbldap0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145894" version="1" comment="libtevent-util0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145895" version="1" comment="libtevent-util0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145896" version="1" comment="libwbclient0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145897" version="1" comment="libwbclient0-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145898" version="1" comment="samba is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145899" version="1" comment="samba-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145900" version="1" comment="samba-client is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145901" version="1" comment="samba-client-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145902" version="1" comment="samba-doc is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145903" version="1" comment="samba-libs is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145904" version="1" comment="samba-libs-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145905" version="1" comment="samba-winbind is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145906" version="1" comment="samba-winbind-32bit is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146001" version="1" comment="gstreamer-plugins-good is &lt;1.2.4-2.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050887"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146002" version="1" comment="gstreamer-plugins-good-lang is &lt;1.2.4-2.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050887"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146005" version="1" comment="gstreamer-plugins-bad is &lt;1.2.4-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146006" version="1" comment="gstreamer-plugins-bad-lang is &lt;1.2.4-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146007" version="1" comment="libgstbasecamerabinsrc-1_0-0 is &lt;1.2.4-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041158"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146008" version="1" comment="libgstcodecparsers-1_0-0 is &lt;1.2.4-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146009" version="1" comment="libgstegl-1_0-0 is &lt;1.2.4-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146010" version="1" comment="libgstmpegts-1_0-0 is &lt;1.2.4-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041166"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146011" version="1" comment="libgstphotography-1_0-0 is &lt;1.2.4-3.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041168"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050889"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146012" version="1" comment="libtiff5 is &lt;4.0.7-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050890"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146013" version="1" comment="libtiff5-32bit is &lt;4.0.7-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050890"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146014" version="1" comment="tiff is &lt;4.0.7-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050890"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118792" version="1" comment="qemu is &lt;2.3.1-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118793" version="1" comment="qemu-block-curl is &lt;2.3.1-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118794" version="1" comment="qemu-ipxe is &lt;1.0.0-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118795" version="1" comment="qemu-kvm is &lt;2.3.1-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118796" version="1" comment="qemu-seabios is &lt;1.8.1-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118797" version="1" comment="qemu-sgabios is &lt;8-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046519"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118798" version="1" comment="qemu-tools is &lt;2.3.1-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118799" version="1" comment="qemu-vgabios is &lt;1.8.1-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046518"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009118800" version="1" comment="qemu-x86 is &lt;2.3.1-7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046516"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122332" version="1" comment="glibc is &lt;2.19-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122333" version="1" comment="glibc-32bit is &lt;2.19-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122334" version="1" comment="glibc-devel is &lt;2.19-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122335" version="1" comment="glibc-devel-32bit is &lt;2.19-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122336" version="1" comment="glibc-i18ndata is &lt;2.19-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122337" version="1" comment="glibc-locale is &lt;2.19-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122338" version="1" comment="glibc-locale-32bit is &lt;2.19-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122339" version="1" comment="nscd is &lt;2.19-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046886"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122216" version="1" comment="dhcp is &lt;4.3.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046871"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009122217" version="1" comment="dhcp-client is &lt;4.3.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030726"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046871"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123221" version="1" comment="kernel-default is &lt;3.12.53-60.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123222" version="1" comment="kernel-default-devel is &lt;3.12.53-60.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123223" version="1" comment="kernel-default-extra is &lt;3.12.53-60.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123224" version="1" comment="kernel-devel is &lt;3.12.53-60.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123225" version="1" comment="kernel-macros is &lt;3.12.53-60.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123226" version="1" comment="kernel-source is &lt;3.12.53-60.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123227" version="1" comment="kernel-syms is &lt;3.12.53-60.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123228" version="1" comment="kernel-xen is &lt;3.12.53-60.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123229" version="1" comment="kernel-xen-devel is &lt;3.12.53-60.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047048"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009119232" version="1" comment="libpng15 is &lt;1.5.22-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046572"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123869" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047164"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123870" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047164"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009123871" version="1" comment="openssl is &lt;1.0.1i-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047164"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124720" version="1" comment="bind is &lt;9.9.6P1-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047243"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124721" version="1" comment="bind-libs is &lt;9.9.6P1-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047243"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124722" version="1" comment="bind-libs-32bit is &lt;9.9.6P1-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047243"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124723" version="1" comment="bind-utils is &lt;9.9.6P1-38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047243"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124928" version="1" comment="libdcerpc-binding0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124929" version="1" comment="libdcerpc-binding0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124930" version="1" comment="libdcerpc0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124931" version="1" comment="libdcerpc0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124932" version="1" comment="libgensec0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124933" version="1" comment="libgensec0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124934" version="1" comment="libndr-krb5pac0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124935" version="1" comment="libndr-krb5pac0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124936" version="1" comment="libndr-nbt0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124937" version="1" comment="libndr-nbt0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124938" version="1" comment="libndr-standard0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124939" version="1" comment="libndr-standard0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124940" version="1" comment="libndr0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124941" version="1" comment="libndr0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124942" version="1" comment="libnetapi0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124943" version="1" comment="libnetapi0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124944" version="1" comment="libregistry0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124945" version="1" comment="libsamba-credentials0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124946" version="1" comment="libsamba-credentials0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124947" version="1" comment="libsamba-hostconfig0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124948" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124949" version="1" comment="libsamba-passdb0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124950" version="1" comment="libsamba-passdb0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124951" version="1" comment="libsamba-util0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124952" version="1" comment="libsamba-util0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124953" version="1" comment="libsamdb0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124954" version="1" comment="libsamdb0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124955" version="1" comment="libsmbclient-raw0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124956" version="1" comment="libsmbclient-raw0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124957" version="1" comment="libsmbclient0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124958" version="1" comment="libsmbclient0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124959" version="1" comment="libsmbconf0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124960" version="1" comment="libsmbconf0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124961" version="1" comment="libsmbldap0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124962" version="1" comment="libsmbldap0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124963" version="1" comment="libtevent-util0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124964" version="1" comment="libtevent-util0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124965" version="1" comment="libwbclient0 is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124966" version="1" comment="libwbclient0-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124967" version="1" comment="samba is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124968" version="1" comment="samba-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124969" version="1" comment="samba-client is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124970" version="1" comment="samba-client-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124971" version="1" comment="samba-doc is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124972" version="1" comment="samba-libs is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124973" version="1" comment="samba-libs-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124974" version="1" comment="samba-winbind is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009124975" version="1" comment="samba-winbind-32bit is &lt;4.2.4-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125323" version="1" comment="xen is &lt;4.5.2_06-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047303"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125324" version="1" comment="xen-kmp-default is &lt;4.5.2_06_k3.12.53_60.30-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125325" version="1" comment="xen-libs is &lt;4.5.2_06-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047303"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125326" version="1" comment="xen-libs-32bit is &lt;4.5.2_06-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047303"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125608" version="1" comment="libvirt is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125609" version="1" comment="libvirt-client is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125610" version="1" comment="libvirt-client-32bit is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125611" version="1" comment="libvirt-daemon is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125612" version="1" comment="libvirt-daemon-config-network is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125613" version="1" comment="libvirt-daemon-config-nwfilter is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125614" version="1" comment="libvirt-daemon-driver-interface is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125615" version="1" comment="libvirt-daemon-driver-libxl is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125616" version="1" comment="libvirt-daemon-driver-lxc is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125617" version="1" comment="libvirt-daemon-driver-network is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125618" version="1" comment="libvirt-daemon-driver-nodedev is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125619" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125620" version="1" comment="libvirt-daemon-driver-qemu is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125621" version="1" comment="libvirt-daemon-driver-secret is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125622" version="1" comment="libvirt-daemon-driver-storage is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125623" version="1" comment="libvirt-daemon-lxc is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125624" version="1" comment="libvirt-daemon-qemu is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125625" version="1" comment="libvirt-daemon-xen is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125626" version="1" comment="libvirt-doc is &lt;1.2.18.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047333"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125671" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.77-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047344"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125672" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.77-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047344"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125799" version="1" comment="kernel-default is &lt;3.12.57-60.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047354"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125800" version="1" comment="kernel-default-devel is &lt;3.12.57-60.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047354"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125801" version="1" comment="kernel-default-extra is &lt;3.12.57-60.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047354"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125802" version="1" comment="kernel-devel is &lt;3.12.57-60.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047354"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125803" version="1" comment="kernel-macros is &lt;3.12.57-60.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047354"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125804" version="1" comment="kernel-source is &lt;3.12.57-60.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047354"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125805" version="1" comment="kernel-syms is &lt;3.12.57-60.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047354"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125806" version="1" comment="kernel-xen is &lt;3.12.57-60.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047354"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125807" version="1" comment="kernel-xen-devel is &lt;3.12.57-60.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047354"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125808" version="1" comment="libdcerpc-binding0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125809" version="1" comment="libdcerpc-binding0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125810" version="1" comment="libdcerpc0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125811" version="1" comment="libdcerpc0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125812" version="1" comment="libgensec0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125813" version="1" comment="libgensec0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125814" version="1" comment="libndr-krb5pac0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125815" version="1" comment="libndr-krb5pac0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125816" version="1" comment="libndr-nbt0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125817" version="1" comment="libndr-nbt0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125818" version="1" comment="libndr-standard0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125819" version="1" comment="libndr-standard0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125820" version="1" comment="libndr0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125821" version="1" comment="libndr0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125822" version="1" comment="libnetapi0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125823" version="1" comment="libnetapi0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125824" version="1" comment="libregistry0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125825" version="1" comment="libsamba-credentials0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125826" version="1" comment="libsamba-credentials0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125827" version="1" comment="libsamba-hostconfig0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125828" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125829" version="1" comment="libsamba-passdb0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125830" version="1" comment="libsamba-passdb0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125831" version="1" comment="libsamba-util0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125832" version="1" comment="libsamba-util0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125833" version="1" comment="libsamdb0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125834" version="1" comment="libsamdb0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125835" version="1" comment="libsmbclient-raw0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125836" version="1" comment="libsmbclient-raw0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125837" version="1" comment="libsmbclient0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125838" version="1" comment="libsmbclient0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125839" version="1" comment="libsmbconf0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125840" version="1" comment="libsmbconf0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125841" version="1" comment="libsmbldap0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125842" version="1" comment="libsmbldap0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125843" version="1" comment="libtevent-util0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125844" version="1" comment="libtevent-util0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125845" version="1" comment="libwbclient0 is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125846" version="1" comment="libwbclient0-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125847" version="1" comment="samba is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125848" version="1" comment="samba-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125849" version="1" comment="samba-client is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125850" version="1" comment="samba-client-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125851" version="1" comment="samba-doc is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125852" version="1" comment="samba-libs is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125853" version="1" comment="samba-libs-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125854" version="1" comment="samba-winbind is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125855" version="1" comment="samba-winbind-32bit is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126458" version="1" comment="libcairo-script-interpreter2 is &lt;1.12.16-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040388"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047406"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126711" version="1" comment="yast2-users is &lt;3.1.41.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047431"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126902" version="1" comment="ntp is &lt;4.2.8p6-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126903" version="1" comment="ntp-doc is &lt;4.2.8p6-8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009126904" version="1" comment="yast2-ntp-client is &lt;3.1.22-6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047442"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127136" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047481"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127137" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047481"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127138" version="1" comment="openssl is &lt;1.0.1i-47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047481"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127267" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.91-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047504"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127268" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.91-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047504"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127475" version="1" comment="ntp is &lt;4.2.8p7-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047525"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127476" version="1" comment="ntp-doc is &lt;4.2.8p7-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047525"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127725" version="1" comment="libgudev-1_0-0 is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037375"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127726" version="1" comment="libgudev-1_0-0-32bit is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037376"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127727" version="1" comment="libudev1 is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127728" version="1" comment="libudev1-32bit is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127729" version="1" comment="systemd is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127730" version="1" comment="systemd-32bit is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127731" version="1" comment="systemd-bash-completion is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127732" version="1" comment="systemd-sysvinit is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009127733" version="1" comment="udev is &lt;210-104.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047555"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009121339" version="1" comment="python-requests is &lt;2.8.1-6.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046772"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128797" version="1" comment="libspice-server1 is &lt;0.12.5-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047675"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128798" version="1" comment="spice is &lt;0.12.5-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047675"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128946" version="1" comment="libmysqlclient18 is &lt;10.0.25-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047697"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128947" version="1" comment="libmysqlclient18-32bit is &lt;10.0.25-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047697"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128948" version="1" comment="libmysqlclient_r18 is &lt;10.0.25-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047697"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128949" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.25-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047697"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128950" version="1" comment="mariadb is &lt;10.0.25-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047697"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128951" version="1" comment="mariadb-client is &lt;10.0.25-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047697"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009128952" version="1" comment="mariadb-errormessages is &lt;10.0.25-6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047697"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147398" version="1" comment="gstreamer-0_10-plugins-good is &lt;0.10.31-13.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147399" version="1" comment="gstreamer-0_10-plugins-good-lang is &lt;0.10.31-13.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051020"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147083" version="1" comment="gstreamer-0_10-plugins-base is &lt;0.10.36-11.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147084" version="1" comment="gstreamer-0_10-plugins-base-32bit is &lt;0.10.36-11.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030998"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147087" version="1" comment="gstreamer-0_10-plugins-base-lang is &lt;0.10.36-11.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147088" version="1" comment="libgstapp-0_10-0 is &lt;0.10.36-11.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147089" version="1" comment="libgstapp-0_10-0-32bit is &lt;0.10.36-11.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041186"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147090" version="1" comment="libgstinterfaces-0_10-0 is &lt;0.10.36-11.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031005"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147091" version="1" comment="libgstinterfaces-0_10-0-32bit is &lt;0.10.36-11.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146506" version="1" comment="gstreamer-0_10-plugins-bad is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146507" version="1" comment="gstreamer-0_10-plugins-bad-lang is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146508" version="1" comment="libgstbasecamerabinsrc-0_10-23 is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038732"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146509" version="1" comment="libgstbasecamerabinsrc-0_10-23-32bit is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038733"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146510" version="1" comment="libgstbasevideo-0_10-23 is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038734"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146511" version="1" comment="libgstbasevideo-0_10-23-32bit is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038735"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146512" version="1" comment="libgstcodecparsers-0_10-23 is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038736"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146513" version="1" comment="libgstphotography-0_10-23 is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038738"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146514" version="1" comment="libgstphotography-0_10-23-32bit is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038739"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146515" version="1" comment="libgstsignalprocessor-0_10-23 is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038740"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146516" version="1" comment="libgstsignalprocessor-0_10-23-32bit is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038741"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146517" version="1" comment="libgstvdp-0_10-23 is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038742"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146518" version="1" comment="libgstvdp-0_10-23-32bit is &lt;0.10.23-19.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038743"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147923" version="1" comment="gstreamer-0_10-plugins-bad is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147924" version="1" comment="gstreamer-0_10-plugins-bad-lang is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147925" version="1" comment="libgstbasecamerabinsrc-0_10-23 is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038732"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147926" version="1" comment="libgstbasecamerabinsrc-0_10-23-32bit is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038733"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147927" version="1" comment="libgstbasevideo-0_10-23 is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038734"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147928" version="1" comment="libgstbasevideo-0_10-23-32bit is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038735"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147929" version="1" comment="libgstcodecparsers-0_10-23 is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038736"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147930" version="1" comment="libgstphotography-0_10-23 is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038738"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147931" version="1" comment="libgstphotography-0_10-23-32bit is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038739"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147932" version="1" comment="libgstsignalprocessor-0_10-23 is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038740"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147933" version="1" comment="libgstsignalprocessor-0_10-23-32bit is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038741"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147934" version="1" comment="libgstvdp-0_10-23 is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038742"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147935" version="1" comment="libgstvdp-0_10-23-32bit is &lt;0.10.23-19.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038743"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051172"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147966" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.121-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051176"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147967" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.121-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051176"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148004" version="1" comment="gnutls is &lt;3.2.15-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030524"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051188"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148005" version="1" comment="libgnutls28 is &lt;3.2.15-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051188"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148006" version="1" comment="libgnutls28-32bit is &lt;3.2.15-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051188"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148035" version="1" comment="cpio is &lt;2.11-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030506"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148036" version="1" comment="cpio-lang is &lt;2.11-32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051195"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148137" version="1" comment="libspice-server1 is &lt;0.12.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051213"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148138" version="1" comment="spice is &lt;0.12.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051213"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148197" version="1" comment="libmysqlclient18 is &lt;10.0.29-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148198" version="1" comment="libmysqlclient18-32bit is &lt;10.0.29-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148199" version="1" comment="libmysqlclient_r18 is &lt;10.0.29-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148200" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.29-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148201" version="1" comment="mariadb is &lt;10.0.29-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148202" version="1" comment="mariadb-client is &lt;10.0.29-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148203" version="1" comment="mariadb-errormessages is &lt;10.0.29-22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051226"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148246" version="1" comment="MozillaFirefox is &lt;45.7.0esr-99.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051232"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148247" version="1" comment="MozillaFirefox-translations is &lt;45.7.0esr-99.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051232"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148262" version="1" comment="opus is &lt;1.1-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041431"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148341" version="1" comment="libtiff5 is &lt;4.0.7-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148342" version="1" comment="libtiff5-32bit is &lt;4.0.7-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148343" version="1" comment="tiff is &lt;4.0.7-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148395" version="1" comment="libopenssl1_0_0 is &lt;1.0.1i-54.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148396" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.1i-54.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148397" version="1" comment="openssl is &lt;1.0.1i-54.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148398" version="1" comment="kernel-default is &lt;3.12.69-60.64.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148399" version="1" comment="kernel-default-devel is &lt;3.12.69-60.64.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148400" version="1" comment="kernel-default-extra is &lt;3.12.69-60.64.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148401" version="1" comment="kernel-devel is &lt;3.12.69-60.64.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148402" version="1" comment="kernel-macros is &lt;3.12.69-60.64.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148403" version="1" comment="kernel-source is &lt;3.12.69-60.64.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148404" version="1" comment="kernel-syms is &lt;3.12.69-60.64.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148405" version="1" comment="kernel-xen is &lt;3.12.69-60.64.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148406" version="1" comment="kernel-xen-devel is &lt;3.12.69-60.64.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148435" version="1" comment="libXpm is &lt;3.5.11-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051265"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148539" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.131-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051281"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148540" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.131-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051281"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148658" version="1" comment="tigervnc is &lt;1.4.3-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049920"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148659" version="1" comment="xorg-x11-Xvnc is &lt;1.4.3-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009049920"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148660" version="1" comment="kernel-default is &lt;3.12.69-60.64.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051298"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148661" version="1" comment="kernel-default-devel is &lt;3.12.69-60.64.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051298"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148662" version="1" comment="kernel-default-extra is &lt;3.12.69-60.64.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051298"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148663" version="1" comment="kernel-devel is &lt;3.12.69-60.64.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051298"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148664" version="1" comment="kernel-macros is &lt;3.12.69-60.64.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051298"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148665" version="1" comment="kernel-source is &lt;3.12.69-60.64.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051298"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148666" version="1" comment="kernel-syms is &lt;3.12.69-60.64.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051298"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148667" version="1" comment="kernel-xen is &lt;3.12.69-60.64.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051298"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148668" version="1" comment="kernel-xen-devel is &lt;3.12.69-60.64.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051298"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148669" version="1" comment="flash-player is &lt;24.0.0.221-158.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051299"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148670" version="1" comment="flash-player-gnome is &lt;24.0.0.221-158.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051299"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146849" version="1" comment="jasper is &lt;1.900.14-184.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146850" version="1" comment="libjasper1 is &lt;1.900.14-184.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034778"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146851" version="1" comment="libjasper1-32bit is &lt;1.900.14-184.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034777"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148700" version="1" comment="ImageMagick is &lt;6.8.8.1-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051305"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148701" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051305"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148702" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051305"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148703" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051305"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148704" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051305"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148828" version="1" comment="libblkid1 is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148829" version="1" comment="libblkid1-32bit is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148830" version="1" comment="libmount1 is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148831" version="1" comment="libmount1-32bit is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038355"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148832" version="1" comment="libsmartcols1 is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148833" version="1" comment="libuuid-devel is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148834" version="1" comment="libuuid1 is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148835" version="1" comment="libuuid1-32bit is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148836" version="1" comment="python-libmount is &lt;2.25-40.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051317"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148837" version="1" comment="util-linux is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148838" version="1" comment="util-linux-lang is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148839" version="1" comment="util-linux-systemd is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148840" version="1" comment="uuidd is &lt;2.25-40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051316"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148939" version="1" comment="xen is &lt;4.5.5_06-22.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051325"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148940" version="1" comment="xen-kmp-default is &lt;4.5.5_06_k3.12.69_60.64.32-22.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051326"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148941" version="1" comment="xen-libs is &lt;4.5.5_06-22.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051325"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148942" version="1" comment="xen-libs-32bit is &lt;4.5.5_06-22.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051325"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146177" version="1" comment="libz1 is &lt;1.2.8-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041210"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146178" version="1" comment="libz1-32bit is &lt;1.2.8-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041211"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146179" version="1" comment="zlib is &lt;1.2.8-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030541"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149099" version="1" comment="bind is &lt;9.9.9P1-56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149100" version="1" comment="bind-libs is &lt;9.9.9P1-56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149101" version="1" comment="bind-libs-32bit is &lt;9.9.9P1-56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149102" version="1" comment="bind-utils is &lt;9.9.9P1-56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149122" version="1" comment="compat-openssl098 is &lt;0.9.8j-105.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051342"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149133" version="1" comment="openssh is &lt;6.6p1-54.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051347"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149134" version="1" comment="openssh-askpass-gnome is &lt;6.6p1-54.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032625"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051347"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149135" version="1" comment="openssh-helpers is &lt;6.6p1-54.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051347"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149136" version="1" comment="libquicktime is &lt;1.2.4-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051348"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149424" version="1" comment="dracut is &lt;037-91.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051368"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149562" version="1" comment="dbus-1 is &lt;1.8.22-24.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149563" version="1" comment="dbus-1-x11 is &lt;1.8.22-24.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149564" version="1" comment="libdbus-1-3 is &lt;1.8.22-24.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149565" version="1" comment="libdbus-1-3-32bit is &lt;1.8.22-24.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051397"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149566" version="1" comment="gegl is &lt;0.2.0-10.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035373"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051398"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149567" version="1" comment="gegl-0_2 is &lt;0.2.0-10.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051398"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149568" version="1" comment="gegl-0_2-lang is &lt;0.2.0-10.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035376"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051398"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149569" version="1" comment="libgegl-0_2-0 is &lt;0.2.0-10.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035381"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051398"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149570" version="1" comment="libvmtools0 is &lt;10.1.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034560"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149571" version="1" comment="open-vm-tools is &lt;10.1.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034562"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149572" version="1" comment="open-vm-tools-desktop is &lt;10.1.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051399"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149573" version="1" comment="flash-player is &lt;25.0.0.127-162.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051400"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149574" version="1" comment="flash-player-gnome is &lt;25.0.0.127-162.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051400"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149619" version="1" comment="MozillaFirefox is &lt;45.8.0esr-102.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051412"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149620" version="1" comment="MozillaFirefox-translations is &lt;45.8.0esr-102.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051412"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149947" version="1" comment="libpng16 is &lt;1.6.8-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037592"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051456"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149950" version="1" comment="libdcerpc-binding0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149951" version="1" comment="libdcerpc-binding0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149952" version="1" comment="libdcerpc0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149953" version="1" comment="libdcerpc0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149954" version="1" comment="libgensec0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149955" version="1" comment="libgensec0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149956" version="1" comment="libndr-krb5pac0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149957" version="1" comment="libndr-krb5pac0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149958" version="1" comment="libndr-nbt0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149959" version="1" comment="libndr-nbt0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149960" version="1" comment="libndr-standard0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149961" version="1" comment="libndr-standard0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149962" version="1" comment="libndr0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149963" version="1" comment="libndr0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149964" version="1" comment="libnetapi0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149965" version="1" comment="libnetapi0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149966" version="1" comment="libregistry0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149967" version="1" comment="libsamba-credentials0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149968" version="1" comment="libsamba-credentials0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149969" version="1" comment="libsamba-hostconfig0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149970" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149971" version="1" comment="libsamba-passdb0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149972" version="1" comment="libsamba-passdb0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149973" version="1" comment="libsamba-util0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149974" version="1" comment="libsamba-util0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149975" version="1" comment="libsamdb0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149976" version="1" comment="libsamdb0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149977" version="1" comment="libsmbclient-raw0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149978" version="1" comment="libsmbclient-raw0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149979" version="1" comment="libsmbclient0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149980" version="1" comment="libsmbclient0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149981" version="1" comment="libsmbconf0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149982" version="1" comment="libsmbconf0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149983" version="1" comment="libsmbldap0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149984" version="1" comment="libsmbldap0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149985" version="1" comment="libtevent-util0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149986" version="1" comment="libtevent-util0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149987" version="1" comment="libwbclient0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149988" version="1" comment="libwbclient0-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149989" version="1" comment="samba is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149990" version="1" comment="samba-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149991" version="1" comment="samba-client is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149992" version="1" comment="samba-client-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149993" version="1" comment="samba-doc is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149994" version="1" comment="samba-libs is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149995" version="1" comment="samba-libs-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149996" version="1" comment="samba-winbind is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149997" version="1" comment="samba-winbind-32bit is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149998" version="1" comment="libpng12 is &lt;1.2.50-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036867"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051458"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150001" version="1" comment="kernel-default is &lt;3.12.69-60.64.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150002" version="1" comment="kernel-default-devel is &lt;3.12.69-60.64.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150003" version="1" comment="kernel-default-extra is &lt;3.12.69-60.64.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150004" version="1" comment="kernel-devel is &lt;3.12.69-60.64.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150005" version="1" comment="kernel-macros is &lt;3.12.69-60.64.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150006" version="1" comment="kernel-source is &lt;3.12.69-60.64.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150007" version="1" comment="kernel-syms is &lt;3.12.69-60.64.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150008" version="1" comment="kernel-xen is &lt;3.12.69-60.64.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150009" version="1" comment="kernel-xen-devel is &lt;3.12.69-60.64.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051454"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146876" version="1" comment="flash-player is &lt;24.0.0.194-155.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050957"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146877" version="1" comment="flash-player-gnome is &lt;24.0.0.194-155.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050957"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146878" version="1" comment="bind is &lt;9.9.9P1-53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146879" version="1" comment="bind-libs is &lt;9.9.9P1-53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146880" version="1" comment="bind-libs-32bit is &lt;9.9.9P1-53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146881" version="1" comment="bind-utils is &lt;9.9.9P1-53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150809" version="1" comment="libpng15 is &lt;1.5.22-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051506"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150811" version="1" comment="jasper is &lt;1.900.14-194.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150825" version="1" comment="gstreamer is &lt;1.2.4-2.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150826" version="1" comment="gstreamer-lang is &lt;1.2.4-2.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041490"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150827" version="1" comment="gstreamer-utils is &lt;1.2.4-2.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150828" version="1" comment="libgstreamer-1_0-0 is &lt;1.2.4-2.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150829" version="1" comment="libgstreamer-1_0-0-32bit is &lt;1.2.4-2.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041493"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150830" version="1" comment="typelib-1_0-Gst-1_0 is &lt;1.2.4-2.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009151001" version="1" comment="flash-player is &lt;25.0.0.148-165.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009151002" version="1" comment="flash-player-gnome is &lt;25.0.0.148-165.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051524"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154295" version="1" comment="bind is &lt;9.9.9P1-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051529"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154296" version="1" comment="bind-libs is &lt;9.9.9P1-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051529"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154297" version="1" comment="bind-libs-32bit is &lt;9.9.9P1-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051529"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154298" version="1" comment="bind-utils is &lt;9.9.9P1-59.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051529"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154318" version="1" comment="gstreamer-0_10-plugins-base is &lt;0.10.36-11.6.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051532"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154319" version="1" comment="gstreamer-0_10-plugins-base-32bit is &lt;0.10.36-11.6.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030998"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051532"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154320" version="1" comment="gstreamer-0_10-plugins-base-lang is &lt;0.10.36-11.6.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051532"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154321" version="1" comment="libgstapp-0_10-0 is &lt;0.10.36-11.6.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051532"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154322" version="1" comment="libgstapp-0_10-0-32bit is &lt;0.10.36-11.6.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041186"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051532"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154323" version="1" comment="libgstinterfaces-0_10-0 is &lt;0.10.36-11.6.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031005"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051532"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154324" version="1" comment="libgstinterfaces-0_10-0-32bit is &lt;0.10.36-11.6.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051532"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154325" version="1" comment="gstreamer-plugins-good is &lt;1.2.4-2.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051533"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154326" version="1" comment="gstreamer-plugins-good-lang is &lt;1.2.4-2.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051533"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154374" version="1" comment="gstreamer-plugins-base is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041337"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154375" version="1" comment="gstreamer-plugins-base-lang is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154376" version="1" comment="libgstallocators-1_0-0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154377" version="1" comment="libgstapp-1_0-0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154378" version="1" comment="libgstapp-1_0-0-32bit is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041345"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154379" version="1" comment="libgstaudio-1_0-0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041346"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154380" version="1" comment="libgstaudio-1_0-0-32bit is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154381" version="1" comment="libgstfft-1_0-0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041348"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154382" version="1" comment="libgstfft-1_0-0-32bit is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041349"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154383" version="1" comment="libgstpbutils-1_0-0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154384" version="1" comment="libgstpbutils-1_0-0-32bit is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041351"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154385" version="1" comment="libgstriff-1_0-0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041352"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154386" version="1" comment="libgstrtp-1_0-0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154387" version="1" comment="libgstrtsp-1_0-0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154388" version="1" comment="libgstsdp-1_0-0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154389" version="1" comment="libgsttag-1_0-0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154390" version="1" comment="libgsttag-1_0-0-32bit is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154391" version="1" comment="libgstvideo-1_0-0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154392" version="1" comment="libgstvideo-1_0-0-32bit is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154393" version="1" comment="typelib-1_0-GstAudio-1_0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041366"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154394" version="1" comment="typelib-1_0-GstPbutils-1_0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154395" version="1" comment="typelib-1_0-GstTag-1_0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041373"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154396" version="1" comment="typelib-1_0-GstVideo-1_0 is &lt;1.2.4-2.6.8" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051541"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154397" version="1" comment="libsndfile is &lt;1.0.25-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154398" version="1" comment="libsndfile1 is &lt;1.0.25-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154399" version="1" comment="libsndfile1-32bit is &lt;1.0.25-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038351"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154406" version="1" comment="ntp is &lt;4.2.8p10-60.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051545"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154407" version="1" comment="ntp-doc is &lt;4.2.8p10-60.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051545"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154606" version="1" comment="libruby2_1-2_1 is &lt;2.1.9-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051571"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154607" version="1" comment="ruby2.1 is &lt;2.1.9-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051571"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154608" version="1" comment="ruby2.1-stdlib is &lt;2.1.9-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038315"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051571"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154694" version="1" comment="tigervnc is &lt;1.4.3-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051584"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154695" version="1" comment="xorg-x11-Xvnc is &lt;1.4.3-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051584"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154701" version="1" comment="zziplib is &lt;0.13.62-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154702" version="1" comment="update-alternatives is &lt;1.16.10-12.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051586"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154728" version="1" comment="libpcap is &lt;1.8.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041558"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051593"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154729" version="1" comment="libpcap1 is &lt;1.8.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041559"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051593"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154730" version="1" comment="libpcap1-32bit is &lt;1.8.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041560"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051593"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154807" version="1" comment="ghostscript is &lt;9.15-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051604"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154808" version="1" comment="ghostscript-x11 is &lt;9.15-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030822"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051604"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154906" version="1" comment="xen is &lt;4.5.5_10-22.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051620"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154907" version="1" comment="xen-kmp-default is &lt;4.5.5_10_k3.12.69_60.64.35-22.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033788"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051621"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154908" version="1" comment="xen-libs is &lt;4.5.5_10-22.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051620"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154909" version="1" comment="xen-libs-32bit is &lt;4.5.5_10-22.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051620"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154910" version="1" comment="graphite2 is &lt;1.3.1-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051622"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154913" version="1" comment="apparmor is &lt;2.8.2-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154914" version="1" comment="apparmor-docs is &lt;2.8.2-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040404"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154915" version="1" comment="apparmor-parser is &lt;2.8.2-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154916" version="1" comment="apparmor-profiles is &lt;2.8.2-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040407"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154917" version="1" comment="apparmor-utils is &lt;2.8.2-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040408"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154918" version="1" comment="libapparmor1 is &lt;2.8.2-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040411"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154919" version="1" comment="libapparmor1-32bit is &lt;2.8.2-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040412"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154920" version="1" comment="pam_apparmor is &lt;2.8.2-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040413"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154921" version="1" comment="pam_apparmor-32bit is &lt;2.8.2-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154922" version="1" comment="perl-apparmor is &lt;2.8.2-54.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040415"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051623"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154923" version="1" comment="firebird-classic is &lt;2.5.2.26539-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035733"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051619"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155280" version="1" comment="flash-player is &lt;25.0.0.171-168.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051671"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155281" version="1" comment="flash-player-gnome is &lt;25.0.0.171-168.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051671"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155303" version="1" comment="qemu is &lt;2.3.1-32.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155304" version="1" comment="qemu-block-curl is &lt;2.3.1-32.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155305" version="1" comment="qemu-ipxe is &lt;1.0.0-32.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051679"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155306" version="1" comment="qemu-kvm is &lt;2.3.1-32.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155307" version="1" comment="qemu-seabios is &lt;1.8.1-32.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051680"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155308" version="1" comment="qemu-sgabios is &lt;8-32.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051681"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155309" version="1" comment="qemu-tools is &lt;2.3.1-32.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155310" version="1" comment="qemu-vgabios is &lt;1.8.1-32.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051680"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155311" version="1" comment="qemu-x86 is &lt;2.3.1-32.11" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155312" version="1" comment="MozillaFirefox is &lt;45.9.0esr-105.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051682"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155313" version="1" comment="MozillaFirefox-translations is &lt;45.9.0esr-105.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051682"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155314" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.121-23.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051683"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155315" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.121-23.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051683"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155532" version="1" comment="libtirpc is &lt;0.2.3-13.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051704"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155533" version="1" comment="libtirpc1 is &lt;0.2.3-13.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041197"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051704"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155534" version="1" comment="libtirpc1-32bit is &lt;0.2.3-13.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051704"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155535" version="1" comment="libxslt is &lt;1.1.28-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030843"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051705"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155539" version="1" comment="libmysqlclient18 is &lt;10.0.30-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155540" version="1" comment="libmysqlclient18-32bit is &lt;10.0.30-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155541" version="1" comment="libmysqlclient_r18 is &lt;10.0.30-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155542" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.30-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155543" version="1" comment="mariadb is &lt;10.0.30-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155544" version="1" comment="mariadb-client is &lt;10.0.30-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155545" version="1" comment="mariadb-errormessages is &lt;10.0.30-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155613" version="1" comment="rpcbind is &lt;0.2.1_rc4-17.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051719"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155647" version="1" comment="kernel-default is &lt;3.12.74-60.64.40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051728"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155648" version="1" comment="kernel-default-devel is &lt;3.12.74-60.64.40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051728"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155649" version="1" comment="kernel-default-extra is &lt;3.12.74-60.64.40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051728"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155650" version="1" comment="kernel-devel is &lt;3.12.74-60.64.40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051728"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155651" version="1" comment="kernel-macros is &lt;3.12.74-60.64.40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051728"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155652" version="1" comment="kernel-source is &lt;3.12.74-60.64.40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051728"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155653" version="1" comment="kernel-syms is &lt;3.12.74-60.64.40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051728"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155654" version="1" comment="kernel-xen is &lt;3.12.74-60.64.40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051728"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155655" version="1" comment="kernel-xen-devel is &lt;3.12.74-60.64.40.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033563"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051728"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155678" version="1" comment="libxml2 is &lt;2.9.1-26.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051731"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155679" version="1" comment="libxml2-2 is &lt;2.9.1-26.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051731"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155680" version="1" comment="libxml2-2-32bit is &lt;2.9.1-26.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051731"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155681" version="1" comment="libxml2-tools is &lt;2.9.1-26.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051731"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155682" version="1" comment="python-libxml2 is &lt;2.9.1-26.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051731"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155683" version="1" comment="libsndfile is &lt;1.0.25-35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051732"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155686" version="1" comment="libplist is &lt;1.8-10.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041438"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051733"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155687" version="1" comment="libplist++1 is &lt;1.8-10.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041616"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051733"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155688" version="1" comment="libplist1 is &lt;1.8-10.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041617"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051733"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155755" version="1" comment="libdcerpc-binding0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155756" version="1" comment="libdcerpc-binding0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155757" version="1" comment="libdcerpc0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155758" version="1" comment="libdcerpc0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155759" version="1" comment="libgensec0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155760" version="1" comment="libgensec0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037454"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155761" version="1" comment="libndr-krb5pac0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155762" version="1" comment="libndr-krb5pac0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155763" version="1" comment="libndr-nbt0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155764" version="1" comment="libndr-nbt0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155765" version="1" comment="libndr-standard0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155766" version="1" comment="libndr-standard0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155767" version="1" comment="libndr0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155768" version="1" comment="libndr0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155769" version="1" comment="libnetapi0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155770" version="1" comment="libnetapi0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155771" version="1" comment="libregistry0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037474"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155772" version="1" comment="libsamba-credentials0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155773" version="1" comment="libsamba-credentials0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155774" version="1" comment="libsamba-hostconfig0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155775" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155776" version="1" comment="libsamba-passdb0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155777" version="1" comment="libsamba-passdb0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155778" version="1" comment="libsamba-util0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155779" version="1" comment="libsamba-util0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155780" version="1" comment="libsamdb0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155781" version="1" comment="libsamdb0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155782" version="1" comment="libsmbclient-raw0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037492"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155783" version="1" comment="libsmbclient-raw0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037491"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155784" version="1" comment="libsmbclient0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155785" version="1" comment="libsmbclient0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155786" version="1" comment="libsmbconf0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155787" version="1" comment="libsmbconf0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155788" version="1" comment="libsmbldap0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155789" version="1" comment="libsmbldap0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155790" version="1" comment="libtevent-util0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155791" version="1" comment="libtevent-util0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155792" version="1" comment="libwbclient0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155793" version="1" comment="libwbclient0-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155794" version="1" comment="samba is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155795" version="1" comment="samba-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030769"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155796" version="1" comment="samba-client is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155797" version="1" comment="samba-client-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155798" version="1" comment="samba-doc is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155799" version="1" comment="samba-libs is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155800" version="1" comment="samba-libs-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155801" version="1" comment="samba-winbind is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155802" version="1" comment="samba-winbind-32bit is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156228" version="1" comment="libwireshark8 is &lt;2.2.6-44.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051763"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156229" version="1" comment="libwiretap6 is &lt;2.2.6-44.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051763"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156230" version="1" comment="libwscodecs1 is &lt;2.2.6-44.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051763"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156231" version="1" comment="libwsutil7 is &lt;2.2.6-44.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041623"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051763"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156232" version="1" comment="wireshark is &lt;2.2.6-44.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051763"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156233" version="1" comment="wireshark-gtk is &lt;2.2.6-44.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051763"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156234" version="1" comment="sudo is &lt;1.8.10p3-2.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030544"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147204" version="1" comment="gstreamer-plugins-base is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041337"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147205" version="1" comment="gstreamer-plugins-base-lang is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147206" version="1" comment="libgstallocators-1_0-0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147207" version="1" comment="libgstapp-1_0-0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147208" version="1" comment="libgstapp-1_0-0-32bit is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041345"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147209" version="1" comment="libgstaudio-1_0-0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041346"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147210" version="1" comment="libgstaudio-1_0-0-32bit is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147211" version="1" comment="libgstfft-1_0-0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041348"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147212" version="1" comment="libgstfft-1_0-0-32bit is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041349"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147213" version="1" comment="libgstpbutils-1_0-0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147214" version="1" comment="libgstpbutils-1_0-0-32bit is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041351"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147215" version="1" comment="libgstriff-1_0-0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041352"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147216" version="1" comment="libgstrtp-1_0-0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147217" version="1" comment="libgstrtsp-1_0-0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147218" version="1" comment="libgstsdp-1_0-0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147219" version="1" comment="libgsttag-1_0-0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147220" version="1" comment="libgsttag-1_0-0-32bit is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147221" version="1" comment="libgstvideo-1_0-0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147222" version="1" comment="libgstvideo-1_0-0-32bit is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147223" version="1" comment="typelib-1_0-GstAudio-1_0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041366"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147224" version="1" comment="typelib-1_0-GstPbutils-1_0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147225" version="1" comment="typelib-1_0-GstTag-1_0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041373"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147226" version="1" comment="typelib-1_0-GstVideo-1_0 is &lt;1.2.4-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135543" version="1" comment="libX11 is &lt;1.6.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046475"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135544" version="1" comment="libX11-6 is &lt;1.6.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046475"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135545" version="1" comment="libX11-6-32bit is &lt;1.6.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046475"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135546" version="1" comment="libX11-data is &lt;1.6.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036218"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046475"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135547" version="1" comment="libX11-xcb1 is &lt;1.6.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046475"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135548" version="1" comment="libX11-xcb1-32bit is &lt;1.6.2-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046475"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135058" version="1" comment="libXfixes is &lt;5.0.1-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036079"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135549" version="1" comment="libXi is &lt;1.7.4-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048549"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135550" version="1" comment="libXi6 is &lt;1.7.4-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036145"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048549"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135551" version="1" comment="libXi6-32bit is &lt;1.7.4-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036146"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048549"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135552" version="1" comment="libXrender is &lt;0.9.8-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036095"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048550"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135078" version="1" comment="libXtst is &lt;1.2.2-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036173"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048475"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135083" version="1" comment="libXv is &lt;1.0.10-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036111"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048476"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135555" version="1" comment="libXvMC is &lt;1.0.8-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036181"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048551"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135679" version="1" comment="libpython3_4m1_0 is &lt;3.4.5-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135680" version="1" comment="python3 is &lt;3.4.5-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135681" version="1" comment="python3-base is &lt;3.4.5-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135682" version="1" comment="python3-curses is &lt;3.4.5-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048563"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135866" version="1" comment="qemu is &lt;2.6.2-31.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048580"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135867" version="1" comment="qemu-block-curl is &lt;2.6.2-31.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048580"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135868" version="1" comment="qemu-ipxe is &lt;1.0.0-31.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048581"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135869" version="1" comment="qemu-kvm is &lt;2.6.2-31.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048580"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135870" version="1" comment="qemu-seabios is &lt;1.9.1-31.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048582"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135871" version="1" comment="qemu-sgabios is &lt;8-31.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048583"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135872" version="1" comment="qemu-tools is &lt;2.6.2-31.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048580"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135873" version="1" comment="qemu-vgabios is &lt;1.9.1-31.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048582"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135874" version="1" comment="qemu-x86 is &lt;2.6.2-31.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048580"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135931" version="1" comment="sudo is &lt;1.8.10p3-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030544"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048594"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136138" version="1" comment="libblkid1 is &lt;2.28-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048625"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136139" version="1" comment="libblkid1-32bit is &lt;2.28-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048625"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136140" version="1" comment="libfdisk1 is &lt;2.28-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040900"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048625"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136141" version="1" comment="libmount1 is &lt;2.28-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048625"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136142" version="1" comment="libmount1-32bit is &lt;2.28-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038355"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048625"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136143" version="1" comment="libsmartcols1 is &lt;2.28-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048625"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136144" version="1" comment="libuuid-devel is &lt;2.28-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048625"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136145" version="1" comment="libuuid1 is &lt;2.28-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048625"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136146" version="1" comment="libuuid1-32bit is &lt;2.28-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048625"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136147" version="1" comment="python-libmount is &lt;2.28-42.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048626"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136148" version="1" comment="util-linux is &lt;2.28-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048625"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136149" version="1" comment="util-linux-lang is &lt;2.28-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048625"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136150" version="1" comment="util-linux-systemd is &lt;2.28-42.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048627"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136151" version="1" comment="uuidd is &lt;2.28-42.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048627"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136647" version="1" comment="kernel-default is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136648" version="1" comment="kernel-default-devel is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136649" version="1" comment="kernel-default-extra is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136650" version="1" comment="kernel-devel is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136651" version="1" comment="kernel-macros is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136652" version="1" comment="kernel-source is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136653" version="1" comment="kernel-syms is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142153" version="1" comment="xen is &lt;4.7.1_02-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050255"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142154" version="1" comment="xen-libs is &lt;4.7.1_02-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050255"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142155" version="1" comment="xen-libs-32bit is &lt;4.7.1_02-25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050255"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142722" version="1" comment="kernel-default is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142723" version="1" comment="kernel-default-devel is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142724" version="1" comment="kernel-default-extra is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142725" version="1" comment="kernel-devel is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142726" version="1" comment="kernel-macros is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142727" version="1" comment="kernel-source is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142728" version="1" comment="kernel-syms is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144642" version="1" comment="xen is &lt;4.7.1_04-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050778"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144643" version="1" comment="xen-libs is &lt;4.7.1_04-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050778"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009144644" version="1" comment="xen-libs-32bit is &lt;4.7.1_04-28.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050778"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145908" version="1" comment="openjpeg2 is &lt;2.1.0-3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050878"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145909" version="1" comment="libdcerpc-binding0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145910" version="1" comment="libdcerpc-binding0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145911" version="1" comment="libdcerpc0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145912" version="1" comment="libdcerpc0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145913" version="1" comment="libndr-krb5pac0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145914" version="1" comment="libndr-krb5pac0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145915" version="1" comment="libndr-nbt0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145916" version="1" comment="libndr-nbt0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145917" version="1" comment="libndr-standard0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145918" version="1" comment="libndr-standard0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145919" version="1" comment="libndr0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145920" version="1" comment="libndr0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145921" version="1" comment="libnetapi0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145922" version="1" comment="libnetapi0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145923" version="1" comment="libsamba-credentials0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145924" version="1" comment="libsamba-credentials0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145925" version="1" comment="libsamba-errors0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145926" version="1" comment="libsamba-errors0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145927" version="1" comment="libsamba-hostconfig0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145928" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145929" version="1" comment="libsamba-passdb0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145930" version="1" comment="libsamba-passdb0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145931" version="1" comment="libsamba-util0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145932" version="1" comment="libsamba-util0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145933" version="1" comment="libsamdb0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145934" version="1" comment="libsamdb0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145935" version="1" comment="libsmbclient0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145936" version="1" comment="libsmbclient0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145937" version="1" comment="libsmbconf0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145938" version="1" comment="libsmbconf0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145939" version="1" comment="libsmbldap0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145940" version="1" comment="libsmbldap0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145941" version="1" comment="libtevent-util0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145942" version="1" comment="libtevent-util0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145943" version="1" comment="libwbclient0 is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145944" version="1" comment="libwbclient0-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145945" version="1" comment="samba is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145946" version="1" comment="samba-client is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145947" version="1" comment="samba-client-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145948" version="1" comment="samba-doc is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145949" version="1" comment="samba-libs is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145950" version="1" comment="samba-libs-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145951" version="1" comment="samba-winbind is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145952" version="1" comment="samba-winbind-32bit is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145953" version="1" comment="libdcerpc-atsvc0 is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146015" version="1" comment="gstreamer-plugins-bad is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146016" version="1" comment="gstreamer-plugins-bad-lang is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146017" version="1" comment="libgstadaptivedemux-1_0-0 is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146018" version="1" comment="libgstbadaudio-1_0-0 is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146019" version="1" comment="libgstbadbase-1_0-0 is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041154"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146020" version="1" comment="libgstbadvideo-1_0-0 is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041156"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146021" version="1" comment="libgstbasecamerabinsrc-1_0-0 is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041158"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146022" version="1" comment="libgstcodecparsers-1_0-0 is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146023" version="1" comment="libgstgl-1_0-0 is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041162"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146024" version="1" comment="libgstmpegts-1_0-0 is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041166"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146025" version="1" comment="libgstphotography-1_0-0 is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041168"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146026" version="1" comment="libgsturidownloader-1_0-0 is &lt;1.8.3-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041170"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050891"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146145" version="1" comment="gstreamer-plugins-good is &lt;1.8.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050898"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146146" version="1" comment="gstreamer-plugins-good-lang is &lt;1.8.3-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050898"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157165" version="1" comment="sudo is &lt;1.8.10p3-10.10.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030544"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051931"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147348" version="1" comment="gstreamer-plugins-base is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041337"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147349" version="1" comment="gstreamer-plugins-base-lang is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041341"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147350" version="1" comment="libgstallocators-1_0-0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041342"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147351" version="1" comment="libgstapp-1_0-0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147352" version="1" comment="libgstapp-1_0-0-32bit is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041345"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147353" version="1" comment="libgstaudio-1_0-0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041346"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147354" version="1" comment="libgstaudio-1_0-0-32bit is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147355" version="1" comment="libgstfft-1_0-0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041348"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147356" version="1" comment="libgstfft-1_0-0-32bit is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041349"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147357" version="1" comment="libgstpbutils-1_0-0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147358" version="1" comment="libgstpbutils-1_0-0-32bit is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041351"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147359" version="1" comment="libgstriff-1_0-0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041352"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147360" version="1" comment="libgstrtp-1_0-0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147361" version="1" comment="libgstrtsp-1_0-0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147362" version="1" comment="libgstsdp-1_0-0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041358"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147363" version="1" comment="libgsttag-1_0-0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147364" version="1" comment="libgsttag-1_0-0-32bit is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147365" version="1" comment="libgstvideo-1_0-0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147366" version="1" comment="libgstvideo-1_0-0-32bit is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147367" version="1" comment="typelib-1_0-GstAudio-1_0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041366"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147368" version="1" comment="typelib-1_0-GstPbutils-1_0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147369" version="1" comment="typelib-1_0-GstTag-1_0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041373"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147370" version="1" comment="typelib-1_0-GstVideo-1_0 is &lt;1.8.3-9.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041374"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051012"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157338" version="1" comment="cairo is &lt;1.15.2-24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031471"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157345" version="1" comment="MozillaFirefox-branding-SLE is &lt;52-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038244"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157347" version="1" comment="libxml2 is &lt;2.9.4-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157348" version="1" comment="libxml2-2 is &lt;2.9.4-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157349" version="1" comment="libxml2-2-32bit is &lt;2.9.4-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157350" version="1" comment="libxml2-tools is &lt;2.9.4-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157351" version="1" comment="python-libxml2 is &lt;2.9.4-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051956"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157355" version="1" comment="poppler is &lt;0.24.4-14.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157356" version="1" comment="postgresql94 is &lt;9.4.12-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039800"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051959"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157580" version="1" comment="kernel-default is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157581" version="1" comment="kernel-default-devel is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157582" version="1" comment="kernel-default-extra is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157583" version="1" comment="kernel-devel is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157584" version="1" comment="kernel-macros is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157585" version="1" comment="kernel-source is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157586" version="1" comment="kernel-syms is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157767" version="1" comment="libxml2 is &lt;2.9.4-45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051991"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157772" version="1" comment="xen is &lt;4.7.2_06-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157773" version="1" comment="xen-libs is &lt;4.7.2_06-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157774" version="1" comment="xen-libs-32bit is &lt;4.7.2_06-42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051992"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157915" version="1" comment="qemu is &lt;2.6.2-41.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157916" version="1" comment="qemu-block-curl is &lt;2.6.2-41.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157917" version="1" comment="qemu-ipxe is &lt;1.0.0-41.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052005"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157918" version="1" comment="qemu-kvm is &lt;2.6.2-41.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157919" version="1" comment="qemu-seabios is &lt;1.9.1-41.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052006"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157920" version="1" comment="qemu-sgabios is &lt;8-41.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157921" version="1" comment="qemu-tools is &lt;2.6.2-41.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157922" version="1" comment="qemu-vgabios is &lt;1.9.1-41.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052006"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157923" version="1" comment="qemu-x86 is &lt;2.6.2-41.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052004"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157924" version="1" comment="libsystemd0 is &lt;228-149.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157925" version="1" comment="libsystemd0-32bit is &lt;228-149.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157926" version="1" comment="libudev1 is &lt;228-149.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157927" version="1" comment="libudev1-32bit is &lt;228-149.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157928" version="1" comment="systemd is &lt;228-149.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157929" version="1" comment="systemd-32bit is &lt;228-149.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157930" version="1" comment="systemd-bash-completion is &lt;228-149.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157931" version="1" comment="systemd-sysvinit is &lt;228-149.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157932" version="1" comment="udev is &lt;228-149.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052008"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157933" version="1" comment="sudo is &lt;1.8.10p3-10.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030544"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052009"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157934" version="1" comment="libquicktime is &lt;1.2.4-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052010"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157935" version="1" comment="libquicktime0 is &lt;1.2.4-13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052010"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157986" version="1" comment="libgcrypt is &lt;1.6.1-16.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036338"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157987" version="1" comment="libgcrypt20 is &lt;1.6.1-16.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157988" version="1" comment="libgcrypt20-32bit is &lt;1.6.1-16.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038772"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052018"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157989" version="1" comment="libcares2 is &lt;1.9.1-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040902"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052019"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157990" version="1" comment="libcares2-32bit is &lt;1.9.1-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040903"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052019"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158170" version="1" comment="libncurses5 is &lt;5.9-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041695"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158171" version="1" comment="libncurses5-32bit is &lt;5.9-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041696"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158172" version="1" comment="libncurses6 is &lt;5.9-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041698"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158173" version="1" comment="libncurses6-32bit is &lt;5.9-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158174" version="1" comment="ncurses is &lt;5.9-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032515"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158175" version="1" comment="ncurses-devel is &lt;5.9-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032514"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158176" version="1" comment="ncurses-utils is &lt;5.9-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158177" version="1" comment="tack is &lt;5.9-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041694"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158178" version="1" comment="terminfo is &lt;5.9-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158179" version="1" comment="terminfo-base is &lt;5.9-44.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041702"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052037"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158180" version="1" comment="libixion is &lt;0.12.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052038"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158181" version="1" comment="libixion-0_12-0 is &lt;0.12.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041713"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052038"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158182" version="1" comment="libmwaw is &lt;0.3.11-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052039"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158183" version="1" comment="libmwaw-0_3-3 is &lt;0.3.11-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052039"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158184" version="1" comment="liborcus is &lt;0.12.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039156"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052038"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158185" version="1" comment="liborcus-0_12-0 is &lt;0.12.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041714"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052038"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158186" version="1" comment="libreoffice-base is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158187" version="1" comment="libreoffice-base-drivers-mysql is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158188" version="1" comment="libreoffice-base-drivers-postgresql is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158189" version="1" comment="libreoffice-calc is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158190" version="1" comment="libreoffice-calc-extensions is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158191" version="1" comment="libreoffice-draw is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158192" version="1" comment="libreoffice-filters-optional is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158193" version="1" comment="libreoffice-gnome is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158194" version="1" comment="libreoffice-icon-theme-galaxy is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158195" version="1" comment="libreoffice-icon-theme-tango is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158196" version="1" comment="libreoffice-impress is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158197" version="1" comment="libreoffice-l10n-af is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158198" version="1" comment="libreoffice-l10n-ar is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158199" version="1" comment="libreoffice-l10n-ca is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158200" version="1" comment="libreoffice-l10n-cs is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158201" version="1" comment="libreoffice-l10n-da is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158202" version="1" comment="libreoffice-l10n-de is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158203" version="1" comment="libreoffice-l10n-en is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158204" version="1" comment="libreoffice-l10n-es is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158205" version="1" comment="libreoffice-l10n-fi is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158206" version="1" comment="libreoffice-l10n-fr is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158207" version="1" comment="libreoffice-l10n-gu is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158208" version="1" comment="libreoffice-l10n-hi is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158209" version="1" comment="libreoffice-l10n-hu is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158210" version="1" comment="libreoffice-l10n-it is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158211" version="1" comment="libreoffice-l10n-ja is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158212" version="1" comment="libreoffice-l10n-ko is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158213" version="1" comment="libreoffice-l10n-nb is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158214" version="1" comment="libreoffice-l10n-nl is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158215" version="1" comment="libreoffice-l10n-nn is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158216" version="1" comment="libreoffice-l10n-pl is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158217" version="1" comment="libreoffice-l10n-pt_BR is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041715"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158218" version="1" comment="libreoffice-l10n-pt_PT is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041716"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158219" version="1" comment="libreoffice-l10n-ro is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158220" version="1" comment="libreoffice-l10n-ru is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158221" version="1" comment="libreoffice-l10n-sk is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158222" version="1" comment="libreoffice-l10n-sv is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158223" version="1" comment="libreoffice-l10n-xh is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158224" version="1" comment="libreoffice-l10n-zh_CN is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041717"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158225" version="1" comment="libreoffice-l10n-zh_TW is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041718"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158226" version="1" comment="libreoffice-l10n-zu is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158227" version="1" comment="libreoffice-mailmerge is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158228" version="1" comment="libreoffice-math is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158229" version="1" comment="libreoffice-officebean is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158230" version="1" comment="libreoffice-pyuno is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158231" version="1" comment="libreoffice-writer is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158232" version="1" comment="libreoffice-writer-extensions is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158233" version="1" comment="libreofficekit is &lt;5.3.3.2-40.5.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052036"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158234" version="1" comment="libstaroffice is &lt;0.0.3-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041719"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052040"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158235" version="1" comment="libstaroffice-0_0-0 is &lt;0.0.3-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041720"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052040"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158236" version="1" comment="libzmf is &lt;0.0.1-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041721"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045865"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158237" version="1" comment="libzmf-0_0-0 is &lt;0.0.1-2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041722"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045865"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158238" version="1" comment="myspell-af_NA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158239" version="1" comment="myspell-af_ZA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039196"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158240" version="1" comment="myspell-ar is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158241" version="1" comment="myspell-ar_AE is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039200"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158242" version="1" comment="myspell-ar_BH is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158243" version="1" comment="myspell-ar_DZ is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158244" version="1" comment="myspell-ar_EG is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039203"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158245" version="1" comment="myspell-ar_IQ is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039204"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158246" version="1" comment="myspell-ar_JO is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039205"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158247" version="1" comment="myspell-ar_KW is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039206"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158248" version="1" comment="myspell-ar_LB is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039207"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158249" version="1" comment="myspell-ar_LY is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039208"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158250" version="1" comment="myspell-ar_MA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039209"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158251" version="1" comment="myspell-ar_OM is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039210"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158252" version="1" comment="myspell-ar_QA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039211"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158253" version="1" comment="myspell-ar_SA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039212"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158254" version="1" comment="myspell-ar_SD is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158255" version="1" comment="myspell-ar_SY is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158256" version="1" comment="myspell-ar_TN is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158257" version="1" comment="myspell-ar_YE is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039216"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158258" version="1" comment="myspell-be_BY is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039217"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158259" version="1" comment="myspell-bg_BG is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039218"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158260" version="1" comment="myspell-bn_BD is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158261" version="1" comment="myspell-bn_IN is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039220"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158262" version="1" comment="myspell-bs is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158263" version="1" comment="myspell-bs_BA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158264" version="1" comment="myspell-ca is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158265" version="1" comment="myspell-ca_AD is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039225"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158266" version="1" comment="myspell-ca_ES is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039226"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158267" version="1" comment="myspell-ca_ES_valencia is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039227"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158268" version="1" comment="myspell-ca_FR is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158269" version="1" comment="myspell-ca_IT is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039229"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158270" version="1" comment="myspell-cs_CZ is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039230"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158271" version="1" comment="myspell-da_DK is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039231"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158272" version="1" comment="myspell-de is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158273" version="1" comment="myspell-de_AT is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039233"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158274" version="1" comment="myspell-de_CH is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158275" version="1" comment="myspell-de_DE is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039235"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158276" version="1" comment="myspell-dictionaries is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039236"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158277" version="1" comment="myspell-el_GR is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158278" version="1" comment="myspell-en is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158279" version="1" comment="myspell-en_AU is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039239"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158280" version="1" comment="myspell-en_BS is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039240"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158281" version="1" comment="myspell-en_BZ is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039241"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158282" version="1" comment="myspell-en_CA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039242"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158283" version="1" comment="myspell-en_GB is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039243"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158284" version="1" comment="myspell-en_GH is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039244"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158285" version="1" comment="myspell-en_IE is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158286" version="1" comment="myspell-en_IN is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039246"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158287" version="1" comment="myspell-en_JM is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039247"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158288" version="1" comment="myspell-en_MW is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158289" version="1" comment="myspell-en_NA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158290" version="1" comment="myspell-en_NZ is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039250"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158291" version="1" comment="myspell-en_PH is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039251"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158292" version="1" comment="myspell-en_TT is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039252"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158293" version="1" comment="myspell-en_US is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039253"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158294" version="1" comment="myspell-en_ZA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039254"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158295" version="1" comment="myspell-en_ZW is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039255"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158296" version="1" comment="myspell-es is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039256"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158297" version="1" comment="myspell-es_AR is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158298" version="1" comment="myspell-es_BO is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039258"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158299" version="1" comment="myspell-es_CL is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158300" version="1" comment="myspell-es_CO is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158301" version="1" comment="myspell-es_CR is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039261"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158302" version="1" comment="myspell-es_CU is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039262"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158303" version="1" comment="myspell-es_DO is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039263"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158304" version="1" comment="myspell-es_EC is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039264"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158305" version="1" comment="myspell-es_ES is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039265"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158306" version="1" comment="myspell-es_GT is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039266"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158307" version="1" comment="myspell-es_HN is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039267"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158308" version="1" comment="myspell-es_MX is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039268"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158309" version="1" comment="myspell-es_NI is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039269"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158310" version="1" comment="myspell-es_PA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039270"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158311" version="1" comment="myspell-es_PE is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039271"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158312" version="1" comment="myspell-es_PR is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039272"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158313" version="1" comment="myspell-es_PY is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158314" version="1" comment="myspell-es_SV is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039274"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158315" version="1" comment="myspell-es_UY is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158316" version="1" comment="myspell-es_VE is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039276"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158317" version="1" comment="myspell-et_EE is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039277"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158318" version="1" comment="myspell-fr_BE is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039278"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158319" version="1" comment="myspell-fr_CA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039279"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158320" version="1" comment="myspell-fr_CH is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039280"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158321" version="1" comment="myspell-fr_FR is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039281"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158322" version="1" comment="myspell-fr_LU is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039282"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158323" version="1" comment="myspell-fr_MC is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039283"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158324" version="1" comment="myspell-gu_IN is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039287"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158325" version="1" comment="myspell-he_IL is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158326" version="1" comment="myspell-hi_IN is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039289"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158327" version="1" comment="myspell-hr_HR is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039290"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158328" version="1" comment="myspell-hu_HU is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039291"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158329" version="1" comment="myspell-it_IT is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039294"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158330" version="1" comment="myspell-lightproof-en is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039298"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158331" version="1" comment="myspell-lightproof-hu_HU is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039299"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158332" version="1" comment="myspell-lightproof-pt_BR is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158333" version="1" comment="myspell-lightproof-ru_RU is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158334" version="1" comment="myspell-lo_LA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158335" version="1" comment="myspell-lt_LT is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158336" version="1" comment="myspell-lv_LV is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158337" version="1" comment="myspell-nb_NO is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039305"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158338" version="1" comment="myspell-nl_BE is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158339" version="1" comment="myspell-nl_NL is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158340" version="1" comment="myspell-nn_NO is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158341" version="1" comment="myspell-no is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158342" version="1" comment="myspell-pl_PL is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158343" version="1" comment="myspell-pt_AO is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158344" version="1" comment="myspell-pt_BR is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039314"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158345" version="1" comment="myspell-pt_PT is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039315"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158346" version="1" comment="myspell-ro is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158347" version="1" comment="myspell-ro_RO is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039317"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158348" version="1" comment="myspell-ru_RU is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039318"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158349" version="1" comment="myspell-sk_SK is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039320"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158350" version="1" comment="myspell-sl_SI is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039321"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158351" version="1" comment="myspell-sr is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039322"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158352" version="1" comment="myspell-sr_CS is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039323"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158353" version="1" comment="myspell-sr_Latn_CS is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039324"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158354" version="1" comment="myspell-sr_Latn_RS is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039325"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158355" version="1" comment="myspell-sr_RS is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039326"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158356" version="1" comment="myspell-sv_FI is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039327"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158357" version="1" comment="myspell-sv_SE is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039328"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158358" version="1" comment="myspell-te is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039330"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158359" version="1" comment="myspell-te_IN is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039331"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158360" version="1" comment="myspell-th_TH is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039332"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158361" version="1" comment="myspell-uk_UA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039333"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158362" version="1" comment="myspell-vi is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158363" version="1" comment="myspell-vi_VN is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039335"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158364" version="1" comment="myspell-zu_ZA is &lt;20170511-15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039336"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158424" version="1" comment="gnutls is &lt;3.2.15-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030524"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158425" version="1" comment="libgnutls28 is &lt;3.2.15-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158426" version="1" comment="libgnutls28-32bit is &lt;3.2.15-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052051"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158427" version="1" comment="libICE is &lt;1.0.8-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041703"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052052"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158428" version="1" comment="libICE6 is &lt;1.0.8-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041706"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052052"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158429" version="1" comment="libICE6-32bit is &lt;1.0.8-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041707"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052052"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158430" version="1" comment="libspice-server1 is &lt;0.12.7-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052053"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158431" version="1" comment="spice is &lt;0.12.7-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052053"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158776" version="1" comment="kernel-default is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158777" version="1" comment="kernel-default-devel is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158778" version="1" comment="kernel-default-extra is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158779" version="1" comment="kernel-devel is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158780" version="1" comment="kernel-macros is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158781" version="1" comment="kernel-source is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158782" version="1" comment="kernel-syms is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158797" version="1" comment="xorg-x11-server is &lt;7.6_1.18.3-74.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158798" version="1" comment="xorg-x11-server-extra is &lt;7.6_1.18.3-74.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158799" version="1" comment="libXdmcp is &lt;1.1.1-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041708"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052070"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158800" version="1" comment="libXdmcp6 is &lt;1.1.1-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041711"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052070"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158801" version="1" comment="libXdmcp6-32bit is &lt;1.1.1-10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041712"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052070"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158878" version="1" comment="evince is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158879" version="1" comment="evince-browser-plugin is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158880" version="1" comment="evince-lang is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158881" version="1" comment="evince-plugin-djvudocument is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158882" version="1" comment="evince-plugin-dvidocument is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158883" version="1" comment="evince-plugin-pdfdocument is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158884" version="1" comment="evince-plugin-psdocument is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041060"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158885" version="1" comment="evince-plugin-tiffdocument is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158886" version="1" comment="evince-plugin-xpsdocument is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041062"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158887" version="1" comment="libevdocument3-4 is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040970"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158888" version="1" comment="libevview3-3 is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040971"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158889" version="1" comment="nautilus-evince is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158890" version="1" comment="typelib-1_0-EvinceDocument-3_0 is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040972"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158891" version="1" comment="typelib-1_0-EvinceView-3_0 is &lt;3.20.1-6.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040973"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052085"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158902" version="1" comment="dracut is &lt;044.1-109.8.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052088"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158903" version="1" comment="libsystemd0 is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158904" version="1" comment="libsystemd0-32bit is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158905" version="1" comment="libudev1 is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158906" version="1" comment="libudev1-32bit is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158907" version="1" comment="systemd is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158908" version="1" comment="systemd-32bit is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158909" version="1" comment="systemd-bash-completion is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158910" version="1" comment="systemd-sysvinit is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158911" version="1" comment="udev is &lt;228-150.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052087"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159328" version="1" comment="jasper is &lt;1.900.14-195.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159329" version="1" comment="libjasper1 is &lt;1.900.14-195.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034778"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159330" version="1" comment="libjasper1-32bit is &lt;1.900.14-195.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034777"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159505" version="1" comment="libquicktime is &lt;1.2.4-14.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159506" version="1" comment="libquicktime0 is &lt;1.2.4-14.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159507" version="1" comment="libical is &lt;1.0.1-16.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041785"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159508" version="1" comment="libical1 is &lt;1.0.1-16.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041786"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159509" version="1" comment="libical1-32bit is &lt;1.0.1-16.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041787"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159510" version="1" comment="libpoppler44 is &lt;0.24.4-14.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052212"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159511" version="1" comment="poppler is &lt;0.24.4-14.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052212"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159512" version="1" comment="libpoppler-glib8 is &lt;0.43.0-16.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159513" version="1" comment="libpoppler-qt4-4 is &lt;0.43.0-16.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037283"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159514" version="1" comment="libpoppler60 is &lt;0.43.0-16.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041078"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159515" version="1" comment="poppler-qt is &lt;0.43.0-16.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009159516" version="1" comment="poppler-tools is &lt;0.43.0-16.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031311"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147400" version="1" comment="gstreamer-0_10-plugins-base is &lt;0.10.36-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147401" version="1" comment="gstreamer-0_10-plugins-base-32bit is &lt;0.10.36-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030998"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147402" version="1" comment="gstreamer-0_10-plugins-base-lang is &lt;0.10.36-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031000"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147403" version="1" comment="libgstapp-0_10-0 is &lt;0.10.36-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147404" version="1" comment="libgstapp-0_10-0-32bit is &lt;0.10.36-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041186"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147405" version="1" comment="libgstinterfaces-0_10-0 is &lt;0.10.36-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031005"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147406" version="1" comment="libgstinterfaces-0_10-0-32bit is &lt;0.10.36-14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161357" version="1" comment="libmysqlclient18 is &lt;10.0.31-29.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052661"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161358" version="1" comment="libmysqlclient18-32bit is &lt;10.0.31-29.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052661"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161359" version="1" comment="libmysqlclient_r18 is &lt;10.0.31-29.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052661"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161360" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.31-29.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052661"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161361" version="1" comment="mariadb is &lt;10.0.31-29.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052661"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161362" version="1" comment="mariadb-client is &lt;10.0.31-29.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052661"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161363" version="1" comment="mariadb-errormessages is &lt;10.0.31-29.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052661"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161364" version="1" comment="libwireshark8 is &lt;2.2.8-48.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052662"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161365" version="1" comment="libwiretap6 is &lt;2.2.8-48.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052662"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161366" version="1" comment="libwscodecs1 is &lt;2.2.8-48.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052662"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161367" version="1" comment="libwsutil7 is &lt;2.2.8-48.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041623"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052662"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161368" version="1" comment="wireshark is &lt;2.2.8-48.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052662"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161369" version="1" comment="wireshark-gtk is &lt;2.2.8-48.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052662"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161400" version="1" comment="kernel-default is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161401" version="1" comment="kernel-default-devel is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161402" version="1" comment="kernel-default-extra is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161403" version="1" comment="kernel-devel is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161404" version="1" comment="kernel-macros is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161405" version="1" comment="kernel-source is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161406" version="1" comment="kernel-syms is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161407" version="1" comment="libzypp is &lt;16.15.2-27.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031757"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052667"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161408" version="1" comment="zypper is &lt;1.13.30-18.13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031758"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161409" version="1" comment="zypper-log is &lt;1.13.30-18.13.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034953"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161496" version="1" comment="libncurses5 is &lt;5.9-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041695"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161497" version="1" comment="libncurses5-32bit is &lt;5.9-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041696"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161498" version="1" comment="libncurses6 is &lt;5.9-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041698"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161499" version="1" comment="libncurses6-32bit is &lt;5.9-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161500" version="1" comment="ncurses is &lt;5.9-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032515"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161501" version="1" comment="ncurses-devel is &lt;5.9-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032514"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161502" version="1" comment="ncurses-utils is &lt;5.9-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161503" version="1" comment="tack is &lt;5.9-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041694"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161504" version="1" comment="terminfo is &lt;5.9-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161505" version="1" comment="terminfo-base is &lt;5.9-50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041702"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052678"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146519" version="1" comment="gstreamer-0_10-plugins-bad is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146520" version="1" comment="gstreamer-0_10-plugins-bad-lang is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146521" version="1" comment="libgstbasecamerabinsrc-0_10-23 is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038732"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146522" version="1" comment="libgstbasecamerabinsrc-0_10-23-32bit is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038733"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146523" version="1" comment="libgstbasevideo-0_10-23 is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038734"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146524" version="1" comment="libgstbasevideo-0_10-23-32bit is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038735"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146525" version="1" comment="libgstcodecparsers-0_10-23 is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038736"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146526" version="1" comment="libgstphotography-0_10-23 is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038738"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146527" version="1" comment="libgstphotography-0_10-23-32bit is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038739"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146528" version="1" comment="libgstsignalprocessor-0_10-23 is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038740"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146529" version="1" comment="libgstsignalprocessor-0_10-23-32bit is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038741"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146530" version="1" comment="libgstvdp-0_10-23 is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038742"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146531" version="1" comment="libgstvdp-0_10-23-32bit is &lt;0.10.23-22.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038743"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050934"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161616" version="1" comment="puppet is &lt;3.8.5-15.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033794"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052687"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161617" version="1" comment="gdk-pixbuf-loader-rsvg is &lt;2.40.18-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034698"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052688"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161618" version="1" comment="librsvg is &lt;2.40.18-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034662"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052688"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161619" version="1" comment="librsvg-2-2 is &lt;2.40.18-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034702"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052688"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161620" version="1" comment="librsvg-2-2-32bit is &lt;2.40.18-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052688"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161621" version="1" comment="rsvg-view is &lt;2.40.18-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034663"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052688"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161757" version="1" comment="libsoup is &lt;2.54.1-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030516"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161758" version="1" comment="libsoup-2_4-1 is &lt;2.54.1-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034629"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161759" version="1" comment="libsoup-2_4-1-32bit is &lt;2.54.1-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034627"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161760" version="1" comment="libsoup-lang is &lt;2.54.1-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041047"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161761" version="1" comment="typelib-1_0-Soup-2_4 is &lt;2.54.1-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041013"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161762" version="1" comment="kernel-default is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161763" version="1" comment="kernel-default-devel is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161764" version="1" comment="kernel-default-extra is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161765" version="1" comment="kernel-devel is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161766" version="1" comment="kernel-macros is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161767" version="1" comment="kernel-source is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161768" version="1" comment="kernel-syms is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161786" version="1" comment="strongswan is &lt;5.1.3-26.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031037"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052710"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161787" version="1" comment="strongswan-doc is &lt;5.1.3-26.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031036"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052710"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161788" version="1" comment="strongswan-ipsec is &lt;5.1.3-26.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033871"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052710"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161789" version="1" comment="strongswan-libs0 is &lt;5.1.3-26.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033872"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052710"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161790" version="1" comment="libopenjp2-7 is &lt;2.1.0-4.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052711"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161791" version="1" comment="openjpeg2 is &lt;2.1.0-4.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052711"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161792" version="1" comment="libxml2 is &lt;2.9.4-46.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052712"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161793" version="1" comment="libxml2-2 is &lt;2.9.4-46.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052712"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161794" version="1" comment="libxml2-2-32bit is &lt;2.9.4-46.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052712"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161795" version="1" comment="libxml2-tools is &lt;2.9.4-46.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052712"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161796" version="1" comment="python-libxml2 is &lt;2.9.4-46.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052712"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161962" version="1" comment="curl is &lt;7.37.0-37.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052732"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161963" version="1" comment="libcurl4 is &lt;7.37.0-37.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052732"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161964" version="1" comment="libcurl4-32bit is &lt;7.37.0-37.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052732"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161965" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.144-27.5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052733"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161966" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.144-27.5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052733"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162111" version="1" comment="libplist is &lt;1.12-20.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041438"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052758"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162112" version="1" comment="libplist++3 is &lt;1.12-20.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052758"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162113" version="1" comment="libplist3 is &lt;1.12-20.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052758"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162114" version="1" comment="ImageMagick is &lt;6.8.8.1-71.5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052759"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162115" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-71.5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052759"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162116" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-71.5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052759"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162117" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-71.5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052759"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162118" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-71.5.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052759"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162178" version="1" comment="gnome-shell is &lt;3.20.4-77.7.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040981"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162179" version="1" comment="gnome-shell-browser-plugin is &lt;3.20.4-77.7.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040982"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162180" version="1" comment="gnome-shell-calendar is &lt;3.20.4-77.7.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162181" version="1" comment="gnome-shell-lang is &lt;3.20.4-77.7.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041040"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162218" version="1" comment="freerdp is &lt;2.0.0~git.1463131968.4e66df7-12.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037992"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162219" version="1" comment="libfreerdp2 is &lt;2.0.0~git.1463131968.4e66df7-12.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041064"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052775"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147473" version="1" comment="openssh is &lt;7.2p2-66.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051029"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147474" version="1" comment="openssh-askpass-gnome is &lt;7.2p2-66.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032625"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147475" version="1" comment="openssh-helpers is &lt;7.2p2-66.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051029"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162478" version="1" comment="libraw is &lt;0.15.4-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036604"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162479" version="1" comment="libraw9 is &lt;0.15.4-9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038719"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052808"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162480" version="1" comment="expat is &lt;2.1.0-21.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052809"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162481" version="1" comment="libexpat1 is &lt;2.1.0-21.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052809"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162482" version="1" comment="libexpat1-32bit is &lt;2.1.0-21.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052809"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162653" version="1" comment="icu is &lt;52.1-8.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030777"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162654" version="1" comment="libicu52_1 is &lt;52.1-8.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162655" version="1" comment="libicu52_1-32bit is &lt;52.1-8.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038487"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162656" version="1" comment="libicu52_1-data is &lt;52.1-8.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052820"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162933" version="1" comment="xen is &lt;4.7.3_03-43.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052832"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162934" version="1" comment="xen-libs is &lt;4.7.3_03-43.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052832"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162935" version="1" comment="xen-libs-32bit is &lt;4.7.3_03-43.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052832"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163124" version="1" comment="postgresql94 is &lt;9.4.13-21.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039800"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052851"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163125" version="1" comment="libecpg6 is &lt;9.6.4-3.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052852"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163126" version="1" comment="libpq5 is &lt;9.6.4-3.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052852"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163127" version="1" comment="libpq5-32bit is &lt;9.6.4-3.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052852"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163128" version="1" comment="postgresql96 is &lt;9.6.4-3.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041746"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052852"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163129" version="1" comment="postgresql96-libs is &lt;9.6.4-3.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041890"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052852"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163292" version="1" comment="gdk-pixbuf is &lt;2.34.0-19.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030591"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163293" version="1" comment="gdk-pixbuf-lang is &lt;2.34.0-19.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037124"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163294" version="1" comment="gdk-pixbuf-query-loaders is &lt;2.34.0-19.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163295" version="1" comment="gdk-pixbuf-query-loaders-32bit is &lt;2.34.0-19.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163296" version="1" comment="libgdk_pixbuf-2_0-0 is &lt;2.34.0-19.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037131"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163297" version="1" comment="libgdk_pixbuf-2_0-0-32bit is &lt;2.34.0-19.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037132"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163298" version="1" comment="typelib-1_0-GdkPixbuf-2_0 is &lt;2.34.0-19.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038954"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052867"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163348" version="1" comment="evince is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163349" version="1" comment="evince-browser-plugin is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163350" version="1" comment="evince-lang is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163351" version="1" comment="evince-plugin-djvudocument is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163352" version="1" comment="evince-plugin-dvidocument is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163353" version="1" comment="evince-plugin-pdfdocument is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163354" version="1" comment="evince-plugin-psdocument is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041060"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163355" version="1" comment="evince-plugin-tiffdocument is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163356" version="1" comment="evince-plugin-xpsdocument is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041062"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163357" version="1" comment="libevdocument3-4 is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040970"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163358" version="1" comment="libevview3-3 is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040971"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163359" version="1" comment="nautilus-evince is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163360" version="1" comment="typelib-1_0-EvinceDocument-3_0 is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040972"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163361" version="1" comment="typelib-1_0-EvinceView-3_0 is &lt;3.20.1-6.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040973"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052873"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147623" version="1" comment="libsystemd0 is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147624" version="1" comment="libsystemd0-32bit is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147625" version="1" comment="libudev1 is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147626" version="1" comment="libudev1-32bit is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147627" version="1" comment="systemd is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147628" version="1" comment="systemd-32bit is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147629" version="1" comment="systemd-bash-completion is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147630" version="1" comment="systemd-sysvinit is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147631" version="1" comment="udev is &lt;228-132.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051113"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163575" version="1" comment="cvs is &lt;1.12.12-182.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031943"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147810" version="1" comment="dbus-1 is &lt;1.8.22-24.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051163"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147811" version="1" comment="dbus-1-x11 is &lt;1.8.22-24.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051163"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147812" version="1" comment="libdbus-1-3 is &lt;1.8.22-24.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051163"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147813" version="1" comment="libdbus-1-3-32bit is &lt;1.8.22-24.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051163"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164283" version="1" comment="xen is &lt;4.7.3_04-43.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052946"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164284" version="1" comment="xen-libs is &lt;4.7.3_04-43.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052946"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164285" version="1" comment="xen-libs-32bit is &lt;4.7.3_04-43.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052946"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164286" version="1" comment="kernel-default is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164287" version="1" comment="kernel-default-devel is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164288" version="1" comment="kernel-default-extra is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164289" version="1" comment="kernel-devel is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164290" version="1" comment="kernel-macros is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164291" version="1" comment="kernel-source is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164292" version="1" comment="kernel-syms is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164440" version="1" comment="cpp48 is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039002"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164441" version="1" comment="gcc48 is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039003"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164442" version="1" comment="gcc48-32bit is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164443" version="1" comment="gcc48-c++ is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039005"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164444" version="1" comment="gcc48-gij is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039027"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164445" version="1" comment="gcc48-gij-32bit is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039026"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164446" version="1" comment="gcc48-info is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039007"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164447" version="1" comment="libasan0 is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039012"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164448" version="1" comment="libasan0-32bit is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164449" version="1" comment="libgcj48 is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039030"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164450" version="1" comment="libgcj48-32bit is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039029"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164451" version="1" comment="libgcj48-jar is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039033"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164452" version="1" comment="libgcj_bc1 is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039034"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164453" version="1" comment="libstdc++48-devel is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164454" version="1" comment="libstdc++48-devel-32bit is &lt;4.8.5-31.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164489" version="1" comment="emacs is &lt;24.3-25.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030850"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164490" version="1" comment="emacs-info is &lt;24.3-25.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030848"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164491" version="1" comment="emacs-x11 is &lt;24.3-25.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164492" version="1" comment="etags is &lt;24.3-25.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038236"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052955"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164530" version="1" comment="libzip is &lt;0.11.1-13.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036927"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052960"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164531" version="1" comment="libzip2 is &lt;0.11.1-13.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052960"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164729" version="1" comment="libwireshark8 is &lt;2.2.9-48.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164730" version="1" comment="libwiretap6 is &lt;2.2.9-48.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164731" version="1" comment="libwscodecs1 is &lt;2.2.9-48.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164732" version="1" comment="libwsutil7 is &lt;2.2.9-48.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041623"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164733" version="1" comment="wireshark is &lt;2.2.9-48.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164734" version="1" comment="wireshark-gtk is &lt;2.2.9-48.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052975"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164753" version="1" comment="libtiff5 is &lt;4.0.8-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164754" version="1" comment="libtiff5-32bit is &lt;4.0.8-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164755" version="1" comment="tiff is &lt;4.0.8-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052981"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164756" version="1" comment="liblouis is &lt;2.6.4-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041967"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164757" version="1" comment="liblouis-data is &lt;2.6.4-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164758" version="1" comment="liblouis9 is &lt;2.6.4-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164759" version="1" comment="python3-louis is &lt;2.6.4-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041970"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052982"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164765" version="1" comment="MozillaFirefox is &lt;52.3.0esr-109.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052985"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164766" version="1" comment="MozillaFirefox-translations is &lt;52.3.0esr-109.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052985"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164846" version="1" comment="dnsmasq is &lt;2.78-18.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031669"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052994"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164980" version="1" comment="libopenjp2-7 is &lt;2.1.0-4.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164981" version="1" comment="openjpeg2 is &lt;2.1.0-4.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164982" version="1" comment="libdcerpc-binding0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164983" version="1" comment="libdcerpc-binding0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164984" version="1" comment="libdcerpc0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164985" version="1" comment="libdcerpc0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164986" version="1" comment="libndr-krb5pac0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164987" version="1" comment="libndr-krb5pac0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164988" version="1" comment="libndr-nbt0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164989" version="1" comment="libndr-nbt0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164990" version="1" comment="libndr-standard0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164991" version="1" comment="libndr-standard0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164992" version="1" comment="libndr0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164993" version="1" comment="libndr0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164994" version="1" comment="libnetapi0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164995" version="1" comment="libnetapi0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164996" version="1" comment="libsamba-credentials0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164997" version="1" comment="libsamba-credentials0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164998" version="1" comment="libsamba-errors0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164999" version="1" comment="libsamba-errors0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165000" version="1" comment="libsamba-hostconfig0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165001" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165002" version="1" comment="libsamba-passdb0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165003" version="1" comment="libsamba-passdb0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165004" version="1" comment="libsamba-util0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165005" version="1" comment="libsamba-util0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165006" version="1" comment="libsamdb0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165007" version="1" comment="libsamdb0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165008" version="1" comment="libsmbclient0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165009" version="1" comment="libsmbclient0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165010" version="1" comment="libsmbconf0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165011" version="1" comment="libsmbconf0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165012" version="1" comment="libsmbldap0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165013" version="1" comment="libsmbldap0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165014" version="1" comment="libtevent-util0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165015" version="1" comment="libtevent-util0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165016" version="1" comment="libwbclient0 is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165017" version="1" comment="libwbclient0-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165018" version="1" comment="samba is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165019" version="1" comment="samba-client is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165020" version="1" comment="samba-client-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165021" version="1" comment="samba-doc is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165022" version="1" comment="samba-libs is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165023" version="1" comment="samba-libs-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165024" version="1" comment="samba-winbind is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165025" version="1" comment="samba-winbind-32bit is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165067" version="1" comment="krb5 is &lt;1.12.5-40.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053025"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165068" version="1" comment="krb5-32bit is &lt;1.12.5-40.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053025"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165069" version="1" comment="krb5-client is &lt;1.12.5-40.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053025"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165097" version="1" comment="MozillaFirefox is &lt;52.4.0esr-109.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053029"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165098" version="1" comment="MozillaFirefox-translations is &lt;52.4.0esr-109.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053029"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165099" version="1" comment="libfreebl3 is &lt;3.29.5-58.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165100" version="1" comment="libfreebl3-32bit is &lt;3.29.5-58.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165101" version="1" comment="libsoftokn3 is &lt;3.29.5-58.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165102" version="1" comment="libsoftokn3-32bit is &lt;3.29.5-58.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165103" version="1" comment="mozilla-nss is &lt;3.29.5-58.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165104" version="1" comment="mozilla-nss-32bit is &lt;3.29.5-58.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032437"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165105" version="1" comment="mozilla-nss-certs is &lt;3.29.5-58.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033978"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165106" version="1" comment="mozilla-nss-certs-32bit is &lt;3.29.5-58.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033977"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165107" version="1" comment="mozilla-nss-sysinit is &lt;3.29.5-58.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033980"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165108" version="1" comment="mozilla-nss-sysinit-32bit is &lt;3.29.5-58.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165109" version="1" comment="mozilla-nss-tools is &lt;3.29.5-58.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053030"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165110" version="1" comment="libvirt is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165111" version="1" comment="libvirt-client is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165112" version="1" comment="libvirt-client-32bit is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165113" version="1" comment="libvirt-daemon is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165114" version="1" comment="libvirt-daemon-config-network is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165115" version="1" comment="libvirt-daemon-config-nwfilter is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165116" version="1" comment="libvirt-daemon-driver-interface is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165117" version="1" comment="libvirt-daemon-driver-libxl is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165118" version="1" comment="libvirt-daemon-driver-lxc is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165119" version="1" comment="libvirt-daemon-driver-network is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165120" version="1" comment="libvirt-daemon-driver-nodedev is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165121" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165122" version="1" comment="libvirt-daemon-driver-qemu is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165123" version="1" comment="libvirt-daemon-driver-secret is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165124" version="1" comment="libvirt-daemon-driver-storage is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165125" version="1" comment="libvirt-daemon-lxc is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165126" version="1" comment="libvirt-daemon-qemu is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165127" version="1" comment="libvirt-daemon-xen is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165128" version="1" comment="libvirt-doc is &lt;2.0.0-27.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053031"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165685" version="1" comment="xerces-j2 is &lt;2.8.1-268.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033305"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165686" version="1" comment="wpa_supplicant is &lt;2.2-15.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034744"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165987" version="1" comment="curl is &lt;7.37.0-37.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165988" version="1" comment="libcurl4 is &lt;7.37.0-37.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165989" version="1" comment="libcurl4-32bit is &lt;7.37.0-37.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165998" version="1" comment="openvpn is &lt;2.3.8-16.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053114"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166091" version="1" comment="tcpdump is &lt;4.9.2-14.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166092" version="1" comment="libwireshark8 is &lt;2.2.10-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166093" version="1" comment="libwiretap6 is &lt;2.2.10-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166094" version="1" comment="libwscodecs1 is &lt;2.2.10-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166095" version="1" comment="libwsutil7 is &lt;2.2.10-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041623"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166096" version="1" comment="wireshark is &lt;2.2.10-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166097" version="1" comment="wireshark-gtk is &lt;2.2.10-48.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053126"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166110" version="1" comment="xen is &lt;4.7.3_06-43.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053131"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166111" version="1" comment="xen-libs is &lt;4.7.3_06-43.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053131"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166112" version="1" comment="xen-libs-32bit is &lt;4.7.3_06-43.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053131"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166113" version="1" comment="kernel-default is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166114" version="1" comment="kernel-default-devel is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166115" version="1" comment="kernel-default-extra is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166116" version="1" comment="kernel-devel is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166117" version="1" comment="kernel-macros is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166118" version="1" comment="kernel-source is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166119" version="1" comment="kernel-syms is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166128" version="1" comment="wget is &lt;1.14-21.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030457"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053133"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166493" version="1" comment="SuSEfirewall2 is &lt;3.6.312-2.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053183"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166494" version="1" comment="libjavascriptcoregtk-4_0-18 is &lt;2.18.0-2.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166495" version="1" comment="libwebkit2gtk-4_0-37 is &lt;2.18.0-2.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166496" version="1" comment="libwebkit2gtk3-lang is &lt;2.18.0-2.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166497" version="1" comment="typelib-1_0-JavaScriptCore-4_0 is &lt;2.18.0-2.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166498" version="1" comment="typelib-1_0-WebKit2-4_0 is &lt;2.18.0-2.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040314"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166499" version="1" comment="webkit2gtk-4_0-injected-bundles is &lt;2.18.0-2.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040317"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166500" version="1" comment="webkit2gtk3 is &lt;2.18.0-2.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040318"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166501" version="1" comment="libwpd is &lt;0.10.2-2.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032723"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053185"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166502" version="1" comment="libwpd-0_10-10 is &lt;0.10.2-2.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042019"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053185"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166503" version="1" comment="qemu is &lt;2.6.2-41.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166504" version="1" comment="qemu-block-curl is &lt;2.6.2-41.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166505" version="1" comment="qemu-ipxe is &lt;1.0.0-41.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053187"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166506" version="1" comment="qemu-kvm is &lt;2.6.2-41.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166507" version="1" comment="qemu-seabios is &lt;1.9.1-41.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053188"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166508" version="1" comment="qemu-sgabios is &lt;8-41.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166509" version="1" comment="qemu-tools is &lt;2.6.2-41.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166510" version="1" comment="qemu-vgabios is &lt;1.9.1-41.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053188"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166511" version="1" comment="qemu-x86 is &lt;2.6.2-41.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053186"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166512" version="1" comment="libipa_hbac0 is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166513" version="1" comment="libsss_idmap0 is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166514" version="1" comment="libsss_sudo is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166515" version="1" comment="python-sssd-config is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166516" version="1" comment="sssd is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034052"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166517" version="1" comment="sssd-32bit is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166518" version="1" comment="sssd-ad is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166519" version="1" comment="sssd-ipa is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166520" version="1" comment="sssd-krb5 is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038196"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166521" version="1" comment="sssd-krb5-common is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038197"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166522" version="1" comment="sssd-ldap is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038198"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166523" version="1" comment="sssd-proxy is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166524" version="1" comment="sssd-tools is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034051"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166650" version="1" comment="krb5 is &lt;1.12.5-40.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166651" version="1" comment="krb5-32bit is &lt;1.12.5-40.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166652" version="1" comment="krb5-client is &lt;1.12.5-40.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053209"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166653" version="1" comment="ImageMagick is &lt;6.8.8.1-71.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166654" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-71.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166655" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-71.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166656" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-71.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166657" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-71.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053210"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166658" version="1" comment="shadow is &lt;4.2.1-27.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053211"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166659" version="1" comment="libpoppler44 is &lt;0.24.4-14.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053212"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166660" version="1" comment="poppler is &lt;0.24.4-14.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053212"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166730" version="1" comment="libdcerpc-atsvc0 is &lt;4.2.4-28.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053229"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166731" version="1" comment="samba is &lt;4.2.4-28.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053229"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166732" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.151-27.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166733" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.151-27.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053230"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149875" version="1" comment="ceph is &lt;10.2.4+git.1481215985.12b091b-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149876" version="1" comment="ceph-common is &lt;10.2.4+git.1481215985.12b091b-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041217"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149877" version="1" comment="libcephfs1 is &lt;10.2.4+git.1481215985.12b091b-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041226"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149878" version="1" comment="librados2 is &lt;10.2.4+git.1481215985.12b091b-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149879" version="1" comment="libradosstriper1 is &lt;10.2.4+git.1481215985.12b091b-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041230"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149880" version="1" comment="librbd1 is &lt;10.2.4+git.1481215985.12b091b-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149881" version="1" comment="python-cephfs is &lt;10.2.4+git.1481215985.12b091b-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041236"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149882" version="1" comment="python-rados is &lt;10.2.4+git.1481215985.12b091b-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149883" version="1" comment="python-rbd is &lt;10.2.4+git.1481215985.12b091b-16.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051449"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166988" version="1" comment="file is &lt;5.22-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030456"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053262"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166989" version="1" comment="file-magic is &lt;5.22-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037852"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053262"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166990" version="1" comment="libmagic1 is &lt;5.22-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037850"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053262"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166991" version="1" comment="libmagic1-32bit is &lt;5.22-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053262"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166992" version="1" comment="xorg-x11-server is &lt;7.6_1.18.3-76.15.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053263"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166993" version="1" comment="xorg-x11-server-extra is &lt;7.6_1.18.3-76.15.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053263"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167012" version="1" comment="gimp is &lt;2.8.18-9.3.26" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030642"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167013" version="1" comment="gimp-lang is &lt;2.8.18-9.3.26" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167014" version="1" comment="gimp-plugins-python is &lt;2.8.18-9.3.26" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167015" version="1" comment="libgimp-2_0-0 is &lt;2.8.18-9.3.26" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167016" version="1" comment="libgimpui-2_0-0 is &lt;2.8.18-9.3.26" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034558"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053269"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167077" version="1" comment="libdcerpc-atsvc0 is &lt;4.2.4-28.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053282"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167078" version="1" comment="samba is &lt;4.2.4-28.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053282"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167079" version="1" comment="perl is &lt;5.18.2-12.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053283"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167080" version="1" comment="perl-32bit is &lt;5.18.2-12.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030599"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053283"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167081" version="1" comment="perl-base is &lt;5.18.2-12.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031056"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053283"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167082" version="1" comment="perl-doc is &lt;5.18.2-12.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053283"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167184" version="1" comment="kernel-firmware is &lt;20170530-21.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053299"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167185" version="1" comment="ucode-amd is &lt;20170530-21.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042042"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053299"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167186" version="1" comment="libdcerpc-binding0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167187" version="1" comment="libdcerpc-binding0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167188" version="1" comment="libdcerpc0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167189" version="1" comment="libdcerpc0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167190" version="1" comment="libndr-krb5pac0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167191" version="1" comment="libndr-krb5pac0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167192" version="1" comment="libndr-nbt0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167193" version="1" comment="libndr-nbt0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167194" version="1" comment="libndr-standard0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167195" version="1" comment="libndr-standard0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167196" version="1" comment="libndr0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167197" version="1" comment="libndr0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167198" version="1" comment="libnetapi0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167199" version="1" comment="libnetapi0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167200" version="1" comment="libsamba-credentials0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167201" version="1" comment="libsamba-credentials0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167202" version="1" comment="libsamba-errors0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167203" version="1" comment="libsamba-errors0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167204" version="1" comment="libsamba-hostconfig0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167205" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167206" version="1" comment="libsamba-passdb0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167207" version="1" comment="libsamba-passdb0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167208" version="1" comment="libsamba-util0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167209" version="1" comment="libsamba-util0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167210" version="1" comment="libsamdb0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167211" version="1" comment="libsamdb0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167212" version="1" comment="libsmbclient0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167213" version="1" comment="libsmbclient0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167214" version="1" comment="libsmbconf0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167215" version="1" comment="libsmbconf0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167216" version="1" comment="libsmbldap0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167217" version="1" comment="libsmbldap0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167218" version="1" comment="libtevent-util0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167219" version="1" comment="libtevent-util0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167220" version="1" comment="libwbclient0 is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167221" version="1" comment="libwbclient0-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167222" version="1" comment="samba is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167223" version="1" comment="samba-client is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167224" version="1" comment="samba-client-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167225" version="1" comment="samba-doc is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167226" version="1" comment="samba-libs is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167227" version="1" comment="samba-libs-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167228" version="1" comment="samba-winbind is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167229" version="1" comment="samba-winbind-32bit is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148047" version="1" comment="libxml2 is &lt;2.9.4-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148048" version="1" comment="libxml2-2 is &lt;2.9.4-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148049" version="1" comment="libxml2-2-32bit is &lt;2.9.4-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148050" version="1" comment="libxml2-tools is &lt;2.9.4-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148051" version="1" comment="python-libxml2 is &lt;2.9.4-33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167294" version="1" comment="libopenssl-devel is &lt;1.0.2j-60.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053305"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167295" version="1" comment="libopenssl1_0_0 is &lt;1.0.2j-60.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053305"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167296" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.2j-60.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053305"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167297" version="1" comment="openssl is &lt;1.0.2j-60.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053305"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167367" version="1" comment="binutils is &lt;2.29.1-9.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030609"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053310"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167425" version="1" comment="xen is &lt;4.7.4_02-43.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053313"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167426" version="1" comment="xen-libs is &lt;4.7.4_02-43.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053313"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167427" version="1" comment="xen-libs-32bit is &lt;4.7.4_02-43.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053313"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167749" version="1" comment="MozillaFirefox is &lt;52.5.0esr-109.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053339"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167750" version="1" comment="MozillaFirefox-translations is &lt;52.5.0esr-109.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053339"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146182" version="1" comment="zlib is &lt;1.2.8-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030541"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148139" version="1" comment="libspice-server1 is &lt;0.12.7-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051214"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148140" version="1" comment="spice is &lt;0.12.7-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051214"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167751" version="1" comment="libXcursor is &lt;1.1.14-4.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053340"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167752" version="1" comment="libXcursor1 is &lt;1.1.14-4.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053340"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167753" version="1" comment="libXcursor1-32bit is &lt;1.1.14-4.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053340"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167754" version="1" comment="kernel-default is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167755" version="1" comment="kernel-default-devel is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167756" version="1" comment="kernel-default-extra is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167757" version="1" comment="kernel-devel is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167758" version="1" comment="kernel-macros is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167759" version="1" comment="kernel-source is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167760" version="1" comment="kernel-syms is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167904" version="1" comment="openssh is &lt;7.2p2-74.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053359"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167905" version="1" comment="openssh-askpass-gnome is &lt;7.2p2-74.11.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032625"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053360"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167906" version="1" comment="openssh-helpers is &lt;7.2p2-74.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038965"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053359"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168281" version="1" comment="libopenssl-devel is &lt;1.0.2j-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053405"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168282" version="1" comment="libopenssl1_0_0 is &lt;1.0.2j-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053405"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168283" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.2j-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053405"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168284" version="1" comment="openssl is &lt;1.0.2j-60.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053405"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168716" version="1" comment="ImageMagick is &lt;6.8.8.1-71.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168717" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-71.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168718" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-71.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168719" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-71.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168720" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-71.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053432"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168748" version="1" comment="libraw is &lt;0.15.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036604"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053437"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168749" version="1" comment="libraw9 is &lt;0.15.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038719"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053437"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168750" version="1" comment="libecpg6 is &lt;9.6.6-3.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053438"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168751" version="1" comment="libpq5 is &lt;9.6.6-3.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053438"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168752" version="1" comment="libpq5-32bit is &lt;9.6.6-3.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053438"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168753" version="1" comment="postgresql96 is &lt;9.6.6-3.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041746"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053438"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168754" version="1" comment="postgresql96-libs is &lt;9.6.6-3.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041890"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053438"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168779" version="1" comment="kernel-default is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168780" version="1" comment="kernel-default-devel is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168781" version="1" comment="kernel-default-extra is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168782" version="1" comment="kernel-devel is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168783" version="1" comment="kernel-macros is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168784" version="1" comment="kernel-source is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168785" version="1" comment="kernel-syms is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168786" version="1" comment="evince is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168787" version="1" comment="evince-browser-plugin is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168788" version="1" comment="evince-lang is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168789" version="1" comment="evince-plugin-djvudocument is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168790" version="1" comment="evince-plugin-dvidocument is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168791" version="1" comment="evince-plugin-pdfdocument is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168792" version="1" comment="evince-plugin-psdocument is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041060"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168793" version="1" comment="evince-plugin-tiffdocument is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168794" version="1" comment="evince-plugin-xpsdocument is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041062"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168795" version="1" comment="libevdocument3-4 is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040970"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168796" version="1" comment="libevview3-3 is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040971"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168797" version="1" comment="nautilus-evince is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168798" version="1" comment="typelib-1_0-EvinceDocument-3_0 is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040972"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168799" version="1" comment="typelib-1_0-EvinceView-3_0 is &lt;3.20.2-6.19.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040973"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053441"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168910" version="1" comment="libwireshark8 is &lt;2.2.11-48.15.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053452"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168911" version="1" comment="libwiretap6 is &lt;2.2.11-48.15.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053452"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168912" version="1" comment="libwscodecs1 is &lt;2.2.11-48.15.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053452"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168913" version="1" comment="libwsutil7 is &lt;2.2.11-48.15.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041623"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053452"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168914" version="1" comment="wireshark is &lt;2.2.11-48.15.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053452"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168915" version="1" comment="wireshark-gtk is &lt;2.2.11-48.15.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053452"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168916" version="1" comment="gdk-pixbuf is &lt;2.34.0-19.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030591"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168917" version="1" comment="gdk-pixbuf-lang is &lt;2.34.0-19.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037124"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168918" version="1" comment="gdk-pixbuf-query-loaders is &lt;2.34.0-19.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168919" version="1" comment="gdk-pixbuf-query-loaders-32bit is &lt;2.34.0-19.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168920" version="1" comment="libgdk_pixbuf-2_0-0 is &lt;2.34.0-19.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037131"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168921" version="1" comment="libgdk_pixbuf-2_0-0-32bit is &lt;2.34.0-19.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037132"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168922" version="1" comment="typelib-1_0-GdkPixbuf-2_0 is &lt;2.34.0-19.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038954"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053453"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148841" version="1" comment="libblkid1 is &lt;2.28-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031455"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051318"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148842" version="1" comment="libblkid1-32bit is &lt;2.28-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051318"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148843" version="1" comment="libfdisk1 is &lt;2.28-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040900"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051318"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148844" version="1" comment="libmount1 is &lt;2.28-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038354"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051318"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148845" version="1" comment="libmount1-32bit is &lt;2.28-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038355"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051318"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148846" version="1" comment="libsmartcols1 is &lt;2.28-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038362"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051318"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148847" version="1" comment="libuuid-devel is &lt;2.28-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051318"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148848" version="1" comment="libuuid1 is &lt;2.28-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051318"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148849" version="1" comment="libuuid1-32bit is &lt;2.28-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051318"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148850" version="1" comment="python-libmount is &lt;2.28-44.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051319"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148851" version="1" comment="util-linux is &lt;2.28-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030584"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051318"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148852" version="1" comment="util-linux-lang is &lt;2.28-44.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051318"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148853" version="1" comment="util-linux-systemd is &lt;2.28-44.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051319"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148854" version="1" comment="uuidd is &lt;2.28-44.3.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051319"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148943" version="1" comment="xen is &lt;4.7.1_06-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051327"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148944" version="1" comment="xen-libs is &lt;4.7.1_06-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051327"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009148945" version="1" comment="xen-libs-32bit is &lt;4.7.1_06-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051327"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149009" version="1" comment="kernel-default is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149010" version="1" comment="kernel-default-devel is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149011" version="1" comment="kernel-default-extra is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149012" version="1" comment="kernel-devel is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149013" version="1" comment="kernel-macros is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149014" version="1" comment="kernel-source is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149015" version="1" comment="kernel-syms is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149403" version="1" comment="libXvnc1 is &lt;1.6.0-16.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041072"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051363"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149404" version="1" comment="tigervnc is &lt;1.6.0-16.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051363"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149405" version="1" comment="xorg-x11-Xvnc is &lt;1.6.0-16.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051363"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149406" version="1" comment="qemu is &lt;2.6.2-41.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051364"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149407" version="1" comment="qemu-block-curl is &lt;2.6.2-41.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051364"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149408" version="1" comment="qemu-ipxe is &lt;1.0.0-41.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051365"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149409" version="1" comment="qemu-kvm is &lt;2.6.2-41.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051364"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149410" version="1" comment="qemu-seabios is &lt;1.9.1-41.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051366"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149411" version="1" comment="qemu-sgabios is &lt;8-41.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051367"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149412" version="1" comment="qemu-tools is &lt;2.6.2-41.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051364"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149413" version="1" comment="qemu-vgabios is &lt;1.9.1-41.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051366"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149414" version="1" comment="qemu-x86 is &lt;2.6.2-41.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051364"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149575" version="1" comment="gegl is &lt;0.2.0-14.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035373"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051401"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149579" version="1" comment="libvmtools0 is &lt;10.1.0-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034560"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051402"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149580" version="1" comment="open-vm-tools is &lt;10.1.0-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034562"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051402"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149581" version="1" comment="open-vm-tools-desktop is &lt;10.1.0-8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051402"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149817" version="1" comment="virglrenderer is &lt;0.5.0-11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041509"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051433"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150010" version="1" comment="libdcerpc-binding0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150011" version="1" comment="libdcerpc-binding0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150012" version="1" comment="libdcerpc0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150013" version="1" comment="libdcerpc0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150014" version="1" comment="libndr-krb5pac0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150015" version="1" comment="libndr-krb5pac0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150016" version="1" comment="libndr-nbt0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150017" version="1" comment="libndr-nbt0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150018" version="1" comment="libndr-standard0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150019" version="1" comment="libndr-standard0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150020" version="1" comment="libndr0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150021" version="1" comment="libndr0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150022" version="1" comment="libnetapi0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150023" version="1" comment="libnetapi0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150024" version="1" comment="libsamba-credentials0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150025" version="1" comment="libsamba-credentials0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150026" version="1" comment="libsamba-errors0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150027" version="1" comment="libsamba-errors0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150028" version="1" comment="libsamba-hostconfig0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150029" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150030" version="1" comment="libsamba-passdb0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150031" version="1" comment="libsamba-passdb0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150032" version="1" comment="libsamba-util0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150033" version="1" comment="libsamba-util0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150034" version="1" comment="libsamdb0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150035" version="1" comment="libsamdb0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150036" version="1" comment="libsmbclient0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150037" version="1" comment="libsmbclient0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150038" version="1" comment="libsmbconf0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150039" version="1" comment="libsmbconf0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150040" version="1" comment="libsmbldap0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150041" version="1" comment="libsmbldap0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150042" version="1" comment="libtevent-util0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150043" version="1" comment="libtevent-util0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150044" version="1" comment="libwbclient0 is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150045" version="1" comment="libwbclient0-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150046" version="1" comment="samba is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150047" version="1" comment="samba-client is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150048" version="1" comment="samba-client-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150049" version="1" comment="samba-doc is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150050" version="1" comment="samba-libs is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150051" version="1" comment="samba-libs-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150052" version="1" comment="samba-winbind is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150053" version="1" comment="samba-winbind-32bit is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150054" version="1" comment="libdcerpc-atsvc0 is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150055" version="1" comment="kernel-default is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150056" version="1" comment="kernel-default-devel is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150057" version="1" comment="kernel-default-extra is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150058" version="1" comment="kernel-devel is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150059" version="1" comment="kernel-macros is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150060" version="1" comment="kernel-source is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150061" version="1" comment="kernel-syms is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150814" version="1" comment="dracut is &lt;044-108.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039344"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051508"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150915" version="1" comment="xen is &lt;4.7.2_02-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150916" version="1" comment="xen-libs is &lt;4.7.2_02-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150917" version="1" comment="xen-libs-32bit is &lt;4.7.2_02-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051517"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154334" version="1" comment="gstreamer-plugins-good is &lt;1.8.3-12.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051535"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154335" version="1" comment="gstreamer-plugins-good-lang is &lt;1.8.3-12.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051535"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154925" version="1" comment="xen is &lt;4.7.2_04-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051624"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154926" version="1" comment="xen-libs is &lt;4.7.2_04-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051624"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009154927" version="1" comment="xen-libs-32bit is &lt;4.7.2_04-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051624"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146960" version="1" comment="qemu is &lt;2.6.2-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146961" version="1" comment="qemu-block-curl is &lt;2.6.2-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146962" version="1" comment="qemu-ipxe is &lt;1.0.0-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050968"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146963" version="1" comment="qemu-kvm is &lt;2.6.2-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146964" version="1" comment="qemu-seabios is &lt;1.9.1-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146965" version="1" comment="qemu-sgabios is &lt;8-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146966" version="1" comment="qemu-tools is &lt;2.6.2-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146967" version="1" comment="qemu-vgabios is &lt;1.9.1-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050969"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146968" version="1" comment="qemu-x86 is &lt;2.6.2-39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050967"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155051" version="1" comment="kernel-default is &lt;4.4.59-92.17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051642"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155052" version="1" comment="kernel-default-devel is &lt;4.4.59-92.17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051642"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155053" version="1" comment="kernel-default-extra is &lt;4.4.59-92.17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051642"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155054" version="1" comment="kernel-devel is &lt;4.4.59-92.17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051644"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155055" version="1" comment="kernel-macros is &lt;4.4.59-92.17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051644"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155056" version="1" comment="kernel-source is &lt;4.4.59-92.17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051644"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155057" version="1" comment="kernel-syms is &lt;4.4.59-92.17.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051644"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155552" version="1" comment="libtirpc is &lt;1.0.1-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051709"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155694" version="1" comment="libplist is &lt;1.12-19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041438"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051734"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155803" version="1" comment="libdcerpc-binding0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155804" version="1" comment="libdcerpc-binding0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155805" version="1" comment="libdcerpc0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155806" version="1" comment="libdcerpc0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155807" version="1" comment="libndr-krb5pac0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155808" version="1" comment="libndr-krb5pac0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155809" version="1" comment="libndr-nbt0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155810" version="1" comment="libndr-nbt0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155811" version="1" comment="libndr-standard0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155812" version="1" comment="libndr-standard0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155813" version="1" comment="libndr0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155814" version="1" comment="libndr0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155815" version="1" comment="libnetapi0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155816" version="1" comment="libnetapi0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155817" version="1" comment="libsamba-credentials0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155818" version="1" comment="libsamba-credentials0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155819" version="1" comment="libsamba-errors0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155820" version="1" comment="libsamba-errors0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155821" version="1" comment="libsamba-hostconfig0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155822" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155823" version="1" comment="libsamba-passdb0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155824" version="1" comment="libsamba-passdb0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155825" version="1" comment="libsamba-util0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155826" version="1" comment="libsamba-util0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155827" version="1" comment="libsamdb0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155828" version="1" comment="libsamdb0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155829" version="1" comment="libsmbclient0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155830" version="1" comment="libsmbclient0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155831" version="1" comment="libsmbconf0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155832" version="1" comment="libsmbconf0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155833" version="1" comment="libsmbldap0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155834" version="1" comment="libsmbldap0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155835" version="1" comment="libtevent-util0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155836" version="1" comment="libtevent-util0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155837" version="1" comment="libwbclient0 is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155838" version="1" comment="libwbclient0-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155839" version="1" comment="samba is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155840" version="1" comment="samba-client is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155841" version="1" comment="samba-client-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155842" version="1" comment="samba-doc is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155843" version="1" comment="samba-libs is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155844" version="1" comment="samba-libs-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155845" version="1" comment="samba-winbind is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155846" version="1" comment="samba-winbind-32bit is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155847" version="1" comment="libdcerpc-atsvc0 is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147227" version="1" comment="kernel-default is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147228" version="1" comment="kernel-default-devel is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147229" version="1" comment="kernel-default-extra is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147230" version="1" comment="kernel-devel is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147231" version="1" comment="kernel-macros is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147232" version="1" comment="kernel-source is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147233" version="1" comment="kernel-syms is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156237" version="1" comment="sudo is &lt;1.8.10p3-10.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030544"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051766"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156238" version="1" comment="libxml2 is &lt;2.9.4-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156239" version="1" comment="libxml2-2 is &lt;2.9.4-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156240" version="1" comment="libxml2-2-32bit is &lt;2.9.4-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156241" version="1" comment="libxml2-tools is &lt;2.9.4-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156242" version="1" comment="python-libxml2 is &lt;2.9.4-36.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051767"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156350" version="1" comment="libnettle is &lt;2.7.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039815"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051791"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156760" version="1" comment="libxml2 is &lt;2.9.4-39.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156761" version="1" comment="libxml2-2 is &lt;2.9.4-39.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156762" version="1" comment="libxml2-2-32bit is &lt;2.9.4-39.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156763" version="1" comment="libxml2-tools is &lt;2.9.4-39.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156764" version="1" comment="python-libxml2 is &lt;2.9.4-39.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051888"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156823" version="1" comment="libQt5Concurrent5 is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038886"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156824" version="1" comment="libQt5Core5 is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038891"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156825" version="1" comment="libQt5DBus5 is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038896"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156826" version="1" comment="libQt5Gui5 is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037608"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156827" version="1" comment="libQt5Network5 is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156828" version="1" comment="libQt5OpenGL5 is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038909"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156829" version="1" comment="libQt5PrintSupport5 is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038919"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156830" version="1" comment="libQt5Sql5 is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037610"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156831" version="1" comment="libQt5Sql5-mysql is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156832" version="1" comment="libQt5Sql5-postgresql is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156833" version="1" comment="libQt5Sql5-sqlite is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038928"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156834" version="1" comment="libQt5Sql5-unixODBC is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038930"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156835" version="1" comment="libQt5Test5 is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037612"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156836" version="1" comment="libQt5Widgets5 is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037614"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156837" version="1" comment="libQt5Xml5 is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038940"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156838" version="1" comment="libQtQuick5 is &lt;5.6.1-13.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156839" version="1" comment="libqt5-qtbase is &lt;5.6.1-17.3.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037616"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051902"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156840" version="1" comment="libqt5-qtdeclarative is &lt;5.6.1-13.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039667"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051903"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156954" version="1" comment="libgcrypt is &lt;1.6.1-16.39.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036338"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051912"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156965" version="1" comment="kernel-default is &lt;4.4.59-92.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156966" version="1" comment="kernel-default-devel is &lt;4.4.59-92.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156967" version="1" comment="kernel-default-extra is &lt;4.4.59-92.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156968" version="1" comment="kernel-devel is &lt;4.4.59-92.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156969" version="1" comment="kernel-macros is &lt;4.4.59-92.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156970" version="1" comment="kernel-source is &lt;4.4.59-92.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156971" version="1" comment="kernel-syms is &lt;4.4.59-92.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157166" version="1" comment="openvpn is &lt;2.3.8-16.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051932"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169810" version="1" comment="gd is &lt;2.1.0-24.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053585"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169811" version="1" comment="gd-32bit is &lt;2.1.0-24.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053585"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169034" version="1" comment="kernel-default is &lt;4.4.103-92.56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053471"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169035" version="1" comment="kernel-default-devel is &lt;4.4.103-92.56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053471"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169036" version="1" comment="kernel-default-extra is &lt;4.4.103-92.56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053471"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169037" version="1" comment="kernel-devel is &lt;4.4.103-92.56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053471"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169038" version="1" comment="kernel-macros is &lt;4.4.103-92.56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053471"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169039" version="1" comment="kernel-source is &lt;4.4.103-92.56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053471"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169040" version="1" comment="kernel-syms is &lt;4.4.103-92.56.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053471"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169960" version="1" comment="rsync is &lt;3.1.0-13.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030761"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053614"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169961" version="1" comment="procmail is &lt;3.22-269.3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038135"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053615"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169973" version="1" comment="libvpx is &lt;1.3.0-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053619"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169974" version="1" comment="libvpx1 is &lt;1.3.0-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053619"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169975" version="1" comment="libvpx1-32bit is &lt;1.3.0-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053619"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169976" version="1" comment="vpx-tools is &lt;1.3.0-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053619"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170033" version="1" comment="libwireshark8 is &lt;2.2.12-48.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053628"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170034" version="1" comment="libwiretap6 is &lt;2.2.12-48.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053628"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170035" version="1" comment="libwscodecs1 is &lt;2.2.12-48.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053628"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170036" version="1" comment="libwsutil7 is &lt;2.2.12-48.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041623"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053628"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170037" version="1" comment="wireshark is &lt;2.2.12-48.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053628"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170038" version="1" comment="wireshark-gtk is &lt;2.2.12-48.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053628"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170039" version="1" comment="libexif is &lt;0.6.21-8.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030484"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053629"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170040" version="1" comment="libexif12 is &lt;0.6.21-8.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053629"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170041" version="1" comment="libexif12-32bit is &lt;0.6.21-8.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053629"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169041" version="1" comment="ImageMagick is &lt;6.8.8.1-71.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053473"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169042" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-71.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053473"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169043" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-71.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053473"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169044" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-71.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053473"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169045" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-71.20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053473"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170042" version="1" comment="libevent is &lt;2.0.21-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038367"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053630"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170043" version="1" comment="libevent-2_0-5 is &lt;2.0.21-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038368"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053630"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170066" version="1" comment="curl is &lt;7.37.0-37.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170067" version="1" comment="libcurl4 is &lt;7.37.0-37.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170068" version="1" comment="libcurl4-32bit is &lt;7.37.0-37.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169046" version="1" comment="libvorbis is &lt;1.3.3-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053474"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169047" version="1" comment="libvorbis0 is &lt;1.3.3-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034804"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053474"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169048" version="1" comment="libvorbis0-32bit is &lt;1.3.3-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034803"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053474"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169049" version="1" comment="libvorbisenc2 is &lt;1.3.3-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034806"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053474"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169050" version="1" comment="libvorbisenc2-32bit is &lt;1.3.3-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034805"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053474"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169051" version="1" comment="libvorbisfile3 is &lt;1.3.3-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034808"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053474"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169052" version="1" comment="libvorbisfile3-32bit is &lt;1.3.3-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034807"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053474"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170069" version="1" comment="libjavascriptcoregtk-4_0-18 is &lt;2.18.5-2.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170070" version="1" comment="libwebkit2gtk-4_0-37 is &lt;2.18.5-2.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170071" version="1" comment="libwebkit2gtk3-lang is &lt;2.18.5-2.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170072" version="1" comment="typelib-1_0-JavaScriptCore-4_0 is &lt;2.18.5-2.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170073" version="1" comment="typelib-1_0-WebKit2-4_0 is &lt;2.18.5-2.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040314"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170074" version="1" comment="webkit2gtk-4_0-injected-bundles is &lt;2.18.5-2.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040317"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170075" version="1" comment="webkit2gtk3 is &lt;2.18.5-2.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040318"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053636"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170244" version="1" comment="transfig is &lt;3.2.5e-2.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042151"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053656"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170425" version="1" comment="clamav is &lt;0.99.3-33.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053665"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170443" version="1" comment="gd is &lt;2.1.0-24.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053669"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170444" version="1" comment="gd-32bit is &lt;2.1.0-24.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038600"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053669"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170445" version="1" comment="libncurses5 is &lt;5.9-58.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041695"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170446" version="1" comment="libncurses5-32bit is &lt;5.9-58.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041696"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170447" version="1" comment="libncurses6 is &lt;5.9-58.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041698"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170448" version="1" comment="libncurses6-32bit is &lt;5.9-58.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170449" version="1" comment="ncurses is &lt;5.9-58.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032515"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170450" version="1" comment="ncurses-devel is &lt;5.9-58.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032514"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170451" version="1" comment="ncurses-utils is &lt;5.9-58.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170452" version="1" comment="tack is &lt;5.9-58.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041694"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170453" version="1" comment="terminfo is &lt;5.9-58.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170454" version="1" comment="terminfo-base is &lt;5.9-58.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041702"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053670"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170455" version="1" comment="libsystemd0 is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170456" version="1" comment="libsystemd0-32bit is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170457" version="1" comment="libudev1 is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170458" version="1" comment="libudev1-32bit is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170459" version="1" comment="systemd is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170460" version="1" comment="systemd-32bit is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170461" version="1" comment="systemd-bash-completion is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170462" version="1" comment="systemd-sysvinit is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170463" version="1" comment="udev is &lt;228-150.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053668"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170464" version="1" comment="bind is &lt;9.9.9P1-63.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030650"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053671"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170465" version="1" comment="bind-libs is &lt;9.9.9P1-63.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031557"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053671"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170466" version="1" comment="bind-libs-32bit is &lt;9.9.9P1-63.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053671"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170467" version="1" comment="bind-utils is &lt;9.9.9P1-63.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030649"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053671"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170837" version="1" comment="libXfont is &lt;1.5.1-11.3.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037585"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053695"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170838" version="1" comment="libXfont1 is &lt;1.5.1-11.3.12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053695"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170839" version="1" comment="ecryptfs-utils is &lt;103-8.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170840" version="1" comment="ecryptfs-utils-32bit is &lt;103-8.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053696"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170867" version="1" comment="ImageMagick is &lt;6.8.8.1-71.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053700"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170868" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-71.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053700"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170869" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-71.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053700"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170870" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-71.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053700"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170871" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-71.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053700"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170872" version="1" comment="libsndfile is &lt;1.0.25-36.7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030979"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053701"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170873" version="1" comment="libsndfile1 is &lt;1.0.25-36.7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038350"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053701"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170874" version="1" comment="libsndfile1-32bit is &lt;1.0.25-36.7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038351"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053701"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170911" version="1" comment="libjpeg-turbo is &lt;1.5.3-31.7.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053709"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170912" version="1" comment="libjpeg62 is &lt;62.2.0-31.7.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053710"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170913" version="1" comment="libjpeg62-32bit is &lt;62.2.0-31.7.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053710"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170914" version="1" comment="libjpeg62-turbo is &lt;1.5.3-31.7.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038282"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053709"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170915" version="1" comment="libjpeg8 is &lt;8.1.2-31.7.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038279"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053711"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170916" version="1" comment="libjpeg8-32bit is &lt;8.1.2-31.7.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038278"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053711"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170917" version="1" comment="libturbojpeg0 is &lt;8.1.2-31.7.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038290"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053711"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170918" version="1" comment="spice-vdagent is &lt;0.16.0-8.5.15" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042183"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053712"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170919" version="1" comment="MozillaFirefox is &lt;52.6.0esr-109.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053713"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170920" version="1" comment="MozillaFirefox-translations is &lt;52.6.0esr-109.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053713"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169298" version="1" comment="qemu is &lt;2.6.2-41.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053504"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169299" version="1" comment="qemu-block-curl is &lt;2.6.2-41.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053504"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169300" version="1" comment="qemu-ipxe is &lt;1.0.0-41.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053505"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169301" version="1" comment="qemu-kvm is &lt;2.6.2-41.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053504"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169302" version="1" comment="qemu-seabios is &lt;1.9.1-41.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053506"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169303" version="1" comment="qemu-sgabios is &lt;8-41.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053507"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169304" version="1" comment="qemu-tools is &lt;2.6.2-41.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053504"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169305" version="1" comment="qemu-vgabios is &lt;1.9.1-41.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053506"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169306" version="1" comment="qemu-x86 is &lt;2.6.2-41.31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053504"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170929" version="1" comment="libmysqlclient18 is &lt;10.0.33-29.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053716"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170930" version="1" comment="libmysqlclient18-32bit is &lt;10.0.33-29.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053716"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170931" version="1" comment="libmysqlclient_r18 is &lt;10.0.33-29.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053716"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170932" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.33-29.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053716"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170933" version="1" comment="mariadb is &lt;10.0.33-29.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053716"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170934" version="1" comment="mariadb-client is &lt;10.0.33-29.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053716"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170935" version="1" comment="mariadb-errormessages is &lt;10.0.33-29.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053716"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170936" version="1" comment="libvirt is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170937" version="1" comment="libvirt-client is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170938" version="1" comment="libvirt-client-32bit is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170939" version="1" comment="libvirt-daemon is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170940" version="1" comment="libvirt-daemon-config-network is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170941" version="1" comment="libvirt-daemon-config-nwfilter is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170942" version="1" comment="libvirt-daemon-driver-interface is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170943" version="1" comment="libvirt-daemon-driver-libxl is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170944" version="1" comment="libvirt-daemon-driver-lxc is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170945" version="1" comment="libvirt-daemon-driver-network is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170946" version="1" comment="libvirt-daemon-driver-nodedev is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170947" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170948" version="1" comment="libvirt-daemon-driver-qemu is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170949" version="1" comment="libvirt-daemon-driver-secret is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170950" version="1" comment="libvirt-daemon-driver-storage is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170951" version="1" comment="libvirt-daemon-lxc is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170952" version="1" comment="libvirt-daemon-qemu is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170953" version="1" comment="libvirt-daemon-xen is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170954" version="1" comment="libvirt-doc is &lt;2.0.0-27.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053717"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171011" version="1" comment="libxml2 is &lt;2.9.4-46.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053730"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171012" version="1" comment="libxml2-2 is &lt;2.9.4-46.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053730"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171013" version="1" comment="libxml2-2-32bit is &lt;2.9.4-46.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053730"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171014" version="1" comment="libxml2-tools is &lt;2.9.4-46.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053730"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171015" version="1" comment="python-libxml2 is &lt;2.9.4-46.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053730"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171092" version="1" comment="ghostscript is &lt;9.15-23.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038878"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171093" version="1" comment="ghostscript-x11 is &lt;9.15-23.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030822"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171094" version="1" comment="kernel-default is &lt;4.4.114-92.64.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053744"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171095" version="1" comment="kernel-default-devel is &lt;4.4.114-92.64.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053744"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171096" version="1" comment="kernel-default-extra is &lt;4.4.114-92.64.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053744"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171097" version="1" comment="kernel-devel is &lt;4.4.114-92.64.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053744"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171098" version="1" comment="kernel-macros is &lt;4.4.114-92.64.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053744"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171099" version="1" comment="kernel-source is &lt;4.4.114-92.64.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053744"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171100" version="1" comment="kernel-syms is &lt;4.4.114-92.64.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053744"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171101" version="1" comment="freetype2 is &lt;2.6.3-7.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030613"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171102" version="1" comment="ft2demos is &lt;2.6.3-7.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034838"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171103" version="1" comment="libfreetype6 is &lt;2.6.3-7.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033880"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171104" version="1" comment="libfreetype6-32bit is &lt;2.6.3-7.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053745"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171162" version="1" comment="libreoffice-base is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171163" version="1" comment="libreoffice-base-drivers-mysql is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171164" version="1" comment="libreoffice-base-drivers-postgresql is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171165" version="1" comment="libreoffice-calc is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171166" version="1" comment="libreoffice-calc-extensions is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171167" version="1" comment="libreoffice-draw is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171168" version="1" comment="libreoffice-filters-optional is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171169" version="1" comment="libreoffice-gnome is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171170" version="1" comment="libreoffice-icon-theme-galaxy is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171171" version="1" comment="libreoffice-icon-theme-tango is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171172" version="1" comment="libreoffice-impress is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171173" version="1" comment="libreoffice-l10n-af is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171174" version="1" comment="libreoffice-l10n-ar is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171175" version="1" comment="libreoffice-l10n-ca is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171176" version="1" comment="libreoffice-l10n-cs is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171177" version="1" comment="libreoffice-l10n-da is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171178" version="1" comment="libreoffice-l10n-de is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171179" version="1" comment="libreoffice-l10n-en is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171180" version="1" comment="libreoffice-l10n-es is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171181" version="1" comment="libreoffice-l10n-fi is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171182" version="1" comment="libreoffice-l10n-fr is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171183" version="1" comment="libreoffice-l10n-gu is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171184" version="1" comment="libreoffice-l10n-hi is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171185" version="1" comment="libreoffice-l10n-hu is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171186" version="1" comment="libreoffice-l10n-it is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171187" version="1" comment="libreoffice-l10n-ja is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171188" version="1" comment="libreoffice-l10n-ko is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171189" version="1" comment="libreoffice-l10n-nb is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171190" version="1" comment="libreoffice-l10n-nl is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171191" version="1" comment="libreoffice-l10n-nn is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171192" version="1" comment="libreoffice-l10n-pl is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171193" version="1" comment="libreoffice-l10n-pt_BR is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041715"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171194" version="1" comment="libreoffice-l10n-pt_PT is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041716"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171195" version="1" comment="libreoffice-l10n-ro is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171196" version="1" comment="libreoffice-l10n-ru is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171197" version="1" comment="libreoffice-l10n-sk is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171198" version="1" comment="libreoffice-l10n-sv is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171199" version="1" comment="libreoffice-l10n-xh is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171200" version="1" comment="libreoffice-l10n-zh_CN is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041717"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171201" version="1" comment="libreoffice-l10n-zh_TW is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041718"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171202" version="1" comment="libreoffice-l10n-zu is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171203" version="1" comment="libreoffice-mailmerge is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171204" version="1" comment="libreoffice-math is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171205" version="1" comment="libreoffice-officebean is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171206" version="1" comment="libreoffice-pyuno is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171207" version="1" comment="libreoffice-writer is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171208" version="1" comment="libreoffice-writer-extensions is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171209" version="1" comment="libreofficekit is &lt;5.4.5.1-40.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053754"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171438" version="1" comment="glibc is &lt;2.22-62.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171439" version="1" comment="glibc-32bit is &lt;2.22-62.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171440" version="1" comment="glibc-devel is &lt;2.22-62.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171441" version="1" comment="glibc-devel-32bit is &lt;2.22-62.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171442" version="1" comment="glibc-i18ndata is &lt;2.22-62.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171443" version="1" comment="glibc-locale is &lt;2.22-62.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171444" version="1" comment="glibc-locale-32bit is &lt;2.22-62.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171445" version="1" comment="nscd is &lt;2.22-62.6.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053768"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171463" version="1" comment="p7zip is &lt;9.20.1-7.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038766"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053773"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171518" version="1" comment="xen is &lt;4.7.4_06-43.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053786"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171519" version="1" comment="xen-libs is &lt;4.7.4_06-43.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053786"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171520" version="1" comment="xen-libs-32bit is &lt;4.7.4_06-43.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053786"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171521" version="1" comment="libecpg6 is &lt;9.6.7-3.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171522" version="1" comment="libpq5 is &lt;9.6.7-3.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171523" version="1" comment="libpq5-32bit is &lt;9.6.7-3.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171524" version="1" comment="postgresql96 is &lt;9.6.7-3.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041746"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171525" version="1" comment="postgresql96-libs is &lt;9.6.7-3.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041890"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053787"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171526" version="1" comment="db48-utils is &lt;4.8.30-29.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042226"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053788"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171527" version="1" comment="libdb-4_8 is &lt;4.8.30-29.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042227"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053788"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171528" version="1" comment="libdb-4_8-32bit is &lt;4.8.30-29.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053788"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172323" version="1" comment="dhcp is &lt;4.3.3-10.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172324" version="1" comment="dhcp-client is &lt;4.3.3-10.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030726"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053921"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172459" version="1" comment="libsystemd0 is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172460" version="1" comment="libsystemd0-32bit is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172461" version="1" comment="libudev1 is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172462" version="1" comment="libudev1-32bit is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172463" version="1" comment="systemd is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172464" version="1" comment="systemd-32bit is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172465" version="1" comment="systemd-bash-completion is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172466" version="1" comment="systemd-sysvinit is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172467" version="1" comment="udev is &lt;228-150.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053929"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172489" version="1" comment="libzzip-0-13 is &lt;0.13.67-10.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172490" version="1" comment="zziplib is &lt;0.13.67-10.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053933"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172606" version="1" comment="puppet is &lt;3.8.5-15.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033794"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053951"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172607" version="1" comment="ImageMagick is &lt;6.8.8.1-71.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053952"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172608" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-71.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053952"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172609" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-71.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053952"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172610" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-71.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053952"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172611" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-71.42.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053952"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172641" version="1" comment="libIlmImf-Imf_2_1-21 is &lt;2.1.0-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040995"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172642" version="1" comment="libIlmImf-Imf_2_1-21-32bit is &lt;2.1.0-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041123"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172643" version="1" comment="openexr is &lt;2.1.0-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041114"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053953"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169338" version="1" comment="ImageMagick is &lt;6.8.8.1-71.23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169339" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-71.23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169340" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-71.23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169341" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-71.23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169342" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-71.23.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053511"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172682" version="1" comment="cups-client is &lt;1.7.5-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030425"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172683" version="1" comment="cups-libs is &lt;1.7.5-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030427"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172684" version="1" comment="cups-libs-32bit is &lt;1.7.5-20.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030730"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053958"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172685" version="1" comment="libwavpack1 is &lt;4.60.99-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042291"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053959"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172686" version="1" comment="wavpack is &lt;4.60.99-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042292"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053959"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172757" version="1" comment="libyaml-cpp0_5 is &lt;0.5.3-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042297"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172758" version="1" comment="yaml-cpp is &lt;0.5.3-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042298"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172771" version="1" comment="shotwell is &lt;0.22.0+git.20160103-15.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038370"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053980"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172772" version="1" comment="shotwell-lang is &lt;0.22.0+git.20160103-15.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038371"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053980"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172787" version="1" comment="augeas is &lt;1.2.0-12.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053985"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172788" version="1" comment="augeas-lenses is &lt;1.2.0-12.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038073"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053985"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172789" version="1" comment="libaugeas0 is &lt;1.2.0-12.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053985"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172790" version="1" comment="glibc is &lt;2.22-62.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053986"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172791" version="1" comment="glibc-32bit is &lt;2.22-62.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053986"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172792" version="1" comment="glibc-devel is &lt;2.22-62.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053986"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172793" version="1" comment="glibc-devel-32bit is &lt;2.22-62.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053986"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172794" version="1" comment="glibc-i18ndata is &lt;2.22-62.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053986"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172795" version="1" comment="glibc-locale is &lt;2.22-62.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053986"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172796" version="1" comment="glibc-locale-32bit is &lt;2.22-62.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053986"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172797" version="1" comment="nscd is &lt;2.22-62.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053986"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172946" version="1" comment="shadow is &lt;4.2.1-27.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032193"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053997"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172947" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.171-43.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053998"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172948" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.171-43.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053998"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172949" version="1" comment="java-1_8_0-openjdk is &lt;1.8.0.161-27.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038648"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172950" version="1" comment="java-1_8_0-openjdk-headless is &lt;1.8.0.161-27.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053999"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173003" version="1" comment="postgresql94 is &lt;9.4.16-21.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039800"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054005"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173004" version="1" comment="kernel-firmware is &lt;20170530-21.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054006"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173005" version="1" comment="ucode-amd is &lt;20170530-21.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042042"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054006"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173006" version="1" comment="libcdio is &lt;0.90-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032844"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173007" version="1" comment="libcdio14 is &lt;0.90-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042305"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173008" version="1" comment="libcdio14-32bit is &lt;0.90-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042306"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173009" version="1" comment="libiso9660-8 is &lt;0.90-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054007"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173052" version="1" comment="libmysqlclient18 is &lt;10.0.34-29.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054014"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173053" version="1" comment="libmysqlclient18-32bit is &lt;10.0.34-29.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054014"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173054" version="1" comment="libmysqlclient_r18 is &lt;10.0.34-29.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054014"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173055" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.34-29.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054014"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173056" version="1" comment="mariadb is &lt;10.0.34-29.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054014"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173057" version="1" comment="mariadb-client is &lt;10.0.34-29.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054014"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173058" version="1" comment="mariadb-errormessages is &lt;10.0.34-29.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054014"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173106" version="1" comment="ucode-intel is &lt;20180312-13.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042104"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054021"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173107" version="1" comment="libid3tag is &lt;0.15.1b-184.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041286"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173108" version="1" comment="libid3tag0 is &lt;0.15.1b-184.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040999"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173373" version="1" comment="libecpg6 is &lt;9.6.8-3.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054068"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173374" version="1" comment="libpq5 is &lt;9.6.8-3.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054068"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173375" version="1" comment="libpq5-32bit is &lt;9.6.8-3.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054068"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173376" version="1" comment="postgresql96 is &lt;9.6.8-3.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041746"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054068"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173377" version="1" comment="postgresql96-libs is &lt;9.6.8-3.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041890"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054068"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173484" version="1" comment="curl is &lt;7.37.0-37.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173485" version="1" comment="libcurl4 is &lt;7.37.0-37.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173486" version="1" comment="libcurl4-32bit is &lt;7.37.0-37.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054081"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173600" version="1" comment="libvorbis is &lt;1.3.3-10.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173601" version="1" comment="libvorbis0 is &lt;1.3.3-10.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034804"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173602" version="1" comment="libvorbis0-32bit is &lt;1.3.3-10.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034803"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173603" version="1" comment="libvorbisenc2 is &lt;1.3.3-10.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034806"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173604" version="1" comment="libvorbisenc2-32bit is &lt;1.3.3-10.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034805"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173605" version="1" comment="libvorbisfile3 is &lt;1.3.3-10.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034808"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173606" version="1" comment="libvorbisfile3-32bit is &lt;1.3.3-10.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034807"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054098"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173607" version="1" comment="kernel-default is &lt;4.4.120-92.70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173608" version="1" comment="kernel-default-devel is &lt;4.4.120-92.70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173609" version="1" comment="kernel-default-extra is &lt;4.4.120-92.70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173610" version="1" comment="kernel-devel is &lt;4.4.120-92.70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173611" version="1" comment="kernel-macros is &lt;4.4.120-92.70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173612" version="1" comment="kernel-source is &lt;4.4.120-92.70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173613" version="1" comment="kernel-syms is &lt;4.4.120-92.70.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054096"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173783" version="1" comment="clamav is &lt;0.99.4-33.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030961"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054109"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173784" version="1" comment="dhcp is &lt;4.3.3-10.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030729"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173785" version="1" comment="dhcp-client is &lt;4.3.3-10.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030726"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054110"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173786" version="1" comment="libwireshark8 is &lt;2.2.13-48.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173787" version="1" comment="libwiretap6 is &lt;2.2.13-48.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173788" version="1" comment="libwscodecs1 is &lt;2.2.13-48.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173789" version="1" comment="libwsutil7 is &lt;2.2.13-48.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041623"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173790" version="1" comment="wireshark is &lt;2.2.13-48.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173791" version="1" comment="wireshark-gtk is &lt;2.2.13-48.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054111"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169487" version="1" comment="glibc is &lt;2.22-62.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031926"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169488" version="1" comment="glibc-32bit is &lt;2.22-62.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031922"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169489" version="1" comment="glibc-devel is &lt;2.22-62.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031924"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169490" version="1" comment="glibc-devel-32bit is &lt;2.22-62.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031923"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169491" version="1" comment="glibc-i18ndata is &lt;2.22-62.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032392"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169492" version="1" comment="glibc-locale is &lt;2.22-62.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031925"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169493" version="1" comment="glibc-locale-32bit is &lt;2.22-62.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169494" version="1" comment="nscd is &lt;2.22-62.3.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053542"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173880" version="1" comment="qemu is &lt;2.6.2-41.37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173881" version="1" comment="qemu-block-curl is &lt;2.6.2-41.37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173882" version="1" comment="qemu-ipxe is &lt;1.0.0-41.37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054122"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173883" version="1" comment="qemu-kvm is &lt;2.6.2-41.37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173884" version="1" comment="qemu-seabios is &lt;1.9.1-41.37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054123"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173885" version="1" comment="qemu-sgabios is &lt;8-41.37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054124"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173886" version="1" comment="qemu-tools is &lt;2.6.2-41.37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173887" version="1" comment="qemu-vgabios is &lt;1.9.1-41.37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054123"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173888" version="1" comment="qemu-x86 is &lt;2.6.2-41.37.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054121"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173889" version="1" comment="libdcerpc-binding0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173890" version="1" comment="libdcerpc-binding0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173891" version="1" comment="libdcerpc0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173892" version="1" comment="libdcerpc0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173893" version="1" comment="libndr-krb5pac0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173894" version="1" comment="libndr-krb5pac0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173895" version="1" comment="libndr-nbt0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173896" version="1" comment="libndr-nbt0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173897" version="1" comment="libndr-standard0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173898" version="1" comment="libndr-standard0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173899" version="1" comment="libndr0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173900" version="1" comment="libndr0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173901" version="1" comment="libnetapi0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173902" version="1" comment="libnetapi0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173903" version="1" comment="libsamba-credentials0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173904" version="1" comment="libsamba-credentials0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173905" version="1" comment="libsamba-errors0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173906" version="1" comment="libsamba-errors0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173907" version="1" comment="libsamba-hostconfig0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173908" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173909" version="1" comment="libsamba-passdb0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173910" version="1" comment="libsamba-passdb0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173911" version="1" comment="libsamba-util0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173912" version="1" comment="libsamba-util0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173913" version="1" comment="libsamdb0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173914" version="1" comment="libsamdb0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173915" version="1" comment="libsmbclient0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173916" version="1" comment="libsmbclient0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173917" version="1" comment="libsmbconf0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173918" version="1" comment="libsmbconf0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173919" version="1" comment="libsmbldap0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173920" version="1" comment="libsmbldap0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173921" version="1" comment="libtevent-util0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173922" version="1" comment="libtevent-util0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173923" version="1" comment="libwbclient0 is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173924" version="1" comment="libwbclient0-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173925" version="1" comment="samba is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173926" version="1" comment="samba-client is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173927" version="1" comment="samba-client-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173928" version="1" comment="samba-doc is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173929" version="1" comment="samba-libs is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173930" version="1" comment="samba-libs-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173931" version="1" comment="samba-winbind is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173932" version="1" comment="samba-winbind-32bit is &lt;4.4.2-38.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054125"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173989" version="1" comment="krb5 is &lt;1.12.5-40.23.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031044"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173990" version="1" comment="krb5-32bit is &lt;1.12.5-40.23.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031038"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173991" version="1" comment="krb5-client is &lt;1.12.5-40.23.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054137"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173992" version="1" comment="MozillaFirefox is &lt;52.7.3esr-109.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054138"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173993" version="1" comment="MozillaFirefox-translations is &lt;52.7.3esr-109.25.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030475"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054138"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174092" version="1" comment="ImageMagick is &lt;6.8.8.1-71.47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054154"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174093" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-71.47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054154"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174094" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-71.47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054154"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174095" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-71.47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054154"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174096" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-71.47.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054154"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174097" version="1" comment="graphite2 is &lt;1.3.1-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054155"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174098" version="1" comment="libgraphite2-3 is &lt;1.3.1-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054155"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174099" version="1" comment="libgraphite2-3-32bit is &lt;1.3.1-10.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039087"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054155"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174100" version="1" comment="libvirt is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174101" version="1" comment="libvirt-client is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174102" version="1" comment="libvirt-client-32bit is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034905"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174103" version="1" comment="libvirt-daemon is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174104" version="1" comment="libvirt-daemon-config-network is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174105" version="1" comment="libvirt-daemon-config-nwfilter is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174106" version="1" comment="libvirt-daemon-driver-interface is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174107" version="1" comment="libvirt-daemon-driver-libxl is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174108" version="1" comment="libvirt-daemon-driver-lxc is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174109" version="1" comment="libvirt-daemon-driver-network is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174110" version="1" comment="libvirt-daemon-driver-nodedev is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174111" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174112" version="1" comment="libvirt-daemon-driver-qemu is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174113" version="1" comment="libvirt-daemon-driver-secret is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174114" version="1" comment="libvirt-daemon-driver-storage is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174115" version="1" comment="libvirt-daemon-lxc is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174116" version="1" comment="libvirt-daemon-qemu is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174117" version="1" comment="libvirt-daemon-xen is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174118" version="1" comment="libvirt-doc is &lt;2.0.0-27.34.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054156"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169495" version="1" comment="libtiff5 is &lt;4.0.9-44.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053543"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169496" version="1" comment="libtiff5-32bit is &lt;4.0.9-44.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035968"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053543"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169497" version="1" comment="tiff is &lt;4.0.9-44.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030453"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053543"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174153" version="1" comment="postgresql94 is &lt;9.4.17-21.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039800"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054164"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168951" version="1" comment="java-1_7_0-openjdk is &lt;1.7.0.161-43.7.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053461"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168952" version="1" comment="java-1_7_0-openjdk-headless is &lt;1.7.0.161-43.7.6" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037628"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053461"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169498" version="1" comment="gwenhywfar is &lt;4.9.0beta-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042116"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053544"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169499" version="1" comment="gwenhywfar-lang is &lt;4.9.0beta-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042117"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053544"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169500" version="1" comment="gwenhywfar-tools is &lt;4.9.0beta-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042118"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053544"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169501" version="1" comment="libgwengui-gtk2-0 is &lt;4.9.0beta-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042119"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053544"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169502" version="1" comment="libgwenhywfar60 is &lt;4.9.0beta-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042120"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053544"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169503" version="1" comment="libgwenhywfar60-plugins is &lt;4.9.0beta-3.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042121"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053544"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174293" version="1" comment="xen is &lt;4.7.5_02-43.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174294" version="1" comment="xen-libs is &lt;4.7.5_02-43.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174295" version="1" comment="xen-libs-32bit is &lt;4.7.5_02-43.27.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054184"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174317" version="1" comment="libopenssl-devel is &lt;1.0.2j-60.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054188"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174318" version="1" comment="libopenssl1_0_0 is &lt;1.0.2j-60.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033984"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054188"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174319" version="1" comment="libopenssl1_0_0-32bit is &lt;1.0.2j-60.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033983"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054188"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174320" version="1" comment="openssl is &lt;1.0.2j-60.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054188"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169504" version="1" comment="postgresql94 is &lt;9.4.15-21.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039800"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053545"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169505" version="1" comment="libmysqlclient18 is &lt;10.0.32-29.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035436"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169506" version="1" comment="libmysqlclient18-32bit is &lt;10.0.32-29.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035435"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169507" version="1" comment="libmysqlclient_r18 is &lt;10.0.32-29.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035440"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169508" version="1" comment="libmysqlclient_r18-32bit is &lt;10.0.32-29.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035439"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169509" version="1" comment="mariadb is &lt;10.0.32-29.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034601"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169510" version="1" comment="mariadb-client is &lt;10.0.32-29.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034597"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169511" version="1" comment="mariadb-errormessages is &lt;10.0.32-29.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053546"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169577" version="1" comment="openslp is &lt;2.0.0-18.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033994"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053551"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169578" version="1" comment="openslp-32bit is &lt;2.0.0-18.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033991"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053551"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168954" version="1" comment="kernel-firmware is &lt;20170530-21.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053463"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168955" version="1" comment="ucode-amd is &lt;20170530-21.16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042042"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053463"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169812" version="1" comment="rsync is &lt;3.1.0-13.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030761"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053586"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169813" version="1" comment="libncurses5 is &lt;5.9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041695"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169814" version="1" comment="libncurses5-32bit is &lt;5.9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041696"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169815" version="1" comment="libncurses6 is &lt;5.9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041698"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169816" version="1" comment="libncurses6-32bit is &lt;5.9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041699"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169817" version="1" comment="ncurses is &lt;5.9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032515"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169818" version="1" comment="ncurses-devel is &lt;5.9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032514"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169819" version="1" comment="ncurses-utils is &lt;5.9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169820" version="1" comment="tack is &lt;5.9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041694"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169821" version="1" comment="terminfo is &lt;5.9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032551"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169822" version="1" comment="terminfo-base is &lt;5.9-55.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041702"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053587"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169823" version="1" comment="curl is &lt;7.37.0-37.11.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030596"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053588"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169824" version="1" comment="libcurl4 is &lt;7.37.0-37.11.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053588"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169825" version="1" comment="libcurl4-32bit is &lt;7.37.0-37.11.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030962"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053588"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169826" version="1" comment="perl-XML-LibXML is &lt;2.0019-6.3.5" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053589"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169827" version="1" comment="ImageMagick is &lt;6.8.8.1-71.26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030422"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053590"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169828" version="1" comment="libMagick++-6_Q16-3 is &lt;6.8.8.1-71.26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053590"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169829" version="1" comment="libMagickCore-6_Q16-1 is &lt;6.8.8.1-71.26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037858"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053590"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169830" version="1" comment="libMagickCore-6_Q16-1-32bit is &lt;6.8.8.1-71.26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037857"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053590"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169831" version="1" comment="libMagickWand-6_Q16-1 is &lt;6.8.8.1-71.26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053590"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161370" version="1" comment="libsystemd0 is &lt;228-150.9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041083"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052663"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161371" version="1" comment="libsystemd0-32bit is &lt;228-150.9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041084"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052663"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161372" version="1" comment="libudev1 is &lt;228-150.9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037378"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052663"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161373" version="1" comment="libudev1-32bit is &lt;228-150.9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052663"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161374" version="1" comment="systemd is &lt;228-150.9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036874"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052663"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161375" version="1" comment="systemd-32bit is &lt;228-150.9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036873"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052663"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161376" version="1" comment="systemd-bash-completion is &lt;228-150.9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052663"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161377" version="1" comment="systemd-sysvinit is &lt;228-150.9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036879"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052663"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161378" version="1" comment="udev is &lt;228-150.9.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031048"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052663"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162220" version="1" comment="libdcerpc-binding0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162221" version="1" comment="libdcerpc-binding0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162222" version="1" comment="libdcerpc0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162223" version="1" comment="libdcerpc0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162224" version="1" comment="libndr-krb5pac0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162225" version="1" comment="libndr-krb5pac0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162226" version="1" comment="libndr-nbt0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162227" version="1" comment="libndr-nbt0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162228" version="1" comment="libndr-standard0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162229" version="1" comment="libndr-standard0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162230" version="1" comment="libndr0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162231" version="1" comment="libndr0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162232" version="1" comment="libnetapi0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162233" version="1" comment="libnetapi0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162234" version="1" comment="libsamba-credentials0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162235" version="1" comment="libsamba-credentials0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162236" version="1" comment="libsamba-errors0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162237" version="1" comment="libsamba-errors0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162238" version="1" comment="libsamba-hostconfig0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162239" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162240" version="1" comment="libsamba-passdb0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162241" version="1" comment="libsamba-passdb0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162242" version="1" comment="libsamba-util0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162243" version="1" comment="libsamba-util0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162244" version="1" comment="libsamdb0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162245" version="1" comment="libsamdb0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162246" version="1" comment="libsmbclient0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162247" version="1" comment="libsmbclient0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162248" version="1" comment="libsmbconf0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162249" version="1" comment="libsmbconf0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162250" version="1" comment="libsmbldap0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162251" version="1" comment="libsmbldap0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162252" version="1" comment="libtevent-util0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162253" version="1" comment="libtevent-util0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162254" version="1" comment="libwbclient0 is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162255" version="1" comment="libwbclient0-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162256" version="1" comment="samba is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162257" version="1" comment="samba-client is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162258" version="1" comment="samba-client-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162259" version="1" comment="samba-doc is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162260" version="1" comment="samba-libs is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162261" version="1" comment="samba-libs-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162262" version="1" comment="samba-winbind is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162263" version="1" comment="samba-winbind-32bit is &lt;4.6.7+git.38.90b2cdb4f22-3.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052776"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162333" version="1" comment="libzypp is &lt;16.15.3-2.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031757"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162334" version="1" comment="yast2-pkg-bindings is &lt;3.2.4-2.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032578"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052790"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162427" version="1" comment="kernel-default is &lt;4.4.82-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162428" version="1" comment="kernel-default-devel is &lt;4.4.82-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162429" version="1" comment="kernel-default-extra is &lt;4.4.82-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162430" version="1" comment="kernel-devel is &lt;4.4.82-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162431" version="1" comment="kernel-macros is &lt;4.4.82-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162432" version="1" comment="kernel-source is &lt;4.4.82-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162433" version="1" comment="kernel-syms is &lt;4.4.82-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052798"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162657" version="1" comment="libixion is &lt;0.12.1-13.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162658" version="1" comment="libixion-0_12-0 is &lt;0.12.1-13.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041713"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052821"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162659" version="1" comment="libmwaw is &lt;0.3.11-7.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162660" version="1" comment="libmwaw-0_3-3 is &lt;0.3.11-7.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052822"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162661" version="1" comment="liborcus is &lt;0.12.1-10.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039156"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052823"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162662" version="1" comment="liborcus-0_12-0 is &lt;0.12.1-10.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041714"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052823"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162663" version="1" comment="libreoffice-base is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162664" version="1" comment="libreoffice-base-drivers-mysql is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162665" version="1" comment="libreoffice-base-drivers-postgresql is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162666" version="1" comment="libreoffice-calc is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162667" version="1" comment="libreoffice-calc-extensions is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162668" version="1" comment="libreoffice-draw is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162669" version="1" comment="libreoffice-filters-optional is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162670" version="1" comment="libreoffice-gnome is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162671" version="1" comment="libreoffice-icon-theme-galaxy is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162672" version="1" comment="libreoffice-icon-theme-tango is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162673" version="1" comment="libreoffice-impress is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162674" version="1" comment="libreoffice-l10n-af is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162675" version="1" comment="libreoffice-l10n-ar is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162676" version="1" comment="libreoffice-l10n-ca is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162677" version="1" comment="libreoffice-l10n-cs is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162678" version="1" comment="libreoffice-l10n-da is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162679" version="1" comment="libreoffice-l10n-de is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162680" version="1" comment="libreoffice-l10n-en is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162681" version="1" comment="libreoffice-l10n-es is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162682" version="1" comment="libreoffice-l10n-fi is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162683" version="1" comment="libreoffice-l10n-fr is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162684" version="1" comment="libreoffice-l10n-gu is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162685" version="1" comment="libreoffice-l10n-hi is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162686" version="1" comment="libreoffice-l10n-hu is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162687" version="1" comment="libreoffice-l10n-it is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162688" version="1" comment="libreoffice-l10n-ja is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162689" version="1" comment="libreoffice-l10n-ko is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162690" version="1" comment="libreoffice-l10n-nb is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162691" version="1" comment="libreoffice-l10n-nl is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162692" version="1" comment="libreoffice-l10n-nn is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162693" version="1" comment="libreoffice-l10n-pl is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162694" version="1" comment="libreoffice-l10n-pt_BR is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041715"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162695" version="1" comment="libreoffice-l10n-pt_PT is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041716"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162696" version="1" comment="libreoffice-l10n-ro is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162697" version="1" comment="libreoffice-l10n-ru is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162698" version="1" comment="libreoffice-l10n-sk is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162699" version="1" comment="libreoffice-l10n-sv is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162700" version="1" comment="libreoffice-l10n-xh is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162701" version="1" comment="libreoffice-l10n-zh_CN is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041717"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162702" version="1" comment="libreoffice-l10n-zh_TW is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041718"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162703" version="1" comment="libreoffice-l10n-zu is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162704" version="1" comment="libreoffice-mailmerge is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162705" version="1" comment="libreoffice-math is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162706" version="1" comment="libreoffice-officebean is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162707" version="1" comment="libreoffice-pyuno is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162708" version="1" comment="libreoffice-writer is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162709" version="1" comment="libreoffice-writer-extensions is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162710" version="1" comment="libreofficekit is &lt;5.3.5.2-43.5.4" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052819"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162711" version="1" comment="libstaroffice is &lt;0.0.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041719"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052824"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162712" version="1" comment="libstaroffice-0_0-0 is &lt;0.0.3-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041720"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052824"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162713" version="1" comment="libzmf is &lt;0.0.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041721"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052825"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162714" version="1" comment="libzmf-0_0-0 is &lt;0.0.1-4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041722"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052825"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162715" version="1" comment="myspell-af_NA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162716" version="1" comment="myspell-af_ZA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039196"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162717" version="1" comment="myspell-ar is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162718" version="1" comment="myspell-ar_AE is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039200"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162719" version="1" comment="myspell-ar_BH is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162720" version="1" comment="myspell-ar_DZ is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162721" version="1" comment="myspell-ar_EG is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039203"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162722" version="1" comment="myspell-ar_IQ is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039204"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162723" version="1" comment="myspell-ar_JO is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039205"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162724" version="1" comment="myspell-ar_KW is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039206"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162725" version="1" comment="myspell-ar_LB is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039207"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162726" version="1" comment="myspell-ar_LY is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039208"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162727" version="1" comment="myspell-ar_MA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039209"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162728" version="1" comment="myspell-ar_OM is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039210"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162729" version="1" comment="myspell-ar_QA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039211"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162730" version="1" comment="myspell-ar_SA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039212"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162731" version="1" comment="myspell-ar_SD is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162732" version="1" comment="myspell-ar_SY is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162733" version="1" comment="myspell-ar_TN is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162734" version="1" comment="myspell-ar_YE is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039216"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162735" version="1" comment="myspell-be_BY is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039217"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162736" version="1" comment="myspell-bg_BG is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039218"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162737" version="1" comment="myspell-bn_BD is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162738" version="1" comment="myspell-bn_IN is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039220"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162739" version="1" comment="myspell-bs is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162740" version="1" comment="myspell-bs_BA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162741" version="1" comment="myspell-ca is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162742" version="1" comment="myspell-ca_AD is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039225"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162743" version="1" comment="myspell-ca_ES is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039226"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162744" version="1" comment="myspell-ca_ES_valencia is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039227"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162745" version="1" comment="myspell-ca_FR is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162746" version="1" comment="myspell-ca_IT is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039229"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162747" version="1" comment="myspell-cs_CZ is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039230"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162748" version="1" comment="myspell-da_DK is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039231"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162749" version="1" comment="myspell-de is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162750" version="1" comment="myspell-de_AT is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039233"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162751" version="1" comment="myspell-de_CH is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162752" version="1" comment="myspell-de_DE is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039235"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162753" version="1" comment="myspell-dictionaries is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039236"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162754" version="1" comment="myspell-el_GR is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162755" version="1" comment="myspell-en is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162756" version="1" comment="myspell-en_AU is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039239"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162757" version="1" comment="myspell-en_BS is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039240"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162758" version="1" comment="myspell-en_BZ is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039241"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162759" version="1" comment="myspell-en_CA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039242"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162760" version="1" comment="myspell-en_GB is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039243"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162761" version="1" comment="myspell-en_GH is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039244"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162762" version="1" comment="myspell-en_IE is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162763" version="1" comment="myspell-en_IN is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039246"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162764" version="1" comment="myspell-en_JM is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039247"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162765" version="1" comment="myspell-en_MW is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162766" version="1" comment="myspell-en_NA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162767" version="1" comment="myspell-en_NZ is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039250"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162768" version="1" comment="myspell-en_PH is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039251"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162769" version="1" comment="myspell-en_TT is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039252"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162770" version="1" comment="myspell-en_US is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039253"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162771" version="1" comment="myspell-en_ZA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039254"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162772" version="1" comment="myspell-en_ZW is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039255"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162773" version="1" comment="myspell-es is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039256"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162774" version="1" comment="myspell-es_AR is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162775" version="1" comment="myspell-es_BO is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039258"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162776" version="1" comment="myspell-es_CL is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162777" version="1" comment="myspell-es_CO is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162778" version="1" comment="myspell-es_CR is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039261"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162779" version="1" comment="myspell-es_CU is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039262"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162780" version="1" comment="myspell-es_DO is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039263"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162781" version="1" comment="myspell-es_EC is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039264"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162782" version="1" comment="myspell-es_ES is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039265"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162783" version="1" comment="myspell-es_GT is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039266"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162784" version="1" comment="myspell-es_HN is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039267"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162785" version="1" comment="myspell-es_MX is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039268"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162786" version="1" comment="myspell-es_NI is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039269"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162787" version="1" comment="myspell-es_PA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039270"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162788" version="1" comment="myspell-es_PE is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039271"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162789" version="1" comment="myspell-es_PR is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039272"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162790" version="1" comment="myspell-es_PY is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162791" version="1" comment="myspell-es_SV is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039274"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162792" version="1" comment="myspell-es_UY is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162793" version="1" comment="myspell-es_VE is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039276"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162794" version="1" comment="myspell-et_EE is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039277"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162795" version="1" comment="myspell-fr_BE is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039278"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162796" version="1" comment="myspell-fr_CA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039279"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162797" version="1" comment="myspell-fr_CH is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039280"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162798" version="1" comment="myspell-fr_FR is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039281"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162799" version="1" comment="myspell-fr_LU is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039282"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162800" version="1" comment="myspell-fr_MC is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039283"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162801" version="1" comment="myspell-gu_IN is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039287"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162802" version="1" comment="myspell-he_IL is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162803" version="1" comment="myspell-hi_IN is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039289"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162804" version="1" comment="myspell-hr_HR is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039290"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162805" version="1" comment="myspell-hu_HU is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039291"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162806" version="1" comment="myspell-it_IT is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039294"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162807" version="1" comment="myspell-lightproof-en is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039298"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162808" version="1" comment="myspell-lightproof-hu_HU is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039299"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162809" version="1" comment="myspell-lightproof-pt_BR is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162810" version="1" comment="myspell-lightproof-ru_RU is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162811" version="1" comment="myspell-lo_LA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162812" version="1" comment="myspell-lt_LT is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162813" version="1" comment="myspell-lv_LV is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162814" version="1" comment="myspell-nb_NO is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039305"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162815" version="1" comment="myspell-nl_BE is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162816" version="1" comment="myspell-nl_NL is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162817" version="1" comment="myspell-nn_NO is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162818" version="1" comment="myspell-no is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162819" version="1" comment="myspell-pl_PL is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162820" version="1" comment="myspell-pt_AO is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162821" version="1" comment="myspell-pt_BR is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039314"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162822" version="1" comment="myspell-pt_PT is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039315"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162823" version="1" comment="myspell-ro is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162824" version="1" comment="myspell-ro_RO is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039317"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162825" version="1" comment="myspell-ru_RU is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039318"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162826" version="1" comment="myspell-sk_SK is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039320"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162827" version="1" comment="myspell-sl_SI is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039321"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162828" version="1" comment="myspell-sr is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039322"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162829" version="1" comment="myspell-sr_CS is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039323"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162830" version="1" comment="myspell-sr_Latn_CS is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039324"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162831" version="1" comment="myspell-sr_Latn_RS is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039325"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162832" version="1" comment="myspell-sr_RS is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039326"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162833" version="1" comment="myspell-sv_FI is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039327"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162834" version="1" comment="myspell-sv_SE is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039328"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162835" version="1" comment="myspell-te is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039330"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162836" version="1" comment="myspell-te_IN is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039331"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162837" version="1" comment="myspell-th_TH is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039332"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162838" version="1" comment="myspell-uk_UA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039333"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162839" version="1" comment="myspell-vi is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162840" version="1" comment="myspell-vi_VN is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039335"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162841" version="1" comment="myspell-zu_ZA is &lt;20170511-16.2.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039336"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052826"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162936" version="1" comment="xen is &lt;4.9.0_11-3.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052833"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162937" version="1" comment="xen-libs is &lt;4.9.0_11-3.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052833"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162938" version="1" comment="xen-libs-32bit is &lt;4.9.0_11-3.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052833"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162969" version="1" comment="libzypp is &lt;16.15.6-2.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031757"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052838"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162970" version="1" comment="zypper is &lt;1.13.32-21.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031758"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052839"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009162971" version="1" comment="zypper-log is &lt;1.13.32-21.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034953"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052839"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163515" version="1" comment="qemu is &lt;2.9.0-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052897"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163516" version="1" comment="qemu-block-curl is &lt;2.9.0-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052897"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163517" version="1" comment="qemu-ipxe is &lt;1.0.0-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009038739"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163518" version="1" comment="qemu-kvm is &lt;2.9.0-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052897"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163519" version="1" comment="qemu-seabios is &lt;1.10.2-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052898"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163520" version="1" comment="qemu-sgabios is &lt;8-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052899"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163521" version="1" comment="qemu-tools is &lt;2.9.0-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052897"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163522" version="1" comment="qemu-vgabios is &lt;1.10.2-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052898"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163523" version="1" comment="qemu-x86 is &lt;2.9.0-6.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052897"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163576" version="1" comment="xen is &lt;4.9.0_12-3.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163577" version="1" comment="xen-libs is &lt;4.9.0_12-3.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009163578" version="1" comment="xen-libs-32bit is &lt;4.9.0_12-3.15.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052904"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164293" version="1" comment="kernel-default is &lt;4.4.82-6.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164294" version="1" comment="kernel-default-devel is &lt;4.4.82-6.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164295" version="1" comment="kernel-default-extra is &lt;4.4.82-6.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164296" version="1" comment="kernel-devel is &lt;4.4.82-6.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164297" version="1" comment="kernel-macros is &lt;4.4.82-6.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164298" version="1" comment="kernel-source is &lt;4.4.82-6.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164299" version="1" comment="kernel-syms is &lt;4.4.82-6.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052945"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164735" version="1" comment="libspice-server1 is &lt;0.12.8-3.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038700"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164736" version="1" comment="spice is &lt;0.12.8-3.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164772" version="1" comment="libvirt is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164773" version="1" comment="libvirt-admin is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041751"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164774" version="1" comment="libvirt-client is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164775" version="1" comment="libvirt-daemon is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164776" version="1" comment="libvirt-daemon-config-network is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164777" version="1" comment="libvirt-daemon-config-nwfilter is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164778" version="1" comment="libvirt-daemon-driver-interface is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164779" version="1" comment="libvirt-daemon-driver-libxl is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164780" version="1" comment="libvirt-daemon-driver-lxc is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164781" version="1" comment="libvirt-daemon-driver-network is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164782" version="1" comment="libvirt-daemon-driver-nodedev is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164783" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164784" version="1" comment="libvirt-daemon-driver-qemu is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164785" version="1" comment="libvirt-daemon-driver-secret is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164786" version="1" comment="libvirt-daemon-driver-storage is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164787" version="1" comment="libvirt-daemon-driver-storage-core is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164788" version="1" comment="libvirt-daemon-driver-storage-disk is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041753"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164789" version="1" comment="libvirt-daemon-driver-storage-iscsi is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041754"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164790" version="1" comment="libvirt-daemon-driver-storage-logical is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041755"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164791" version="1" comment="libvirt-daemon-driver-storage-mpath is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164792" version="1" comment="libvirt-daemon-driver-storage-rbd is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041757"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164793" version="1" comment="libvirt-daemon-driver-storage-scsi is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041758"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164794" version="1" comment="libvirt-daemon-lxc is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164795" version="1" comment="libvirt-daemon-qemu is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164796" version="1" comment="libvirt-daemon-xen is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164797" version="1" comment="libvirt-doc is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164798" version="1" comment="libvirt-libs is &lt;3.3.0-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041759"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052988"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165129" version="1" comment="libdcerpc-binding0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165130" version="1" comment="libdcerpc-binding0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165131" version="1" comment="libdcerpc0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165132" version="1" comment="libdcerpc0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165133" version="1" comment="libndr-krb5pac0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165134" version="1" comment="libndr-krb5pac0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165135" version="1" comment="libndr-nbt0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165136" version="1" comment="libndr-nbt0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165137" version="1" comment="libndr-standard0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165138" version="1" comment="libndr-standard0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165139" version="1" comment="libndr0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165140" version="1" comment="libndr0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165141" version="1" comment="libnetapi0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165142" version="1" comment="libnetapi0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165143" version="1" comment="libsamba-credentials0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165144" version="1" comment="libsamba-credentials0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165145" version="1" comment="libsamba-errors0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165146" version="1" comment="libsamba-errors0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165147" version="1" comment="libsamba-hostconfig0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165148" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165149" version="1" comment="libsamba-passdb0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165150" version="1" comment="libsamba-passdb0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165151" version="1" comment="libsamba-util0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165152" version="1" comment="libsamba-util0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165153" version="1" comment="libsamdb0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165154" version="1" comment="libsamdb0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165155" version="1" comment="libsmbclient0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165156" version="1" comment="libsmbclient0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165157" version="1" comment="libsmbconf0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165158" version="1" comment="libsmbconf0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165159" version="1" comment="libsmbldap0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165160" version="1" comment="libsmbldap0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165161" version="1" comment="libtevent-util0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165162" version="1" comment="libtevent-util0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165163" version="1" comment="libwbclient0 is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165164" version="1" comment="libwbclient0-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165165" version="1" comment="samba is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165166" version="1" comment="samba-client is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165167" version="1" comment="samba-client-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165168" version="1" comment="samba-doc is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165169" version="1" comment="samba-libs is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165170" version="1" comment="samba-libs-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165171" version="1" comment="samba-winbind is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165172" version="1" comment="samba-winbind-32bit is &lt;4.6.7+git.51.327af8d0a11-3.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053032"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165687" version="1" comment="xen is &lt;4.9.0_14-3.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053068"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165688" version="1" comment="xen-libs is &lt;4.9.0_14-3.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053068"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165689" version="1" comment="xen-libs-32bit is &lt;4.9.0_14-3.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053068"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166003" version="1" comment="kernel-default is &lt;4.4.92-6.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166004" version="1" comment="kernel-default-devel is &lt;4.4.92-6.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166005" version="1" comment="kernel-default-extra is &lt;4.4.92-6.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166006" version="1" comment="kernel-devel is &lt;4.4.92-6.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166007" version="1" comment="kernel-macros is &lt;4.4.92-6.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166008" version="1" comment="kernel-source is &lt;4.4.92-6.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166009" version="1" comment="kernel-syms is &lt;4.4.92-6.18.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053116"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166010" version="1" comment="libvirt is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166011" version="1" comment="libvirt-admin is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041751"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166012" version="1" comment="libvirt-client is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166013" version="1" comment="libvirt-daemon is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166014" version="1" comment="libvirt-daemon-config-network is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166015" version="1" comment="libvirt-daemon-config-nwfilter is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166016" version="1" comment="libvirt-daemon-driver-interface is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166017" version="1" comment="libvirt-daemon-driver-libxl is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166018" version="1" comment="libvirt-daemon-driver-lxc is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166019" version="1" comment="libvirt-daemon-driver-network is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166020" version="1" comment="libvirt-daemon-driver-nodedev is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166021" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166022" version="1" comment="libvirt-daemon-driver-qemu is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166023" version="1" comment="libvirt-daemon-driver-secret is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166024" version="1" comment="libvirt-daemon-driver-storage is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166025" version="1" comment="libvirt-daemon-driver-storage-core is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166026" version="1" comment="libvirt-daemon-driver-storage-disk is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041753"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166027" version="1" comment="libvirt-daemon-driver-storage-iscsi is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041754"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166028" version="1" comment="libvirt-daemon-driver-storage-logical is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041755"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166029" version="1" comment="libvirt-daemon-driver-storage-mpath is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166030" version="1" comment="libvirt-daemon-driver-storage-rbd is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041757"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166031" version="1" comment="libvirt-daemon-driver-storage-scsi is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041758"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166032" version="1" comment="libvirt-daemon-lxc is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166033" version="1" comment="libvirt-daemon-qemu is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166034" version="1" comment="libvirt-daemon-xen is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166035" version="1" comment="libvirt-doc is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166036" version="1" comment="libvirt-libs is &lt;3.3.0-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041759"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053117"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166448" version="1" comment="qemu is &lt;2.9.1-6.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166449" version="1" comment="qemu-block-curl is &lt;2.9.1-6.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166450" version="1" comment="qemu-ipxe is &lt;1.0.0-6.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053176"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166451" version="1" comment="qemu-kvm is &lt;2.9.1-6.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166452" version="1" comment="qemu-seabios is &lt;1.10.2-6.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053177"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166453" version="1" comment="qemu-sgabios is &lt;8-6.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053178"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166454" version="1" comment="qemu-tools is &lt;2.9.1-6.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166455" version="1" comment="qemu-vgabios is &lt;1.10.2-6.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053177"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166456" version="1" comment="qemu-x86 is &lt;2.9.1-6.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053175"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166525" version="1" comment="SuSEfirewall2 is &lt;3.6.312.333-3.10.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042018"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053191"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166526" version="1" comment="libsss_nss_idmap0 is &lt;1.13.4-34.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038189"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167298" version="1" comment="xen is &lt;4.9.1_02-3.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053306"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167299" version="1" comment="xen-libs is &lt;4.9.1_02-3.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053306"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167300" version="1" comment="xen-libs-32bit is &lt;4.9.1_02-3.21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053306"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167247" version="1" comment="libdcerpc-binding0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167248" version="1" comment="libdcerpc-binding0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167249" version="1" comment="libdcerpc0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167250" version="1" comment="libdcerpc0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167251" version="1" comment="libndr-krb5pac0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167252" version="1" comment="libndr-krb5pac0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167253" version="1" comment="libndr-nbt0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167254" version="1" comment="libndr-nbt0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167255" version="1" comment="libndr-standard0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167256" version="1" comment="libndr-standard0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167257" version="1" comment="libndr0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167258" version="1" comment="libndr0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167259" version="1" comment="libnetapi0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167260" version="1" comment="libnetapi0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167261" version="1" comment="libsamba-credentials0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167262" version="1" comment="libsamba-credentials0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167263" version="1" comment="libsamba-errors0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167264" version="1" comment="libsamba-errors0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167265" version="1" comment="libsamba-hostconfig0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167266" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167267" version="1" comment="libsamba-passdb0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167268" version="1" comment="libsamba-passdb0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167269" version="1" comment="libsamba-util0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167270" version="1" comment="libsamba-util0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167271" version="1" comment="libsamdb0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167272" version="1" comment="libsamdb0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167273" version="1" comment="libsmbclient0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167274" version="1" comment="libsmbclient0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167275" version="1" comment="libsmbconf0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167276" version="1" comment="libsmbconf0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167277" version="1" comment="libsmbldap0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167278" version="1" comment="libsmbldap0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167279" version="1" comment="libtevent-util0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167280" version="1" comment="libtevent-util0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167281" version="1" comment="libwbclient0 is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167282" version="1" comment="libwbclient0-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167283" version="1" comment="samba is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167284" version="1" comment="samba-client is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167285" version="1" comment="samba-client-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167286" version="1" comment="samba-doc is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167287" version="1" comment="samba-libs is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167288" version="1" comment="samba-libs-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167289" version="1" comment="samba-winbind is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167290" version="1" comment="samba-winbind-32bit is &lt;4.6.9+git.59.c2cff9cea4c-3.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053304"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167761" version="1" comment="kernel-default is &lt;4.4.92-6.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167762" version="1" comment="kernel-default-devel is &lt;4.4.92-6.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167763" version="1" comment="kernel-default-extra is &lt;4.4.92-6.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167764" version="1" comment="kernel-devel is &lt;4.4.92-6.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167765" version="1" comment="kernel-macros is &lt;4.4.92-6.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167766" version="1" comment="kernel-source is &lt;4.4.92-6.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167767" version="1" comment="kernel-syms is &lt;4.4.92-6.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053338"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168755" version="1" comment="kernel-default is &lt;4.4.103-6.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168756" version="1" comment="kernel-default-devel is &lt;4.4.103-6.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168757" version="1" comment="kernel-default-extra is &lt;4.4.103-6.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168758" version="1" comment="kernel-devel is &lt;4.4.103-6.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168759" version="1" comment="kernel-macros is &lt;4.4.103-6.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168760" version="1" comment="kernel-source is &lt;4.4.103-6.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168761" version="1" comment="kernel-syms is &lt;4.4.103-6.33.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053436"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169053" version="1" comment="kernel-default is &lt;4.4.103-6.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169054" version="1" comment="kernel-default-devel is &lt;4.4.103-6.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169055" version="1" comment="kernel-default-extra is &lt;4.4.103-6.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169056" version="1" comment="kernel-devel is &lt;4.4.103-6.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169057" version="1" comment="kernel-macros is &lt;4.4.103-6.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169058" version="1" comment="kernel-source is &lt;4.4.103-6.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009169059" version="1" comment="kernel-syms is &lt;4.4.103-6.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053472"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170468" version="1" comment="libvirt is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170469" version="1" comment="libvirt-admin is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041751"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170470" version="1" comment="libvirt-client is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170471" version="1" comment="libvirt-daemon is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170472" version="1" comment="libvirt-daemon-config-network is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170473" version="1" comment="libvirt-daemon-config-nwfilter is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170474" version="1" comment="libvirt-daemon-driver-interface is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170475" version="1" comment="libvirt-daemon-driver-libxl is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170476" version="1" comment="libvirt-daemon-driver-lxc is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170477" version="1" comment="libvirt-daemon-driver-network is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170478" version="1" comment="libvirt-daemon-driver-nodedev is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170479" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170480" version="1" comment="libvirt-daemon-driver-qemu is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170481" version="1" comment="libvirt-daemon-driver-secret is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170482" version="1" comment="libvirt-daemon-driver-storage is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170483" version="1" comment="libvirt-daemon-driver-storage-core is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170484" version="1" comment="libvirt-daemon-driver-storage-disk is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041753"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170485" version="1" comment="libvirt-daemon-driver-storage-iscsi is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041754"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170486" version="1" comment="libvirt-daemon-driver-storage-logical is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041755"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170487" version="1" comment="libvirt-daemon-driver-storage-mpath is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170488" version="1" comment="libvirt-daemon-driver-storage-rbd is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041757"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170489" version="1" comment="libvirt-daemon-driver-storage-scsi is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041758"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170490" version="1" comment="libvirt-daemon-lxc is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170491" version="1" comment="libvirt-daemon-qemu is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170492" version="1" comment="libvirt-daemon-xen is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170493" version="1" comment="libvirt-doc is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170494" version="1" comment="libvirt-libs is &lt;3.3.0-5.13.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041759"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053672"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170495" version="1" comment="libtasn1 is &lt;4.9-3.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038046"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053673"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170496" version="1" comment="libtasn1-6 is &lt;4.9-3.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038681"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053673"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170497" version="1" comment="libtasn1-6-32bit is &lt;4.9-3.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038682"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053673"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170841" version="1" comment="libXdmcp is &lt;1.1.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041708"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053697"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170842" version="1" comment="libXdmcp6 is &lt;1.1.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041711"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053697"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170843" version="1" comment="libXdmcp6-32bit is &lt;1.1.1-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041712"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053697"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170844" version="1" comment="libICE is &lt;1.0.8-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041703"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170845" version="1" comment="libICE6 is &lt;1.0.8-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041706"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170846" version="1" comment="libICE6-32bit is &lt;1.0.8-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041707"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170847" version="1" comment="jasper is &lt;1.900.14-195.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053698"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170848" version="1" comment="libjasper1 is &lt;1.900.14-195.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034778"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053698"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170849" version="1" comment="libjasper1-32bit is &lt;1.900.14-195.5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034777"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053698"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170955" version="1" comment="kernel-default is &lt;4.4.114-94.11.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053715"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170956" version="1" comment="kernel-default-devel is &lt;4.4.114-94.11.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053715"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170957" version="1" comment="kernel-default-extra is &lt;4.4.114-94.11.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053715"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170958" version="1" comment="kernel-devel is &lt;4.4.114-94.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170959" version="1" comment="kernel-macros is &lt;4.4.114-94.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170960" version="1" comment="kernel-source is &lt;4.4.114-94.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009170961" version="1" comment="kernel-syms is &lt;4.4.114-94.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053718"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171273" version="1" comment="xen is &lt;4.9.1_08-3.26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171274" version="1" comment="xen-libs is &lt;4.9.1_08-3.26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031482"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171275" version="1" comment="xen-libs-32bit is &lt;4.9.1_08-3.26.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053765"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171276" version="1" comment="libreoffice-base is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171277" version="1" comment="libreoffice-base-drivers-mysql is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171278" version="1" comment="libreoffice-base-drivers-postgresql is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171279" version="1" comment="libreoffice-calc is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171280" version="1" comment="libreoffice-calc-extensions is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171281" version="1" comment="libreoffice-draw is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171282" version="1" comment="libreoffice-filters-optional is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171283" version="1" comment="libreoffice-gnome is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171284" version="1" comment="libreoffice-icon-theme-galaxy is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034360"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171285" version="1" comment="libreoffice-icon-theme-tango is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034363"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171286" version="1" comment="libreoffice-impress is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171287" version="1" comment="libreoffice-l10n-af is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171288" version="1" comment="libreoffice-l10n-ar is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171289" version="1" comment="libreoffice-l10n-ca is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171290" version="1" comment="libreoffice-l10n-cs is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171291" version="1" comment="libreoffice-l10n-da is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171292" version="1" comment="libreoffice-l10n-de is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171293" version="1" comment="libreoffice-l10n-en is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171294" version="1" comment="libreoffice-l10n-es is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171295" version="1" comment="libreoffice-l10n-fi is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171296" version="1" comment="libreoffice-l10n-fr is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171297" version="1" comment="libreoffice-l10n-gu is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171298" version="1" comment="libreoffice-l10n-hi is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171299" version="1" comment="libreoffice-l10n-hu is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171300" version="1" comment="libreoffice-l10n-it is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171301" version="1" comment="libreoffice-l10n-ja is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171302" version="1" comment="libreoffice-l10n-ko is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171303" version="1" comment="libreoffice-l10n-nb is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171304" version="1" comment="libreoffice-l10n-nl is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171305" version="1" comment="libreoffice-l10n-nn is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171306" version="1" comment="libreoffice-l10n-pl is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171307" version="1" comment="libreoffice-l10n-pt_BR is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041715"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171308" version="1" comment="libreoffice-l10n-pt_PT is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041716"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171309" version="1" comment="libreoffice-l10n-ro is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171310" version="1" comment="libreoffice-l10n-ru is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171311" version="1" comment="libreoffice-l10n-sk is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171312" version="1" comment="libreoffice-l10n-sv is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171313" version="1" comment="libreoffice-l10n-xh is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171314" version="1" comment="libreoffice-l10n-zh_CN is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041717"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171315" version="1" comment="libreoffice-l10n-zh_TW is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041718"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171316" version="1" comment="libreoffice-l10n-zu is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171317" version="1" comment="libreoffice-mailmerge is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171318" version="1" comment="libreoffice-math is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171319" version="1" comment="libreoffice-officebean is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171320" version="1" comment="libreoffice-pyuno is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171321" version="1" comment="libreoffice-writer is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171322" version="1" comment="libreoffice-writer-extensions is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171323" version="1" comment="libreofficekit is &lt;5.4.5.1-43.19.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053764"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171529" version="1" comment="drm is &lt;4.9.33-4.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042229"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053789"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009171530" version="1" comment="drm-kmp-default is &lt;4.9.33_k4.4.114_94.11-4.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041794"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053790"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172798" version="1" comment="augeas is &lt;1.2.0-17.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172799" version="1" comment="augeas-lenses is &lt;1.2.0-17.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038073"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009172800" version="1" comment="libaugeas0 is &lt;1.2.0-17.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053987"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173378" version="1" comment="libdcerpc-binding0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037446"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173379" version="1" comment="libdcerpc-binding0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037445"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173380" version="1" comment="libdcerpc0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037452"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173381" version="1" comment="libdcerpc0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037451"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173382" version="1" comment="libndr-krb5pac0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037459"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173383" version="1" comment="libndr-krb5pac0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037458"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173384" version="1" comment="libndr-nbt0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037462"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173385" version="1" comment="libndr-nbt0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037461"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173386" version="1" comment="libndr-standard0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173387" version="1" comment="libndr-standard0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037464"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173388" version="1" comment="libndr0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037467"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173389" version="1" comment="libndr0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037466"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173390" version="1" comment="libnetapi0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032932"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173391" version="1" comment="libnetapi0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173392" version="1" comment="libsamba-credentials0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037477"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173393" version="1" comment="libsamba-credentials0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037476"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173394" version="1" comment="libsamba-errors0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041074"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173395" version="1" comment="libsamba-errors0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041075"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173396" version="1" comment="libsamba-hostconfig0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037480"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173397" version="1" comment="libsamba-hostconfig0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037479"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173398" version="1" comment="libsamba-passdb0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039539"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173399" version="1" comment="libsamba-passdb0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039540"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173400" version="1" comment="libsamba-util0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037486"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173401" version="1" comment="libsamba-util0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037485"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173402" version="1" comment="libsamdb0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037489"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173403" version="1" comment="libsamdb0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037488"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173404" version="1" comment="libsmbclient0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032935"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173405" version="1" comment="libsmbclient0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032933"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173406" version="1" comment="libsmbconf0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037495"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173407" version="1" comment="libsmbconf0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037494"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173408" version="1" comment="libsmbldap0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037498"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173409" version="1" comment="libsmbldap0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037497"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173410" version="1" comment="libtalloc2 is &lt;2.1.10-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033914"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054070"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173411" version="1" comment="libtalloc2-32bit is &lt;2.1.10-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034652"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054070"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173412" version="1" comment="libtevent-util0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037501"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173413" version="1" comment="libtevent-util0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037500"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173414" version="1" comment="libtevent0 is &lt;0.9.34-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173415" version="1" comment="libtevent0-32bit is &lt;0.9.34-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034887"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054067"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173416" version="1" comment="libwbclient0 is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032948"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173417" version="1" comment="libwbclient0-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032946"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173418" version="1" comment="python-talloc is &lt;2.1.10-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042332"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054070"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173419" version="1" comment="python-talloc-32bit is &lt;2.1.10-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042333"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054070"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173420" version="1" comment="samba is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173421" version="1" comment="samba-client is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030443"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173422" version="1" comment="samba-client-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030770"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173423" version="1" comment="samba-doc is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030444"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173424" version="1" comment="samba-libs is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037504"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173425" version="1" comment="samba-libs-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037503"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173426" version="1" comment="samba-winbind is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030448"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173427" version="1" comment="samba-winbind-32bit is &lt;4.6.13+git.72.2a684235f41-3.21.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030771"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054069"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173428" version="1" comment="talloc is &lt;2.1.10-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038089"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054070"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173429" version="1" comment="qemu is &lt;2.9.1-6.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054071"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173430" version="1" comment="qemu-block-curl is &lt;2.9.1-6.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054071"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173431" version="1" comment="qemu-ipxe is &lt;1.0.0-6.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054072"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173432" version="1" comment="qemu-kvm is &lt;2.9.1-6.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054071"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173433" version="1" comment="qemu-seabios is &lt;1.10.2-6.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054073"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173434" version="1" comment="qemu-sgabios is &lt;8-6.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054074"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173435" version="1" comment="qemu-tools is &lt;2.9.1-6.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054071"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173436" version="1" comment="qemu-vgabios is &lt;1.10.2-6.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054073"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173437" version="1" comment="qemu-x86 is &lt;2.9.1-6.12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054071"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173614" version="1" comment="kernel-default is &lt;4.4.120-94.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173615" version="1" comment="kernel-default-devel is &lt;4.4.120-94.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173616" version="1" comment="kernel-default-extra is &lt;4.4.120-94.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173617" version="1" comment="kernel-devel is &lt;4.4.120-94.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173618" version="1" comment="kernel-macros is &lt;4.4.120-94.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173619" version="1" comment="kernel-source is &lt;4.4.120-94.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009173620" version="1" comment="kernel-syms is &lt;4.4.120-94.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054097"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174154" version="1" comment="libspice-client-glib-2_0-8 is &lt;0.33-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037406"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174155" version="1" comment="libspice-client-glib-helper is &lt;0.33-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041082"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174156" version="1" comment="libspice-client-gtk-3_0-5 is &lt;0.33-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041750"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174157" version="1" comment="libspice-controller0 is &lt;0.33-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037398"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174158" version="1" comment="spice-gtk is &lt;0.33-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037400"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174159" version="1" comment="typelib-1_0-SpiceClientGlib-2_0 is &lt;0.33-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037403"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174160" version="1" comment="typelib-1_0-SpiceClientGtk-3_0 is &lt;0.33-3.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037405"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054165"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174161" version="1" comment="libidn is &lt;1.28-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033251"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054166"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174162" version="1" comment="libidn11 is &lt;1.28-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038785"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054166"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174163" version="1" comment="libidn11-32bit is &lt;1.28-5.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038786"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054166"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174321" version="1" comment="libvirt is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031851"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174322" version="1" comment="libvirt-admin is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041751"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174323" version="1" comment="libvirt-client is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033904"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174324" version="1" comment="libvirt-daemon is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037564"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174325" version="1" comment="libvirt-daemon-config-network is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037640"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174326" version="1" comment="libvirt-daemon-config-nwfilter is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037565"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174327" version="1" comment="libvirt-daemon-driver-interface is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037566"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174328" version="1" comment="libvirt-daemon-driver-libxl is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037581"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174329" version="1" comment="libvirt-daemon-driver-lxc is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037567"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174330" version="1" comment="libvirt-daemon-driver-network is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037568"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174331" version="1" comment="libvirt-daemon-driver-nodedev is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174332" version="1" comment="libvirt-daemon-driver-nwfilter is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037570"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174333" version="1" comment="libvirt-daemon-driver-qemu is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037571"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174334" version="1" comment="libvirt-daemon-driver-secret is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037572"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174335" version="1" comment="libvirt-daemon-driver-storage is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037573"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174336" version="1" comment="libvirt-daemon-driver-storage-core is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041752"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174337" version="1" comment="libvirt-daemon-driver-storage-disk is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041753"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174338" version="1" comment="libvirt-daemon-driver-storage-iscsi is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041754"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174339" version="1" comment="libvirt-daemon-driver-storage-logical is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041755"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174340" version="1" comment="libvirt-daemon-driver-storage-mpath is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041756"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174341" version="1" comment="libvirt-daemon-driver-storage-rbd is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041757"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174342" version="1" comment="libvirt-daemon-driver-storage-scsi is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041758"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174343" version="1" comment="libvirt-daemon-lxc is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037576"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174344" version="1" comment="libvirt-daemon-qemu is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037577"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174345" version="1" comment="libvirt-daemon-xen is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037583"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174346" version="1" comment="libvirt-doc is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031849"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174347" version="1" comment="libvirt-libs is &lt;3.3.0-5.19.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041759"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054189"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174348" version="1" comment="virt-install is &lt;1.4.1-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042365"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174349" version="1" comment="virt-manager is &lt;1.4.1-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033785"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174350" version="1" comment="virt-manager-common is &lt;1.4.1-5.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042366"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054190"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174351" version="1" comment="libzzip-0-13 is &lt;0.13.67-10.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041555"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054191"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174352" version="1" comment="zziplib is &lt;0.13.67-10.8.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041556"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054191"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174364" version="1" comment="libpython3_4m1_0 is &lt;3.4.6-25.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054194"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174365" version="1" comment="python3 is &lt;3.4.6-25.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054194"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174366" version="1" comment="python3-base is &lt;3.4.6-25.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054194"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174367" version="1" comment="python3-curses is &lt;3.4.6-25.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037063"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054194"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174438" version="1" comment="evince is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032701"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174439" version="1" comment="evince-browser-plugin is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174440" version="1" comment="evince-lang is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034039"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174441" version="1" comment="evince-plugin-djvudocument is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174442" version="1" comment="evince-plugin-dvidocument is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041058"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174443" version="1" comment="evince-plugin-pdfdocument is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041059"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174444" version="1" comment="evince-plugin-psdocument is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041060"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174445" version="1" comment="evince-plugin-tiffdocument is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041061"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174446" version="1" comment="evince-plugin-xpsdocument is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041062"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174447" version="1" comment="libevdocument3-4 is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040970"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174448" version="1" comment="libevview3-3 is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040971"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174449" version="1" comment="nautilus-evince is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034041"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174450" version="1" comment="typelib-1_0-EvinceDocument-3_0 is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040972"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174451" version="1" comment="typelib-1_0-EvinceView-3_0 is &lt;3.20.2-6.22.9" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040973"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054201"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174452" version="1" comment="ntp is &lt;4.2.8p11-64.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030975"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174453" version="1" comment="ntp-doc is &lt;4.2.8p11-64.3.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030974"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054202"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174552" version="1" comment="libwireshark8 is &lt;2.2.14-48.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041620"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054223"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174553" version="1" comment="libwiretap6 is &lt;2.2.14-48.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041621"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054223"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174554" version="1" comment="libwscodecs1 is &lt;2.2.14-48.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041622"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054223"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174555" version="1" comment="libwsutil7 is &lt;2.2.14-48.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041623"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054223"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174556" version="1" comment="wireshark is &lt;2.2.14-48.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031055"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054223"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174557" version="1" comment="wireshark-gtk is &lt;2.2.14-48.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041569"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054223"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174742" version="1" comment="kernel-default is &lt;4.4.126-94.22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174743" version="1" comment="kernel-default-devel is &lt;4.4.126-94.22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033554"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174744" version="1" comment="kernel-default-extra is &lt;4.4.126-94.22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031049"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174745" version="1" comment="kernel-devel is &lt;4.4.126-94.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033888"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054237"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174746" version="1" comment="kernel-macros is &lt;4.4.126-94.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054237"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174747" version="1" comment="kernel-source is &lt;4.4.126-94.22.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054237"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174748" version="1" comment="kernel-syms is &lt;4.4.126-94.22.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054235"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174749" version="1" comment="PackageKit-backend-zypp is &lt;1.1.3-24.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035661"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174750" version="1" comment="PackageKit-gstreamer-plugin is &lt;1.1.3-24.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035669"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174751" version="1" comment="PackageKit-gtk3-module is &lt;1.1.3-24.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035671"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174752" version="1" comment="PackageKit-lang is &lt;1.1.3-24.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009032964"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174753" version="1" comment="libpackagekit-glib2-18 is &lt;1.1.3-24.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042384"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174754" version="1" comment="typelib-1_0-PackageKitGlib-1_0 is &lt;1.1.3-24.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009035685"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054236"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174874" version="1" comment="rzsz is &lt;0.12.21~rc-1001.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042408"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054247"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174878" version="1" comment="perl is &lt;5.18.2-12.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174879" version="1" comment="perl-32bit is &lt;5.18.2-12.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030599"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174880" version="1" comment="perl-base is &lt;5.18.2-12.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031056"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174881" version="1" comment="perl-doc is &lt;5.18.2-12.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031057"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054250"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174882" version="1" comment="zsh is &lt;5.0.5-6.7.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042379"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054251"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174883" version="1" comment="boost is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031617"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174884" version="1" comment="boost-license1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040521"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174885" version="1" comment="gnome-documents is &lt;3.20.1-10.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042409"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174886" version="1" comment="gnome-documents-lang is &lt;3.20.1-10.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042410"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174887" version="1" comment="gnome-documents_books-common is &lt;3.20.1-10.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042411"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174888" version="1" comment="gnome-shell-search-provider-documents is &lt;3.20.1-10.6.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042412"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054253"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174889" version="1" comment="libboost_atomic1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040524"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174890" version="1" comment="libboost_date_time1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040525"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174891" version="1" comment="libboost_filesystem1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040526"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174892" version="1" comment="libboost_iostreams1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040527"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174893" version="1" comment="libboost_locale1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040541"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174894" version="1" comment="libboost_program_options1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040528"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174895" version="1" comment="libboost_random1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040546"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174896" version="1" comment="libboost_regex1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040529"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174897" version="1" comment="libboost_signals1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040530"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174898" version="1" comment="libboost_system1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040531"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174899" version="1" comment="libboost_thread1_54_0 is &lt;1.54.0-26.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040532"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054252"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174900" version="1" comment="libepubgen is &lt;0.1.0-6.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039108"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054254"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174901" version="1" comment="libepubgen-0_1-1 is &lt;0.1.0-6.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042413"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054254"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174902" version="1" comment="libixion is &lt;0.13.0-13.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054255"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174903" version="1" comment="libixion-0_13-0 is &lt;0.13.0-13.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042414"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054255"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174904" version="1" comment="libmwaw is &lt;0.3.13-7.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174905" version="1" comment="libmwaw-0_3-3 is &lt;0.3.13-7.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054256"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174906" version="1" comment="liborcus is &lt;0.13.4-10.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039156"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174907" version="1" comment="liborcus-0_13-0 is &lt;0.13.4-10.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042415"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054257"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174908" version="1" comment="libqxp is &lt;0.0.1-1.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042416"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054258"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174909" version="1" comment="libqxp-0_0-0 is &lt;0.0.1-1.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042417"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054258"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174910" version="1" comment="libreoffice-base is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034086"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174911" version="1" comment="libreoffice-base-drivers-mysql is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034347"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174912" version="1" comment="libreoffice-base-drivers-postgresql is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174913" version="1" comment="libreoffice-branding-upstream is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034089"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174914" version="1" comment="libreoffice-calc is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034091"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174915" version="1" comment="libreoffice-calc-extensions is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174916" version="1" comment="libreoffice-draw is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034094"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174917" version="1" comment="libreoffice-filters-optional is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034096"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174918" version="1" comment="libreoffice-gnome is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034098"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174919" version="1" comment="libreoffice-gtk2 is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042418"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174920" version="1" comment="libreoffice-icon-themes is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034120"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174921" version="1" comment="libreoffice-impress is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034122"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174922" version="1" comment="libreoffice-l10n-af is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034125"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174923" version="1" comment="libreoffice-l10n-ar is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034126"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174924" version="1" comment="libreoffice-l10n-ca is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034127"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174925" version="1" comment="libreoffice-l10n-cs is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034128"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174926" version="1" comment="libreoffice-l10n-da is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034129"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174927" version="1" comment="libreoffice-l10n-de is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034130"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174928" version="1" comment="libreoffice-l10n-en is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174929" version="1" comment="libreoffice-l10n-es is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034133"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174930" version="1" comment="libreoffice-l10n-fi is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034136"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174931" version="1" comment="libreoffice-l10n-fr is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034137"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174932" version="1" comment="libreoffice-l10n-gu is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038221"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174933" version="1" comment="libreoffice-l10n-hi is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174934" version="1" comment="libreoffice-l10n-hu is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034138"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174935" version="1" comment="libreoffice-l10n-it is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034139"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174936" version="1" comment="libreoffice-l10n-ja is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034140"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174937" version="1" comment="libreoffice-l10n-ko is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174938" version="1" comment="libreoffice-l10n-nb is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034141"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174939" version="1" comment="libreoffice-l10n-nl is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034142"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174940" version="1" comment="libreoffice-l10n-nn is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034143"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174941" version="1" comment="libreoffice-l10n-pl is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034144"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174942" version="1" comment="libreoffice-l10n-pt_BR is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041715"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174943" version="1" comment="libreoffice-l10n-pt_PT is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041716"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174944" version="1" comment="libreoffice-l10n-ro is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038020"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174945" version="1" comment="libreoffice-l10n-ru is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034147"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174946" version="1" comment="libreoffice-l10n-sk is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034148"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174947" version="1" comment="libreoffice-l10n-sv is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034149"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174948" version="1" comment="libreoffice-l10n-xh is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174949" version="1" comment="libreoffice-l10n-zh_CN is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041717"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174950" version="1" comment="libreoffice-l10n-zh_TW is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041718"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174951" version="1" comment="libreoffice-l10n-zu is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034153"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174952" version="1" comment="libreoffice-mailmerge is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034160"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174953" version="1" comment="libreoffice-math is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034161"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174954" version="1" comment="libreoffice-officebean is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034163"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174955" version="1" comment="libreoffice-pyuno is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034165"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174956" version="1" comment="libreoffice-writer is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034187"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174957" version="1" comment="libreoffice-writer-extensions is &lt;6.0.3.2-43.30.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009034234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054249"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174958" version="1" comment="libstaroffice is &lt;0.0.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041719"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054259"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174959" version="1" comment="libstaroffice-0_0-0 is &lt;0.0.5-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009041720"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054259"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174960" version="1" comment="libwps is &lt;0.4.7-10.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039188"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174961" version="1" comment="libwps-0_4-4 is &lt;0.4.7-10.7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039189"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054260"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174962" version="1" comment="myspell-af_NA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039195"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174963" version="1" comment="myspell-af_ZA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039196"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174964" version="1" comment="myspell-ar is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039199"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174965" version="1" comment="myspell-ar_AE is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039200"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174966" version="1" comment="myspell-ar_BH is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039201"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174967" version="1" comment="myspell-ar_DZ is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039202"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174968" version="1" comment="myspell-ar_EG is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039203"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174969" version="1" comment="myspell-ar_IQ is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039204"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174970" version="1" comment="myspell-ar_JO is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039205"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174971" version="1" comment="myspell-ar_KW is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039206"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174972" version="1" comment="myspell-ar_LB is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039207"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174973" version="1" comment="myspell-ar_LY is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039208"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174974" version="1" comment="myspell-ar_MA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039209"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174975" version="1" comment="myspell-ar_OM is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039210"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174976" version="1" comment="myspell-ar_QA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039211"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174977" version="1" comment="myspell-ar_SA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039212"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174978" version="1" comment="myspell-ar_SD is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039213"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174979" version="1" comment="myspell-ar_SY is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039214"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174980" version="1" comment="myspell-ar_TN is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039215"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174981" version="1" comment="myspell-ar_YE is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039216"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174982" version="1" comment="myspell-be_BY is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039217"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174983" version="1" comment="myspell-bg_BG is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039218"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174984" version="1" comment="myspell-bn_BD is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039219"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174985" version="1" comment="myspell-bn_IN is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039220"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174986" version="1" comment="myspell-bs is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039222"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174987" version="1" comment="myspell-bs_BA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039223"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174988" version="1" comment="myspell-ca is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039224"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174989" version="1" comment="myspell-ca_AD is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039225"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174990" version="1" comment="myspell-ca_ES is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039226"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174991" version="1" comment="myspell-ca_ES_valencia is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039227"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174992" version="1" comment="myspell-ca_FR is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039228"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174993" version="1" comment="myspell-ca_IT is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039229"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174994" version="1" comment="myspell-cs_CZ is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039230"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174995" version="1" comment="myspell-da_DK is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039231"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174996" version="1" comment="myspell-de is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039232"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174997" version="1" comment="myspell-de_AT is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039233"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174998" version="1" comment="myspell-de_CH is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039234"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009174999" version="1" comment="myspell-de_DE is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039235"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175000" version="1" comment="myspell-dictionaries is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039236"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175001" version="1" comment="myspell-el_GR is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039237"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175002" version="1" comment="myspell-en is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039238"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175003" version="1" comment="myspell-en_AU is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039239"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175004" version="1" comment="myspell-en_BS is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039240"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175005" version="1" comment="myspell-en_BZ is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039241"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175006" version="1" comment="myspell-en_CA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039242"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175007" version="1" comment="myspell-en_GB is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039243"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175008" version="1" comment="myspell-en_GH is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039244"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175009" version="1" comment="myspell-en_IE is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039245"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175010" version="1" comment="myspell-en_IN is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039246"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175011" version="1" comment="myspell-en_JM is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039247"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175012" version="1" comment="myspell-en_MW is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175013" version="1" comment="myspell-en_NA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039249"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175014" version="1" comment="myspell-en_NZ is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039250"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175015" version="1" comment="myspell-en_PH is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039251"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175016" version="1" comment="myspell-en_TT is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039252"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175017" version="1" comment="myspell-en_US is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039253"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175018" version="1" comment="myspell-en_ZA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039254"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175019" version="1" comment="myspell-en_ZW is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039255"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175020" version="1" comment="myspell-es is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039256"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175021" version="1" comment="myspell-es_AR is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039257"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175022" version="1" comment="myspell-es_BO is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039258"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175023" version="1" comment="myspell-es_CL is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039259"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175024" version="1" comment="myspell-es_CO is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039260"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175025" version="1" comment="myspell-es_CR is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039261"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175026" version="1" comment="myspell-es_CU is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039262"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175027" version="1" comment="myspell-es_DO is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039263"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175028" version="1" comment="myspell-es_EC is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039264"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175029" version="1" comment="myspell-es_ES is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039265"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175030" version="1" comment="myspell-es_GT is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039266"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175031" version="1" comment="myspell-es_HN is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039267"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175032" version="1" comment="myspell-es_MX is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039268"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175033" version="1" comment="myspell-es_NI is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039269"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175034" version="1" comment="myspell-es_PA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039270"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175035" version="1" comment="myspell-es_PE is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039271"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175036" version="1" comment="myspell-es_PR is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039272"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175037" version="1" comment="myspell-es_PY is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039273"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175038" version="1" comment="myspell-es_SV is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039274"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175039" version="1" comment="myspell-es_UY is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039275"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175040" version="1" comment="myspell-es_VE is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039276"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175041" version="1" comment="myspell-et_EE is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039277"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175042" version="1" comment="myspell-fr_BE is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039278"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175043" version="1" comment="myspell-fr_CA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039279"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175044" version="1" comment="myspell-fr_CH is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039280"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175045" version="1" comment="myspell-fr_FR is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039281"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175046" version="1" comment="myspell-fr_LU is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039282"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175047" version="1" comment="myspell-fr_MC is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039283"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175048" version="1" comment="myspell-gu_IN is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039287"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175049" version="1" comment="myspell-he_IL is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039288"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175050" version="1" comment="myspell-hi_IN is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039289"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175051" version="1" comment="myspell-hr_HR is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039290"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175052" version="1" comment="myspell-hu_HU is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039291"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175053" version="1" comment="myspell-id is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042419"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175054" version="1" comment="myspell-id_ID is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009042420"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175055" version="1" comment="myspell-it_IT is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039294"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175056" version="1" comment="myspell-lightproof-en is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039298"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175057" version="1" comment="myspell-lightproof-hu_HU is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039299"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175058" version="1" comment="myspell-lightproof-pt_BR is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039300"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175059" version="1" comment="myspell-lightproof-ru_RU is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039301"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175060" version="1" comment="myspell-lo_LA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039302"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175061" version="1" comment="myspell-lt_LT is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039303"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175062" version="1" comment="myspell-lv_LV is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039304"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175063" version="1" comment="myspell-nb_NO is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039305"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175064" version="1" comment="myspell-nl_BE is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039307"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175065" version="1" comment="myspell-nl_NL is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039308"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175066" version="1" comment="myspell-nn_NO is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039309"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175067" version="1" comment="myspell-no is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039310"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175068" version="1" comment="myspell-pl_PL is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039312"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175069" version="1" comment="myspell-pt_AO is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039313"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175070" version="1" comment="myspell-pt_BR is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039314"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175071" version="1" comment="myspell-pt_PT is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039315"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175072" version="1" comment="myspell-ro is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039316"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175073" version="1" comment="myspell-ro_RO is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039317"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175074" version="1" comment="myspell-ru_RU is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039318"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175075" version="1" comment="myspell-sk_SK is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039320"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175076" version="1" comment="myspell-sl_SI is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039321"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175077" version="1" comment="myspell-sr is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039322"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175078" version="1" comment="myspell-sr_CS is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039323"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175079" version="1" comment="myspell-sr_Latn_CS is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039324"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175080" version="1" comment="myspell-sr_Latn_RS is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039325"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175081" version="1" comment="myspell-sr_RS is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039326"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175082" version="1" comment="myspell-sv_FI is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039327"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175083" version="1" comment="myspell-sv_SE is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039328"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175084" version="1" comment="myspell-te is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039330"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175085" version="1" comment="myspell-te_IN is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039331"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175086" version="1" comment="myspell-th_TH is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039332"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175087" version="1" comment="myspell-uk_UA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039333"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175088" version="1" comment="myspell-vi is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039334"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175089" version="1" comment="myspell-vi_VN is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039335"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009175090" version="1" comment="myspell-zu_ZA is &lt;20180403-16.9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039336"/>
		<state state_ref="oval:org.opensuse.security:ste:2009054261"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168956" version="1" comment="qemu is &lt;2.9.1-6.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009031639"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053464"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168957" version="1" comment="qemu-block-curl is &lt;2.9.1-6.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038463"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053464"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168958" version="1" comment="qemu-ipxe is &lt;1.0.0-6.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037631"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053465"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168959" version="1" comment="qemu-kvm is &lt;2.9.1-6.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038465"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053464"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168960" version="1" comment="qemu-seabios is &lt;1.10.2-6.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037633"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053466"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168961" version="1" comment="qemu-sgabios is &lt;8-6.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037634"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053467"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168962" version="1" comment="qemu-tools is &lt;2.9.1-6.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009036248"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053464"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168963" version="1" comment="qemu-vgabios is &lt;1.10.2-6.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037635"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053466"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168964" version="1" comment="qemu-x86 is &lt;2.9.1-6.9.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038468"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053464"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009117426" version="1" comment="sle-ha-release is ==12" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045919"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114327" version="1" comment="libnetfilter_cthelper is &lt;1.0.0-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038967"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045652"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114329" version="1" comment="libnetfilter_cthelper0 is &lt;1.0.0-7.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038969"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045652"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114331" version="1" comment="libnetfilter_cttimeout is &lt;1.0.0-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038971"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045653"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114333" version="1" comment="libnetfilter_cttimeout1 is &lt;1.0.0-9.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038973"/>
		<state state_ref="oval:org.opensuse.security:ste:2009045653"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009114744" version="1" comment="haproxy is &lt;1.5.4-2.4.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038990"/>
		<state state_ref="oval:org.opensuse.security:ste:2009041221"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146027" version="1" comment="ctdb is &lt;4.2.4-18.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050892"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009146028" version="1" comment="samba is &lt;4.2.4-18.30.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050892"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125856" version="1" comment="ctdb is &lt;4.2.4-18.17.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047356"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165226" version="1" comment="ctdb is &lt;4.2.4-18.44.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165227" version="1" comment="samba is &lt;4.2.4-18.44.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053041"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150062" version="1" comment="ctdb is &lt;4.2.4-18.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051460"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150063" version="1" comment="samba is &lt;4.2.4-18.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009030429"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051460"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009130777" version="1" comment="hawk2 is &lt;1.0.1+git.1456406635.49e230d-12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040588"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047905"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125858" version="1" comment="sle-ha-release is ==12.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039399"/>
		<state state_ref="oval:org.opensuse.security:ste:2009046486"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009131309" version="1" comment="ctdb is &lt;4.2.4-26.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047970"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136223" version="1" comment="libpacemaker3 is &lt;1.1.13-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048640"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136224" version="1" comment="pacemaker is &lt;1.1.13-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040861"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048640"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136225" version="1" comment="pacemaker-cli is &lt;1.1.13-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040862"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048640"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136226" version="1" comment="pacemaker-cts is &lt;1.1.13-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048640"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136227" version="1" comment="pacemaker-remote is &lt;1.1.13-20.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040864"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048640"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136228" version="1" comment="libpcreposix0 is &lt;8.39-5.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009038694"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048635"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145954" version="1" comment="ctdb is &lt;4.2.4-28.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050877"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009125857" version="1" comment="ctdb is &lt;4.2.4-16.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009047357"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167083" version="1" comment="ctdb is &lt;4.2.4-28.24.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053282"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150064" version="1" comment="ctdb is &lt;4.2.4-28.8.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051457"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155848" version="1" comment="ctdb is &lt;4.2.4-28.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051742"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135875" version="1" comment="libpacemaker3 is &lt;1.1.15-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040860"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048584"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135876" version="1" comment="pacemaker is &lt;1.1.15-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040861"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048584"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135877" version="1" comment="pacemaker-cli is &lt;1.1.15-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040862"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048584"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135878" version="1" comment="pacemaker-cts is &lt;1.1.15-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040863"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048584"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009135879" version="1" comment="pacemaker-remote is &lt;1.1.15-21.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040864"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048584"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136654" version="1" comment="cluster-md-kmp-default is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136655" version="1" comment="cluster-network-kmp-default is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136656" version="1" comment="dlm-kmp-default is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136657" version="1" comment="gfs2-kmp-default is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009136658" version="1" comment="ocfs2-kmp-default is &lt;4.4.21-84.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009048707"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142729" version="1" comment="cluster-md-kmp-default is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142730" version="1" comment="cluster-network-kmp-default is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142731" version="1" comment="dlm-kmp-default is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142732" version="1" comment="gfs2-kmp-default is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009142733" version="1" comment="ocfs2-kmp-default is &lt;4.4.21-90.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050323"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009145955" version="1" comment="ctdb is &lt;4.4.2-31.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050879"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157590" version="1" comment="cluster-md-kmp-default is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157591" version="1" comment="cluster-network-kmp-default is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157592" version="1" comment="dlm-kmp-default is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157593" version="1" comment="gfs2-kmp-default is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009157594" version="1" comment="ocfs2-kmp-default is &lt;4.4.59-92.24.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051976"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158783" version="1" comment="cluster-md-kmp-default is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158784" version="1" comment="cluster-network-kmp-default is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158785" version="1" comment="dlm-kmp-default is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158786" version="1" comment="gfs2-kmp-default is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009158787" version="1" comment="ocfs2-kmp-default is &lt;4.4.74-92.29.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052066"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161410" version="1" comment="cluster-md-kmp-default is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161411" version="1" comment="cluster-network-kmp-default is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161412" version="1" comment="dlm-kmp-default is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161413" version="1" comment="gfs2-kmp-default is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161414" version="1" comment="ocfs2-kmp-default is &lt;4.4.74-92.32.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052666"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161415" version="1" comment="hawk is &lt;1.0.0+git.1448981395.15fb8b9-4.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039356"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052669"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161416" version="1" comment="hawk-templates is &lt;1.0.0+git.1448981395.15fb8b9-4.3.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039357"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052669"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161769" version="1" comment="cluster-md-kmp-default is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161770" version="1" comment="cluster-network-kmp-default is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161771" version="1" comment="dlm-kmp-default is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161772" version="1" comment="gfs2-kmp-default is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009161773" version="1" comment="ocfs2-kmp-default is &lt;4.4.74-92.35.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052706"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164300" version="1" comment="cluster-md-kmp-default is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164301" version="1" comment="cluster-network-kmp-default is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164302" version="1" comment="dlm-kmp-default is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164303" version="1" comment="gfs2-kmp-default is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009164304" version="1" comment="ocfs2-kmp-default is &lt;4.4.74-92.38.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009052944"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009165026" version="1" comment="ctdb is &lt;4.4.2-38.11.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053022"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166120" version="1" comment="cluster-md-kmp-default is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166121" version="1" comment="cluster-network-kmp-default is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166122" version="1" comment="dlm-kmp-default is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166123" version="1" comment="gfs2-kmp-default is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009166124" version="1" comment="ocfs2-kmp-default is &lt;4.4.90-92.45.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053130"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167230" version="1" comment="ctdb is &lt;4.4.2-38.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053300"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167768" version="1" comment="cluster-md-kmp-default is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167769" version="1" comment="cluster-network-kmp-default is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167770" version="1" comment="dlm-kmp-default is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167771" version="1" comment="gfs2-kmp-default is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009167772" version="1" comment="ocfs2-kmp-default is &lt;4.4.90-92.50.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053337"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168800" version="1" comment="cluster-md-kmp-default is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168801" version="1" comment="cluster-network-kmp-default is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168802" version="1" comment="dlm-kmp-default is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168803" version="1" comment="gfs2-kmp-default is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009168804" version="1" comment="ocfs2-kmp-default is &lt;4.4.103-92.53.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009053440"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149016" version="1" comment="cluster-md-kmp-default is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149017" version="1" comment="cluster-network-kmp-default is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149018" version="1" comment="dlm-kmp-default is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149019" version="1" comment="gfs2-kmp-default is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009149020" version="1" comment="ocfs2-kmp-default is &lt;4.4.49-92.11.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051331"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150065" version="1" comment="ctdb is &lt;4.4.2-36.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051459"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150066" version="1" comment="cluster-md-kmp-default is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150067" version="1" comment="cluster-network-kmp-default is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150068" version="1" comment="dlm-kmp-default is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150069" version="1" comment="gfs2-kmp-default is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009150070" version="1" comment="ocfs2-kmp-default is &lt;4.4.49-92.14.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051455"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155058" version="1" comment="cluster-md-kmp-default is &lt;4.4.59-92.17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051642"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155059" version="1" comment="cluster-network-kmp-default is &lt;4.4.59-92.17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051642"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155060" version="1" comment="dlm-kmp-default is &lt;4.4.59-92.17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051642"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155061" version="1" comment="gfs2-kmp-default is &lt;4.4.59-92.17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051642"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155062" version="1" comment="ocfs2-kmp-default is &lt;4.4.59-92.17.3" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051642"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009155849" version="1" comment="ctdb is &lt;4.4.2-38.6.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009037976"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051743"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147234" version="1" comment="cluster-md-kmp-default is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147235" version="1" comment="cluster-network-kmp-default is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147236" version="1" comment="dlm-kmp-default is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147237" version="1" comment="gfs2-kmp-default is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009039361"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009147238" version="1" comment="ocfs2-kmp-default is &lt;4.4.38-93.1" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033152"/>
		<state state_ref="oval:org.opensuse.security:ste:2009050993"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156972" version="1" comment="cluster-md-kmp-default is &lt;4.4.59-92.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040916"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156973" version="1" comment="cluster-network-kmp-default is &lt;4.4.59-92.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009033150"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:2009156974" version="1" comment="dlm-kmp-default is &lt;4.4.59-92.20.2" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
		<object object_ref="oval:org.opensuse.security:obj:2009040917"/>
		<state state_ref="oval:org.opensuse.security:ste:2009051911"/>
	</rpminfo_test>
	<rpminfo_test id="oval:org.opensuse.security:tst:200